Privacy Policy

1. What we collect

When you use Premix, we collect:

• Email address — provided at checkout, used to send delivery notifications and receipts
• Project name — provided at checkout, used to identify your project
• Payment information — handled entirely by Stripe. Lemonwater LLC never sees, stores, or processes your card details
• Audio files — uploaded for processing. Stored temporarily in encrypted cloud storage and deleted 7 days after delivery
• Output specifications — festival target, processing preferences, and notes you provide on the specs page
• Technical logs — processing logs for QC and debugging purposes, retained for 30 days

We do not use cookies for tracking. We do not run advertising. We do not use analytics that profile individual users.

2. How we use your data

Your data is used exclusively to:

• Process your audio files and deliver the output
• Send you delivery notifications and receipts
• Respond to support inquiries
• Fulfill legal obligations (e.g. tax records for payments)

Your audio files are never used to train machine learning models. Your files are never shared with third parties. Your email address is never sold or used for marketing without explicit consent.

3. Data retention

• Audio files: permanently deleted 7 days after delivery
• Processing logs: retained for 30 days, then deleted
• Email address and project name: retained for 12 months for support and legal purposes, then deleted
• Payment records: retained as required by tax law (typically 7 years), held by Stripe

4. Third-party services

Premix uses the following third-party services to operate:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• MASV — large file transfer. Files in transit are encrypted. Subject to MASV's Privacy Policy.
• DigitalOcean — cloud infrastructure and file storage. Subject to DigitalOcean's Privacy Policy.
• Resend — delivery notification emails. Your email and download links are sent when processing completes.

No data is shared with any other third party. No advertising networks, no data brokers, no analytics platforms.

5. Security

We take reasonable technical measures to protect your data:

• All connections are encrypted via TLS
• Files are stored in encrypted cloud storage with access controls
• Payment data is handled by Stripe — never touches our servers
• Webhook endpoints are validated with HMAC signatures
• Access to production systems is restricted and logged

No system is completely secure. In the event of a data breach affecting your personal information, we will notify you by email within 72 hours of discovery.

6. Your rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request deletion of your personal data (subject to legal retention requirements)
• Correct inaccurate personal data
• Object to processing of your personal data

To exercise any of these rights, email info@lemonwater.io. We will respond within 30 days.

7. Children

Premix is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it immediately.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL with an updated date. We will notify you by email if changes are material.