Privacy Policy

Last updated: July 2026

1. Data controller

The data controller responsible for your personal data is Alejandro Ferrer Barber, self-employed professional (autónomo), NIF 46757296K, Barcelona, Spain. Contact: [email protected].

2. What data we collect

Account data: your email address, used to create your account and sign you in via magic link.
Audio files: the mixes you upload and the masters generated from them, stored temporarily to let you download and re-download your work.
Usage data: mastering settings you apply (EQ, gain, stem adjustments), credit balance and transaction history.
Payment data: processed directly by Stripe. We do not receive or store your full card number.
Technical data: basic server logs (IP address, browser type, timestamps) generated automatically for security and troubleshooting.

3. Why we process your data

To provide the service (contract performance): processing your audio, managing your account and credits, delivering your masters.
To process payments (contract performance / legal obligation): handling purchases via Stripe and keeping records required for tax purposes.
To communicate with you (legitimate interest): sending login links, purchase confirmations, and service-related notices.
To keep the service secure (legitimate interest): detecting abuse, fraud, or technical issues.

4. How long we keep your data

Uploaded mixes and rendered masters: deleted automatically 30 days after creation.
Account and credit transaction data: kept for as long as your account is active, and afterwards for the period required by Spanish tax law (generally up to 6 years for invoicing records).
You can request deletion of your account at any time; audio files are removed immediately, while billing records are retained only as long as legally required.

5. Who we share data with

We use the following processors to operate SoundJuice. Each only receives the data necessary to perform its function:

Supabase — authentication and database hosting.
Stripe — payment processing.
Resend — transactional email delivery (login links, receipts).
Cloudflare — network security and content delivery.

Some of these providers may process data outside the European Economic Area (EEA), in particular the United States. In those cases, transfers are covered by appropriate safeguards such as Standard Contractual Clauses or equivalent frameworks recognized under the GDPR. We do not sell your personal data to anyone.

6. Your rights

Under the GDPR, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Request a portable copy of your data.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es).

7. Cookies

SoundJuice uses only the strictly necessary cookies required for you to stay logged in and for the service to function (authentication session cookies). We do not currently use advertising or third-party tracking cookies.

8. Security

We use industry-standard measures, including encrypted connections (HTTPS) and access controls, to protect your data. No system is 100% secure, but we take reasonable steps to safeguard your information against unauthorized access, loss, or misuse.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this Privacy Policy or your data can be sent to [email protected].