Effective July 30, 2026

Privacy Policy

This policy explains how Sunofix processes personal data across the public website, account application, audio-processing service, payments, and support.

Controller and contact

The controller is Mihail Vinokurov, a self-employed professional established in Spain. For privacy questions or requests, email support@sunofix.app.

Data we process

How we use data

We process data to create and secure accounts, provide audio analysis and cleanup, deliver and account for credits, complete the service contract, investigate failures, respond to support and refund requests, prevent fraud and misuse, maintain reliable operations, and comply with accounting or legal obligations.

Depending on the activity, the legal basis is performance of a contract, steps requested before a contract, compliance with legal obligations, our legitimate interests in security and reliable service operation, or consent where consent is required. Optional marketing messages can be declined without losing service messages connected with an account or order.

Payment providers

Purchases are processed by Lava.top or Polar. We send the provider the data needed to create and reconcile checkout, such as an account email or user identifier, the five-credit product, currency, order metadata, and, where required, technical information used for payment security. The provider applies its own checkout terms and privacy notice.

Service providers

We use Clerk for identity and authentication, Lava.top and Polar for payments, Emailit for support and service-email delivery, Cloudflare for website delivery and security, and infrastructure providers needed to host the application, database, queue, and protected files. These providers process data only for their relevant service roles or under their own legally defined payment responsibilities.

Audio retention

Physical original and processed audio files, generated spectrograms, and related Compare images are retained for no more than seven days. Files can be removed earlier when no longer needed, when you delete eligible data, or when security and operational rules require removal.

Before physical files are removed, Sunofix may retain derived technical measurements and hashes that help explain processing, detect duplicate uploads for the same account, prevent abuse, investigate incidents, and improve service reliability. These records are not a replacement copy of the audio.

Browser-only spectrogram generator

On the public spectrogram page, the selected MP3 or WAV is decoded and analyzed only in the memory of your current browser tab. It is not uploaded, persisted in browser storage, or handed to the Sunofix app. Standard hosting logs may still record requests for the page and its static assets.

Website analytics and cookies

Cloudflare Web Analytics provides aggregate website-performance and audience measurements without placing analytics cookies in your browser. This is separate from the optional Google Analytics service described below and from standard security and delivery logs generated when Cloudflare serves the website.

Google Analytics is optional on the public website. It does not load, send a request to Google, or record Sunofix interaction events unless you select Accept in the analytics notice. If you reject analytics, the public website continues to work.

After consent, Google Analytics may process the page URL and title, referrer, browser and device details, language, approximate location derived from network information, and events such as opening an internal guide, selecting an app link, or completing the browser-only spectrogram workflow. We use this information to understand which pages and features are useful and to improve the website. Google acts as an analytics service provider and may process data internationally under the safeguards described in its terms and privacy documentation.

The preference cookie sunofix_analytics_consent stores only whether analytics was accepted or rejected. When analytics is accepted, Google Analytics may set _ga and _ga_SBT6M277MZ. Sunofix limits the configured lifetime of these analytics cookies and the saved preference to 180 days.

You can change your choice at any time with Cookie settings in the website footer. Withdrawing consent stops future Google Analytics collection on the next page load and removes Google Analytics cookies that are accessible from the Sunofix website. Events that occurred before consent are discarded rather than queued for later transmission.

How long other records are kept

Account and operational records are kept while needed to provide the account and service. Billing, credit-ledger, consent, security, support, and dispute records may be retained after account use ends for the periods needed to meet accounting and legal duties, prevent fraud, establish or defend claims, and document transactions. We remove or anonymize records when those purposes no longer require identifiable data.

International processing

Some providers may process data outside Spain or the European Economic Area. Where required, that processing relies on an applicable adequacy decision, contractual safeguards, or another lawful transfer mechanism maintained by the relevant provider.

Your rights

Subject to applicable law, you may request access, rectification, deletion, restriction, objection, or portability of your personal data. Where processing relies on consent, you may withdraw that consent for future processing. We may need to verify that a request comes from the account holder.

Send requests to support@sunofix.app. Some information may need to be retained where a legal obligation or the establishment, exercise, or defense of legal claims requires it.

Complaints

You may submit a complaint to the Spanish Data Protection Agency or another competent supervisory authority.

Changes

We may update this policy when the service, providers, retention rules, or legal obligations change. The effective date at the top identifies the current published version.