Privacy Policy

1. Introduction & Scope

MixinMEup ("we", "us", "our") is committed to protecting the personal information of everyone who uses our platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what rights you have regarding your information.

This Policy applies to all personal information collected through the MixinMEup website, mobile application, and any related services (collectively, the "Platform"). It is consistent with the Personal Information Protection Act (Alberta) ("PIPA") and, where applicable, the Personal Information Protection and Electronic Documents Act (Canada) ("PIPEDA").

By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

We collect personal information that you provide directly, that is generated by your use of the Platform, and in some cases from third parties.

Account Information

When you register, we collect your email address and a password (stored as a one-way hash). If you register via a social login provider (Google, Apple, Facebook, Spotify, Discord), we receive your name and email address from that provider.

Profile Information

Information you add to your profiles, which may include display name, @handle, biography, avatar and cover photos, genre preferences, instrument or skill tags, location (city or region), links to external websites, and any other details you choose to include. Some of this information is public by default; you control the visibility of individual fields through your privacy settings.

User Content

Content you create and post on the Platform, including event listings, articles, photos, setlists, playlists, comments, reactions, and wall posts.

Usage and Interaction Data

Information about how you use the Platform, including pages you visit, features you use, events you RSVP to, profiles you follow, searches you perform, and other interactions.

Location Information

Your approximate browsing location (city or region level) if you grant location access in your browser or device settings. We use this to show you relevant local content. You can revoke location access at any time through your browser or device settings.

Technical and Device Data

Information automatically collected when you access the Platform, including your IP address, browser type and version, operating system, device type, referral URL, and session identifiers. This information is used for security, fraud prevention, and to ensure the Platform functions correctly.

Communications

If you contact our support team, we retain the content of those communications to resolve your inquiry and improve our service.

3. How We Use Your Information

We use your personal information to:

• Provide and operate the Platform — create and manage your account, display your profiles and content, facilitate event discovery, and enable social interactions
• Personalise your experience — show you content, events, and profiles relevant to your location, genre preferences, and activity
• Send notifications — notify you of activity relevant to your account or profiles (new followers, event confirmations, comments, etc.). You can manage notification preferences in your settings
• Send service communications — account verification emails, security alerts, password reset emails, and other transactional messages necessary to operate your account
• Send marketing communications — only with your express consent and in compliance with Canada's Anti-Spam Legislation (CASL). You can withdraw consent at any time by using the unsubscribe link in any marketing email or updating your notification preferences
• Ensure safety and security — detect, investigate, and prevent fraudulent activity, abuse, and other harmful conduct; enforce our Terms of Service
• Analyse and improve the Platform — understand how users interact with the Platform to identify improvements, fix bugs, and develop new features
• Comply with legal obligations — meet our obligations under applicable laws, respond to lawful requests from public authorities, and protect our legal rights

4. Legal Basis for Collection and Use

Under PIPA (Alberta), we rely on the following grounds for collecting and using personal information:

• Consent — the primary basis for collecting and using your information. By registering and using the Platform, you consent to the collection and use described in this Policy. Where we rely on consent for optional uses (such as marketing), we will make this clear and provide an easy way to withdraw consent
• Contractual necessity — some collection is necessary to fulfil our obligations to you under our Terms of Service (e.g., creating your account, sending account-related emails)
• Legal obligation — we may collect or retain information to comply with applicable law, respond to legal process, or protect our legal rights

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• Service providers — we engage third-party vendors to help operate the Platform, including cloud hosting providers, email delivery services, and analytics tools. These providers access your information only to perform services on our behalf and are contractually bound to protect it
• Legal requirements — we may disclose your information if required to do so by law, court order, or lawful government request, or where we believe disclosure is necessary to protect the safety of any person or to prevent fraud or illegal activity
• Business transfers — in the event of a merger, acquisition, reorganisation, or sale of all or substantially all of our assets, your information may be transferred to the successor entity. We will provide reasonable notice and, where required by law, seek your consent before such a transfer
• With your consent — in any other circumstance, only with your explicit consent

Note that content you post publicly on the Platform — such as public profile information, event listings, and public posts — is visible to all users and visitors by design. Review your profile privacy settings to control what information is displayed publicly.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Platform to you. If you close your account, we will delete or anonymise your personal information within 90 days, except where:

• We are required by law to retain it for a longer period (for example, financial records or records relevant to legal disputes)
• The information is necessary to resolve an outstanding dispute or enforce our agreements
• Content you created has been shared or interacted with by others in ways that make isolated deletion impractical (in which case, author attribution may be removed rather than the content itself being deleted)

Technical logs and security data are typically retained for a shorter period (up to 12 months) unless required for an active investigation.

7. Your Rights

Under PIPA (Alberta), you have the following rights with respect to your personal information:

• Access — you have the right to request access to the personal information we hold about you. You can access much of your information directly through your account settings, or submit a formal request to our Privacy Officer
• Correction — if your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your profile and account settings
• Withdrawal of consent — you may withdraw your consent to our collection and use of your personal information at any time, subject to legal or contractual restrictions. Withdrawal of consent may mean we can no longer provide some or all of the Platform to you
• Data portability — you can request an export of your data in a portable format through Settings → Account → Data Export
• Account deletion — you can request deletion of your account and associated personal information through Settings → Account → Delete Account, or by contacting us
• Complaints — if you believe we have not handled your personal information in accordance with applicable law, you have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC Alberta) at www.oipc.ab.ca

To exercise any of these rights, contact our Privacy Officer at privacy@mixinmeup.com. We will respond within 30 days of receiving a request.

8. Cross-Border Data Transfers

We may store and process your personal information on servers located outside of Alberta or Canada, including in the United States, as part of our use of cloud hosting and third-party service providers. When we transfer personal information outside of Canada, we take steps to ensure it receives a comparable level of protection, including through contractual arrangements with service providers. By using the Platform, you consent to this transfer, storage, and processing of your information in other jurisdictions.

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These measures include encrypted data transmission (HTTPS), hashed password storage, session management controls, rate limiting and brute-force protection, and access controls limiting who within our organization can access personal information.

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a breach that creates a real risk of significant harm to you, we will notify you and the OIPC Alberta as required by PIPA.

10. Children's Privacy

MixinMEup is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@mixinmeup.com.

11. Cookies

We use cookies and similar technologies to operate the Platform, remember your preferences, and understand how you use our service. For full details of the cookies we use, their purpose, and how to manage them, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Platform, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by PIPA, provide notice and seek your consent.

We encourage you to review this Policy periodically. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Policy, to the extent permitted by applicable law.

13. Contact & Privacy Officer

If you have questions, concerns, or requests regarding this Policy or our handling of your personal information, please contact our Privacy Officer: