Privacy policy

This policy explains what personal data Capify, Inc. ("we") collects when you use Midify, why, who processes it for us, and the choices you have. We are the controller of your personal data. Contact us at contact@capify.ai.

What we collect

• Account data: your name, email address, password (stored hashed) or Google sign-in identifier, and your plan.
• Audio you upload and what we make from it: separated stems, note data, MIDI files and your edits.
• Usage data: the jobs you run, credits used, and technical logs (IP address, browser, errors) that keep the service secure and working.
• Payment data: handled by Paddle. We receive your subscription status and country, never your full card details.
• Analytics: if you accept analytics cookies, Google Analytics collects pseudonymous data about how the site is used.

What we do not collect

Quick mode and hum to MIDI run entirely in your browser. Audio you record or open there stays on your device and is never sent to us.

Why we use it, and our legal bases

• To provide the service you signed up for: process your audio, store your jobs, run your account (performance of a contract).
• To take payments and meet tax and accounting rules (contract and legal obligation).
• To keep the service secure, prevent abuse of the free plan and fix problems (legitimate interests).
• To send service emails such as verification, receipts and important changes (contract). Marketing emails only with your consent.
• To understand how the site is used through analytics (consent, which you can withdraw at any time).

We do not use your uploads to train AI models. Any future opt-in to contribute your own recordings will ask separately and record your consent.

Who processes your data

We use these providers, each under a data processing agreement or equivalent terms:

• Hetzner Online GmbH: Web hosting, database and file storage (Germany (EU)).
• RunPod: GPU processing of uploaded audio (stem separation and transcription) (United States).
• Paddle: Payments, invoicing and sales tax, as our merchant of record (United Kingdom).
• Brevo: Account and service emails (France (EU)).
• Google Analytics: Website analytics, only after you accept analytics cookies (United States).

Where data leaves the UK or the European Economic Area, we rely on adequacy decisions or the European Commission's standard contractual clauses. We never sell your personal data.

How long we keep it

• Uploaded audio, stems, note data and MIDI: deleted 30 days after the job, or sooner when you delete them.
• Account data: for as long as your account is open, then deleted within 30 days of closing it.
• Payment and invoice records: as long as tax law requires.
• Security logs: up to 90 days.

Your rights

Depending on where you live, including under the GDPR and UK GDPR, you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. To delete your data, or for any of these requests, email contact@capify.ai from the address on your account. We reply within one month. You can also complain to your local data protection authority.

Cookies

We use essential cookies to keep you signed in, protect forms and remember your light or dark setting. Analytics cookies are set only after you accept them, and you can change your choice at any time.

Children

Midify is not intended for children under 16, and we do not knowingly collect their data.

Changes

If we change this policy in a meaningful way, we will update the date above and tell account holders by email.