Privacy Policy
Last updated: May 2026
1. Who We Are
RemixSo ("we," "us," or "our") provides an AI-powered content repurposing service. We are committed to protecting your privacy and handling your data transparently.
2. What Data We Collect
- Account data: email address, name (if provided), and authentication credentials managed by Supabase Auth.
- Content data: articles, blog posts, and text you submit for AI processing, plus the AI-generated outputs.
- Payment data: billing information is collected and processed entirely by Dodo Payments. We do not store full credit card numbers on our servers.
- Usage data:how many generations you've used in a billing period, and anonymous analytics via Vercel.
- Technical data: browser type, device information, and IP address (collected automatically by our hosting provider).
3. How We Use Your Data
- To provide the content repurposing service.
- To analyze your writing style so AI outputs match your voice.
- To manage your account and subscription.
- To send transactional emails (e.g., billing receipts).
- To improve the service through aggregated, anonymous analytics.
We do not use your content to train AI models, and we do not sell your data.
4. Third-Party Sub-processors
We rely on the following services to operate:
- Supabase — database, authentication, and file storage (GDPR compliant, data hosted in EU or US regions).
- Dodo Payments — payment processing (PCI DSS Level 1 certified, data hosted in the US).
- DeepSeek— AI content generation. The text content you submit for repurposing is transmitted to DeepSeek's API for processing. DeepSeek's servers and legal entity are based in the People's Republic of China. DeepSeek does not use data submitted via API for model training. Data transmitted to DeepSeek is processed in real-time and is not stored by DeepSeek beyond the duration of the API request. We have executed Standard Contractual Clauses (SCCs) to ensure adequate data protection safeguards for this cross-border transfer, in compliance with GDPR Article 46.
- Vercel — hosting and edge functions (data hosted in the US region).
5. Cookies
We use only functional cookies required for authentication (Supabase Auth session tokens) and payment processing (Dodo Payments). We do not use advertising or tracking cookies. See our cookie banner for details.
6. Data Retention
- Active accounts: data is retained as long as your account remains active.
- Deleted accounts: all personal data, content, and generations are permanently deleted within 30 days. Anonymized aggregate statistics may be retained.
- Payment records: retained for the minimum period required by applicable tax law (typically 7 years in the US).
7. Your Rights
Depending on your location, you may have the following rights under GDPR, CCPA, or equivalent laws:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate data.
- Erasure: delete your account and all associated data (available directly in your Account settings).
- Portability: receive your data in a machine-readable format.
- Objection: object to certain processing activities.
To exercise any of these rights, email us at the address below. We will respond within 30 days as required by law.
8. International Data Transfers
Our service infrastructure is hosted in the United States. If you are located outside the US, your account data, usage data, and payment data will be transferred to and processed in the US.
In addition, the text content you submit for AI repurposing is transmitted to DeepSeek's API, which is operated by a company based in the People's Republic of China. This transfer is protected by Standard Contractual Clauses (SCCs) in compliance with GDPR Article 46. DeepSeek processes your content solely for the purpose of generating AI outputs in real-time and does not retain your data after the request completes.
Where applicable, we ensure adequate safeguards for all international data transfers through Standard Contractual Clauses (SCCs), data processing agreements with each sub-processor, and data minimization practices.
9. Children's Privacy
RemixSo is not intended for anyone under the age of 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email or in-app notice. Continued use after changes constitutes acceptance.
11. Contact
For privacy-related inquiries, data requests, or to exercise your rights:
Email: jeffwgr@gmail.com