Working version, pending formal legal review. It describes how midiverse actually operates today.
Privacy Policy
Last updated: 4 September 2026
Short version: your recordings and transcriptions are private to your account, we collect only what each service needs to run, we run no analytics or advertising trackers, and we never sell your data.
This notice covers all three sites. They collect very different amounts: midiverse.ai has no accounts and no database at all, transcribe holds your uploads, and the store holds your purchases. Each section says which is which.
Who is responsible
midiverse, the operator of midiverse.ai, transcribe.midiverse.ai and store.midiverse.ai, is the data controller for the personal data described here. Questions about your data go to info@midiverse.ai or the contact form on this site.
What we collect
midiverse.ai — this site
No account, no database, no payments. If you use the contact form we take your name, email address, a topic, a subject and your message, and send them to ourselves by email so we can reply; nothing is stored on this site. To stop the form being used to send bulk mail we check the request rate against the IP address it came from.
The demo player keeps your preferences (theme, note labels, the fall speed) in your browser's local storage. They stay in the browser and are never sent to us.
midiverse transcribe
Account: your email and sign-in identity, managed by Clerk. Content: the audio you upload and the transcriptions generated from it, stored privately and served only to you via short-lived signed links. Usage: transcription counts for quota enforcement, job timings and error reports to keep the service healthy. Billing: handled by Stripe; we never see or store card numbers. Abuse prevention: the IP address your account connects from and a random device identifier we store in a cookie on your browser, used only to enforce the one-account-per-person rule in our terms and to apply temporary blocks after misuse.
midiverse store
- Account details, through our sign-in provider Clerk: your email address and, if you provide it, your name. Your account is the same midiverse account you use for transcribe.
- Purchase and payment details, through Stripe: the items you buy, the amount, your billing country, and any VAT id you enter. Card numbers are handled by Stripe and never reach our servers.
- A download record, kept for fraud prevention and dispute evidence: each time you download a purchased file we store the time, your account id, the file, your IP address, and your browser user agent.
- Messages you send through the contact form: your name, email address, company if you give one, and the message itself, so we can reply to you.
Why we use it, and the legal basis
- To run your account, transcribe the recordings you upload, deliver the files you buy and give you a permanent library: performance of our contract with you.
- To issue VAT invoices and keep them: compliance with a legal obligation.
- To keep the download record for security and to resolve chargebacks or disputes, to enforce quotas and the one-account-per-person rule, to rate-limit the contact forms, and to keep the services healthy through job timings and error reports: our legitimate interest in protecting midiverse.
- To answer messages you send us: our legitimate interest in responding to you.
Who processes it for us
Each receives only the data needed for its role.
- Vercel, hosting — all three sites.
- Clerk, accounts and sign-in — transcribe and the store.
- Stripe, payments, tax and invoicing — transcribe and the store.
- Cloudflare R2, file storage — transcribe and the store.
- Neon, database, and Modal, the GPU workers that do the transcribing — transcribe.
- Resend, delivering contact-form email to us — this site and the store.
- Upstash, rate limiting — transcribe, and this site's contact form.
- Sentry, error monitoring — transcribe.
Some of these providers process data outside the EU, mainly in the United States. Where they do, the transfer relies on recognised safeguards such as an adequacy decision (for example the EU-US Data Privacy Framework) or standard contractual clauses.
How long we keep it
Account data is kept for as long as you have an account. Your uploads and transcriptions stay in your account until you delete them. Contact messages are kept for as long as needed to handle them.
The abuse-prevention record on transcribe — the IP address and the device identifier — is deleted 90 days after it was last seen, longer while an account is suspended; the cookie itself stays on your browser for up to two years or until you clear it. The store's download record is kept for at most 400 days (about 13 months), which covers the payment dispute window with a margin.
Deleting your account removes your content and personal data from our systems, with one exception: invoices and purchase records are kept for as long as tax law requires, in the Netherlands generally seven years. We cannot delete those on request, and they are kept for that purpose alone.
Your rights
You can ask to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise any of these, email info@midiverse.ai or use a contact form. You also have the right to complain to your local data protection authority.
Cookies, local storage, and embeds
Functional cookies only, and no advertising or cross-site tracking cookies anywhere on midiverse.
- A sign-in cookie from Clerk keeps you logged in on transcribe and the store.
- transcribe sets one more: a random device identifier used solely to enforce the one-account-per-person rule, kept for up to two years or until you clear cookies. It is set for every visitor, before any account exists.
- This site sets no cookies. Your theme and the demo player's settings live in your browser's local storage; so do the store's cart and theme. Local storage stays in the browser.
Two embeds reach a third party. In the store, video previews load from the privacy-enhanced youtube-nocookie domain, and only after you press play. On this site, the cover images beside each edition are YouTube thumbnails loaded from i.ytimg.com as the page renders, so Google sees your IP address and browser without you pressing anything.
Changes
If we change this notice we will update the date above; the version in force is the one shown here.
Full operator and business details are available on request via the contact form.