Back to home

Privacy Policy

Last updated

  • Provider: Neutune, Inc.
  • Address: 651 N Broad St, Suite 201, Middletown, DE 19709, United States
  • Phone: (302) 349-2783
  • Privacy contact: cs@neutune.com

This Privacy Policy explains how Neutune, Inc. ("Neutune," "we," "us," or "our") collects, uses, stores, discloses, transfers, retains, deletes, and protects personal data through the shared Neutune Account used for MixAudio and NeuSynth.

1. Who we are and the scope of this Policy

1.1 Data controller

Neutune, Inc. is the controller or business responsible for personal data covered by this Policy, except where another organization is expressly identified as independently responsible for a particular service.

1.2 Account Services covered

This Policy applies to the common Neutune account, sign-in, authentication, security, and account-management system available through neutune.com, accounts.neutune.com, and connected login interfaces in MixAudio and NeuSynth (the "Account Services"). The Account Services provide one identity used to access both Products. MusicDNA is not covered by this Policy or the current Account Services scope.

1.3 Product-specific policies

This Policy does not replace the separate Privacy Policies for MixAudio or NeuSynth. Those policies govern product-specific data, including audio, music, stems, prompts, context audio, generated outputs, remixes, uploads, downloads, exports, likes, saves, ratings, comments, publishing, detailed usage, transactions, credits, monetisation, and product-specific AI or model-improvement practices.

The Account Services process shared identity, authentication, eligibility, Product linkage and entitlement, security, session, consent, and account-support information. They do not store Product audio or creative content as part of authentication and do not receive full payment-card details. If the same information is processed within both the Account Services and a Product, this Policy governs its use within the Account Services and the relevant Product Privacy Policy governs its product-specific use. However, where information received from Google or derived from Google information is provided to or processed within MixAudio or NeuSynth, the Google-data restrictions in this Policy continue to apply and prevail over any inconsistent Product Policy.

Google user data, data derived from Google user data, and shared Account data covered by this Policy may not be used for Product marketing, targeted advertising, model training, model evaluation, product improvement, or another product-specific purpose not expressly permitted by this Policy. NeuSynth may use separately collected eligible adult Product data for model improvement as described in the NeuSynth Privacy Policy. That separate permission never applies to Google user data, data derived from Google user data, or shared Account data covered by this Policy.

1.4 Meaning of personal data

"Personal data" means information that identifies, relates to, describes, or can reasonably be linked with an individual or household. It does not include information lawfully anonymized so that it can no longer reasonably identify a person.

2. Personal data we collect

2.1 Google Sign-In data

When you choose Sign in with Google, Neutune requests only the basic OpenID Connect scopes openid, email, and profile. Google's authentication response may include basic profile claims. Neutune uses and stores only the stable Google account identifier, verified email address, name, and optional profile image needed for authentication and basic Account display.

Neutune does not request or access Gmail messages, Google Drive files, Google Calendar, Contacts, Photos, documents, payment information, or content from other Google or Google Workspace services. We process the authentication response transiently to validate sign-in. We do not request offline access or retain Google API access or refresh tokens for accessing other Google services. We may issue and store Neutune session identifiers or authentication cookies to keep you securely signed in.

2.2 Account and contact information

  • Neutune Account identifier, name, verified email address, country or region, and optional profile image;
  • account settings, language, time-zone, and communication preferences where provided;
  • dates and records relating to creation, linking, migration, acceptance, update, suspension, recovery, or deletion; and
  • information you provide when managing the Account.

2.3 Age, eligibility, and guardian consent

  • age, date of birth, or age range and country or region;
  • a parent or legal guardian's name and contact details;
  • records showing when and how verified guardian consent was given or withdrawn;
  • verification status; and
  • limited information reasonably necessary to verify age, identity, authority, or consent.

We minimize the information used for verification. A specialist provider, if used, may process it only for the contracted verification purpose and under appropriate safeguards.

2.4 Product linkage and entitlement

  • which Products are linked to the Account and the Product-specific user identifiers;
  • account tier, plan status, access status, or feature entitlement;
  • whether access is active, expired, cancelled, suspended, restricted, or pending deletion; and
  • limited billing-status information needed to recognize access or resolve an account issue.

Full payment-card information and detailed Product transactions are handled under the relevant Product Privacy Policy and the payment provider's notice.

2.5 Technical, authentication, and security data

  • IP address and approximate location inferred from it;
  • browser, device, operating system, application, language, and time-zone information;
  • session identifiers, authentication method, timestamps, and successful, failed, or interrupted login attempts;
  • account-linking, recovery, sign-out, consent, and access-control events;
  • security, fraud, abuse, and device-risk signals; and
  • error, diagnostic, performance, and audit logs for the Account Services.

2.6 Support and communications

When you contact us, we may collect your contact information, message, attachments you choose to provide, support history, and information about how the issue was investigated and resolved. Do not send sensitive information that is unnecessary for your request.

2.7 Cookies and similar technologies

The Account Services may use cookies, local storage, and similar technologies to authenticate users, maintain secure sessions, remember settings, prevent fraud or abuse, balance traffic, maintain reliability, and diagnose problems. Section 8 explains these technologies and your choices.

2.8 Sources

We receive personal data directly from you or your guardian; from Google when you choose Google Sign-In; automatically from your browser, device, or Account interaction; from MixAudio or NeuSynth when needed to link a Product or confirm an entitlement; and from service providers acting on Neutune's instructions.

3. How and why we use personal data

We use Account Services data to:

  • create, link, migrate, authenticate, administer, recover, secure, and delete a Neutune Account;
  • allow one Account to access MixAudio and NeuSynth and associate the correct Products and entitlements;
  • verify an email address and display basic Account information;
  • maintain secure sessions and process sign-in and sign-out;
  • confirm age, eligibility, and verified guardian consent;
  • provide Account support and respond to privacy requests;
  • send verification, security, transactional, policy, and Account-service notices;
  • detect, prevent, investigate, and respond to fraud, abuse, unauthorized access, security incidents, and violations;
  • troubleshoot and improve the reliability, accessibility, security, and user-facing operation of the Account Services;
  • maintain records needed for legal claims and compliance; and
  • complete a corporate transaction subject to applicable legal and Google policy safeguards.

Using Google Sign-In does not enroll you in marketing. Google-derived data is not used for marketing or advertising. If you separately choose to receive Product marketing, that choice is governed by the relevant Product Privacy Policy.

4. Google user data and Limited Use

4.1 Limited purposes

Neutune uses information received through Google Sign-In only to provide or improve user-facing Account, authentication, security, recovery, support, and Product-access features.

Google user data, whether raw or derived, is not used to:

  • train, fine-tune, test, evaluate, validate, benchmark, or otherwise develop an AI or machine-learning model;
  • create Product training or model-evaluation datasets;
  • analyze music, creative preferences, or Product behavior for model development;
  • serve targeted, personalized, interest-based, cross-context, or retargeted advertising;
  • create advertising profiles;
  • sell personal data or supply it to data brokers or information resellers;
  • determine creditworthiness or lending eligibility;
  • conduct surveillance;
  • create an unrelated identity database or profile; or
  • allow another company to use it for an independent purpose.

Google-derived identity information is technically and contractually excluded from MixAudio and NeuSynth model-training and model-evaluation datasets.

4.2 Google Limited Use statement

Neutune's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.3 Human access

Authorized Neutune personnel and service providers may access Google-derived Account information only where reasonably necessary for user-requested support, Account security, fraud or abuse investigation, technical troubleshooting, legal compliance, or internal operations using appropriately aggregated information. Access is limited by need, confidentiality, and access-control obligations.

4.4 Changes to Google data practices

Before accessing a new category of Google user data or using existing Google data for a materially different purpose, Neutune will update this Policy and relevant in-product notices, notify affected users, and obtain any consent required by Google policy or applicable law.

4.5 Google security signals

If Neutune receives session metadata, Account Metadata signals, Security Event Tokens, or similar security signals from Google, Neutune will use those signals only to internally investigate, remediate, and develop protections against security breaches and abusive behaviour that may affect Neutune, its systems, customers, or users.

Neutune will not use those signals for marketing, advertising, profiling, Product improvement, AI or model development, or any unrelated purpose.

5. Legal bases for processing

5.1 Contract

We process data necessary to create and administer the Account, authenticate the user, provide access to linked Products, recognize entitlements, complete deletion, and provide requested support.

5.2 Legitimate interests

We process data where reasonably necessary to secure and operate the Account Services, prevent fraud and abuse, maintain accurate Account and entitlement records, improve reliability, communicate essential notices, and protect users and legal rights, provided those interests are not overridden by your rights.

5.3 Consent

We rely on consent where required, including verified guardian consent, optional cookies, or another activity for which consent is the appropriate legal basis. Consent may be withdrawn, but withdrawal does not affect earlier lawful processing.

5.4 Legal obligations and limited public interests

We process data where necessary to comply with laws, regulations, lawful requests, tax or accounting duties, consumer-protection obligations, sanctions, or court orders. In limited circumstances, we may process data to protect a person's life or safety or perform a task recognized by applicable law.

6. How we disclose and share personal data

6.1 MixAudio and NeuSynth

When you access a Product, the Account Services provide it with limited information needed to identify and authenticate you, confirm eligibility, maintain security, and recognize the Product entitlement. Product-specific information is not transferred from one Product to the other merely because both use the same Account.

6.2 Service providers

We may use service providers for hosting, storage, networking, databases, authentication, Account security, email, transactional communications, customer support, fraud prevention, incident response, age or guardian verification, and technical monitoring. They may process data only for Neutune's documented purposes and instructions and under appropriate confidentiality, security, retention, and data-protection obligations. They may not sell it or use it for their own advertising, AI/model development, or unrelated purposes.

6.3 Other permitted disclosures

Neutune may disclose Account Services data:

(a) at your direction or with your specific consent;

(b) to courts, regulators, law-enforcement authorities, or other appropriate parties where disclosure is required by applicable law or reasonably necessary to protect rights, safety, security, users, or the Account Services; and

(c) to professional advisers and, subject to confidentiality and applicable law, a prospective or actual successor in connection with a merger, financing, acquisition, reorganisation, insolvency, or sale of assets.

Google user data, including data derived from it, will be transferred to a successor in connection with a merger, acquisition, or sale of assets only after Neutune obtains the user’s explicit prior consent where required by Google policy. Any permitted recipient must use the information only for the purposes allowed by this Policy and Google’s applicable requirements.

6.4 No sale or targeted advertising

Neutune does not sell Account Services personal data, share it for cross-context behavioral advertising, or disclose it for independent third-party marketing.

7. Storage and security

7.1 Storage of Google data

The stable Google identifier, verified email, name, and optional profile image may be stored while needed to maintain the Account. The Google authentication response is processed transiently. Neutune does not retain Google API access or refresh tokens for accessing other Google services. Neutune may retain its own session identifiers, security records, and authentication logs.

7.2 Safeguards

Neutune uses administrative, technical, and organizational measures designed to protect Account data against unauthorized or unlawful access, use, alteration, disclosure, loss, or destruction. Google user data is protected by encryption in transit and at rest. Other safeguards include role-based and least-privilege access, authentication and session controls, access and security logging, separation of production access, vendor security and confidentiality requirements, monitoring, incident-response procedures, and periodic access review.

No system can be guaranteed completely secure. You are responsible for protecting your devices, Google Account, credentials, and active sessions.

7.3 Security incidents

If a personal-data breach occurs, Neutune will investigate, contain, and remediate it and notify affected users and regulators where applicable law requires.

8. Cookies, analytics, and tracking choices

8.1 Necessary technologies

The Account Services use cookies or similar technologies necessary to authenticate users, maintain secure sessions, remember security settings, prevent abuse, and provide requested Account features. Blocking them may prevent sign-in or Account functions from working.

8.2 Optional technologies

If Neutune deploys non-essential analytics or similar technologies in the Account Services, it will provide appropriate notice and obtain consent where required. Google user data is not used for advertising, retargeting, or cross-context behavioral tracking. Product cookies and analytics are governed by the relevant Product Privacy Policy and cookie notice.

8.3 Browser privacy signals

Because there is no universally accepted standard for browser Do Not Track signals, the Account Services may not respond to them. Where applicable law requires recognition of an opt-out preference signal, such as Global Privacy Control, Neutune will honor it for practices to which it applies. As of the effective date, the Account Services do not sell personal data or use it for targeted advertising.

9. International transfers

Neutune is based in the United States. Personal data may be processed in the United States and other countries where Neutune's service providers operate. Those countries may have different privacy laws. Where required, Neutune uses recognized safeguards, such as adequacy decisions, contractual protections including the European Commission's standard contractual clauses and applicable United Kingdom transfer addenda, or another lawful mechanism. Contact cs@neutune.com for information about safeguards relevant to your data.

10. Data retention

Neutune retains personal data only for as long as reasonably necessary for the purposes in this Policy, considering the data's nature, Account status, security needs, legal obligations, limitation periods, and privacy rights.

  • Google-derived identity and basic Account data are generally retained while the Account is active;
  • Product linkage and entitlement data are retained while needed to provide access and resolve entitlement, billing-status, or Account disputes;
  • guardian-consent and age-verification records may be retained while the user is a minor and afterwards for as long as reasonably necessary to demonstrate compliance;
  • authentication, fraud-prevention, security, and audit logs are retained for a period proportionate to detecting, investigating, and preventing abuse and protecting legal rights;
  • support records are retained while needed to resolve the request and for a limited period afterwards for security and legal purposes; and
  • data subject to legal, tax, accounting, billing, chargeback, dispute, or security-preservation duties is retained for the period required or permitted by law.

When data is no longer needed, Neutune deletes or anonymizes it. Irreversibly anonymized data may be retained for lawful statistical, security, or operational analysis. Backup copies are access-restricted and deleted or overwritten through normal cycles unless legal preservation is required. Data kept solely in backups is not used for ordinary business purposes.

11. Account deletion and Google disconnection

11.1 Requesting unified deletion

You may request deletion through an Account control where available or by contacting cs@neutune.com. Neutune may verify your identity and authority to protect against unauthorized deletion. A valid deletion request ends access through that Account to both MixAudio and NeuSynth and initiates deletion or de-identification of shared Account data and associated Product personal data.

11.2 Limits and Product effects

Deletion remains subject to legal, tax, accounting, billing, chargeback, fraud-prevention, security, dispute, and legal-claim obligations; Product-specific retention described in the relevant Product Privacy Policy; and normal backup cycles. Where data cannot immediately be deleted, Neutune restricts it from ordinary use and deletes or de-identifies it when the applicable obligation ends. You should export Product content you wish to retain before deletion.

11.3 Revoking Google access

You may revoke Neutune's Google connection through your Google Account settings. Revocation prevents future authentication through that connection but does not by itself delete the Neutune Account or Product data. After disconnection, Neutune stops receiving new Google data and deletes Google-derived information that is no longer reasonably necessary, subject to the retention exceptions above.

11.4 Completion

Following a valid request, Neutune deletes or anonymizes relevant data from active systems without undue delay and within the period required by applicable law. Limited records may remain temporarily in protected backups or where legally required and are removed, destroyed, or irreversibly anonymized when that period ends.

12. Your privacy rights and choices

Depending on where you live and subject to legal exceptions, you may have the right to:

  • know whether Neutune processes your personal data and receive information about its collection, use, and disclosure;
  • access or obtain a copy of personal data associated with you;
  • correct inaccurate or incomplete information;
  • request deletion;
  • restrict or object to certain processing;
  • receive certain data in a portable, machine-readable format;
  • withdraw consent where processing relies on consent;
  • opt out of sale, targeted advertising, or certain profiling where applicable;
  • appeal a refusal of a privacy request where local law provides an appeal right;
  • complain to a privacy or data-protection authority; and
  • receive equal service and not be unlawfully discriminated against for exercising a right.

12.1 Exercising a right

Email cs@neutune.com and describe your request. Neutune may request information reasonably necessary to verify identity, authority, Account, or jurisdiction. An authorized agent may submit a request where permitted, subject to proof of authority and direct verification where lawful. Neutune will respond within the period required by applicable law.

12.2 Correcting Google profile data

Some information originates from your Google Account and may need to be corrected through Google. Updated information may be reflected in Neutune after a later sign-in.

12.3 Complaints

If you are dissatisfied with Neutune's response, contact cs@neutune.com so the matter can be reviewed. You may also complain to the privacy or data-protection authority where you live or work or where you believe a violation occurred.

13. Regional privacy information

13.1 EEA, United Kingdom, and Switzerland

Users in the EEA, United Kingdom, and Switzerland may have rights of access, correction, erasure, restriction, objection, portability, withdrawal of consent, and complaint. Section 5 identifies legal bases and Section 9 describes transfers. Neutune does not use Account data for decisions that produce legal or similarly significant effects about an individual.

13.2 United States state privacy laws

Residents of certain U.S. states may have rights to know or access, correct, delete, obtain a portable copy, opt out of sale or targeted advertising, limit certain uses of sensitive data, opt out of certain legally significant profiling, appeal, and receive non-discriminatory treatment, where the applicable law and coverage thresholds apply.

The data categories and sources are described in Section 2, purposes in Sections 3 and 4, and recipient categories in Section 6. Neutune does not sell Account data, share it for cross-context behavioral advertising, process it for targeted advertising, use it for legally significant profiling, or offer a financial incentive in exchange for it.

13.3 Other jurisdictions

If the law where you live provides additional non-waivable rights or safeguards, Neutune will honor them. Some rights apply only when coverage thresholds are met or the processing falls within the relevant law.

14. Children and teenagers

The Account Services are general-audience services and are not directed to children under 13. A person under 13 may not create a Neutune Account or use MixAudio or NeuSynth. If Neutune learns that personal data was collected from a child under 13 contrary to this Policy, Neutune will take appropriate steps to delete it and close or restrict the Account.

Users aged 13 to 17, or users below the age of majority where they live, may use the Account Services only after Neutune obtains verified consent from a parent or legal guardian. A guardian may contact cs@neutune.com to request access to, correction of, or deletion of the minor's data, subject to law.

For minors, Neutune minimizes collection, uses high-privacy defaults, does not sell data or use it for targeted advertising, and never uses Google or shared Account data for AI training, evaluation, or improvement. Product-specific safeguards are described in the relevant Product Privacy Policy. A higher local minimum age, different consent method, or additional safeguard applies where required.

15. Third-party services

Google independently processes information under its own privacy notice when providing Google Sign-In. Neutune does not control Google's independent processing. MixAudio and NeuSynth may interact with payment services, distributors, DAWs, plugin hosts, operating systems, or other third parties whose notices govern their independent processing. Neutune remains responsible for service providers it appoints to the extent required by law.

16. Changes to this Policy

Neutune may update this Policy to reflect changes in law, the Account Services, security, technology, or data practices. Neutune will publish the revised Policy, update its effective date, and provide clear advance or additional notice of a material change where required.

Before expanding the Google data accessed or using Google data for a materially different purpose, Neutune will update the disclosures, notify affected users, and obtain any consent required by Google policy or law. Neutune will not silently apply a materially expanded purpose to previously collected Google data.

17. Contact us

Privacy questions, rights requests, complaints, guardian requests, Google disconnection questions, and Account deletion requests may be sent to:

Neutune, Inc.
651 N Broad St, Suite 201, Middletown, DE 19709, United States
Phone: (302) 349-2783
Email: cs@neutune.com