Working version, pending formal legal review. It describes what the store actually does with your data today.
Privacy notice
Last updated: 23 July 2026
Who is responsible
midiverse, the operator of store.midiverse.ai, is the data controller for the personal data described here. Questions about your data go to the contact page or info@midiverse.ai.
What we collect
- Account details, through our sign-in provider Clerk: your email address and, if you provide it, your name. Your account is the same midiverse account you use for transcribe.
- Purchase and payment details, through Stripe: the items you buy, the amount, your billing country, and any VAT id you enter. Card numbers are handled by Stripe and never reach our servers.
- A download record, kept for fraud prevention and dispute evidence: each time you download a purchased file we store the time, your account id, the file, your IP address, and your browser user agent.
- Messages you send through the contact form: your name, email address, company if you give one, and the message itself, so we can reply to you.
Why we use it, and the legal basis
- To deliver the files you buy and give you a permanent library, and to run your account: performance of our contract with you.
- To issue VAT invoices and keep them: compliance with a legal obligation.
- To keep the download record for security and to resolve chargebacks or disputes: our legitimate interest in protecting the store.
- To answer messages you send us: our legitimate interest in responding to you.
Who processes it for us
- Clerk, for accounts and sign-in.
- Stripe, for payments, tax, and invoicing.
- Cloudflare R2, for storing the files (private storage).
- Vercel, for hosting the website.
- Resend, for delivering contact form email to us.
Some of these providers process data outside the EU, mainly in the United States. Where they do, the transfer relies on recognised safeguards such as an adequacy decision (for example the EU-US Data Privacy Framework) or standard contractual clauses.
How long we keep it
Invoices and purchase records are kept for as long as tax law requires, in the Netherlands generally seven years. The download record is kept for at most 400 days (about 13 months). Contact messages are kept for as long as needed to handle them. Account data is kept for as long as you have an account.
Your rights
You can ask to access, correct, delete, or export your data, and to object to or restrict certain processing. To exercise any of these, use the contact page or email info@midiverse.ai. You also have the right to complain to your local data protection authority.
Cookies, local storage, and previews
We use a sign-in cookie from Clerk to keep you logged in. Your cart and theme preference live in your browser's local storage. Video previews load from the privacy-enhanced youtube-nocookie domain, and only after you press play. We do not run analytics or advertising trackers.
Changes
If we change this notice we will update the date above; the version in force is the one shown here.
Full operator and business details are available on request via the contact page.
Back to the store