What we hold, and for how long.

1. Who we are

Mazmazika is operated by Berativ - Almalt, Rorschach, Switzerland (CHE-161.844.223). Full details are on the imprint. We are the data controller for everything described here, and you can reach us at info@mazmazika.com.

Because we are established in Switzerland and serve visitors in the EU/EEA and the UK, we apply both the Swiss Federal Act on Data Protection (FADP) and the GDPR.

2. What we collect

If you create an account

Your email address and display name, and a password hash if you registered with a password. If you sign in with Google, we receive your email address, name and profile-picture URL from Google's identity token — we never see your Google password.

If you are signed out

The free tier has daily limits, and enforcing them without an account means recognising a returning visitor. We therefore keep a guest record containing your IP address, a device identifier, your browser's user-agent string, and the first and last time we saw you. IPv6 addresses are truncated to a /64 block rather than stored in full. We also cache a per-IP geolocation and VPN verdict so the same lookup is not repeated on every request.

If you later create an account, that guest record is linked to it so your usage carries over rather than counting twice.

If you subscribe

Payments are taken by Stripe or PayPal. Card numbers never reach our servers. What we store is the subscription record — plan, status, renewal date, whether auto-renew is on — and the payment processor's response for each transaction, which includes their customer and subscription identifiers and the billing email you gave them.

While you use the tools

We log which tool was used, when, by which account or guest, whether the run succeeded, and whether it hit a free-tier limit. This is what the daily allowances are counted from, and what tells us when something is broken.

Preferences

Theme, language, motion settings and similar choices are kept in your browser, not on our servers.

3. Your audio and links

Several tools work on material you provide — a file you upload, or a link you paste. That material is processed on our servers to produce the result you asked for: separated stems, a chord chart, an MP3, a transcription.

Three commitments about it:

• We do not listen to it, and no person at Mazmazika reviews it as a matter of course.
• We do not sell it, and we do not use it to train models.
• We do not publish it. Results are private to your account unless you choose to share one.

You are responsible for having the right to process what you upload — see the terms.

4. How long we keep it

These are the defaults the platform runs on today. An administrator can change them, and if we change them materially we will update this page.

5. Cookies and local storage

Google's own handling of analytics and advertising data is governed by Google's privacy policy. You can opt out of Google's personalised advertising in your Google ad settings, and block cookies generally in your browser settings — the tools will still work.

6. Why we are allowed to

Under the GDPR our legal bases are:

• Performing our contract with you — running your account, processing the files you submit, taking payment.
• Legitimate interests — enforcing free-tier limits, preventing abuse, keeping the service working and improving it. We have weighed these against your interests, and the guest-identification data exists only because the free tier cannot work without it.
• Legal obligation — keeping accounting records.
• Consent — where we ask for it, which you can withdraw at any time.

7. Who else sees it

We do not sell personal data. We share it only with the providers that make the service run:

We may also disclose data where the law requires it, or to establish or defend a legal claim.

8. Where it goes

Our servers are in Europe. Some of the providers above are based in the United States, so using them involves transferring data there. Those transfers rely on the European Commission's standard contractual clauses and the EU–US and Swiss–US Data Privacy Frameworks.

9. Security

The site is served over HTTPS throughout. Passwords are stored hashed, never in plain text. Card details never touch our infrastructure. Access to the production database is restricted to the people who operate the service.

No system is perfectly secure, and we would rather say so than imply otherwise. If you find a vulnerability, please report it to info@mazmazika.com before disclosing it publicly.

10. Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your account and its data, subject to the accounting records above;
• restrict or object to a particular use, including our legitimate-interest processing;
• export your data in a portable form;
• withdraw consent, where we relied on it.

Email info@mazmazika.com and we will respond within 30 days. There is no charge.

Much of this you can do yourself: files are deletable from My Files, and subscriptions are managed from your account page.

If you think we have handled your data badly, you can complain to the Swiss Federal Data Protection and Information Commissioner, or to your local supervisory authority in the EU/EEA or the UK. We would appreciate the chance to fix it first.

11. Children

Mazmazika is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

12. Changes

When this policy changes we update the date at the top. If a change materially affects how we handle your data, we will say so on the site rather than rely on you noticing a new date.