Privacy Policy

Effective Date: February 13, 2025

Last Updated: February 13, 2025

BeatValet ("we," "us," or "our") is operated by BeatValet, a sole proprietorship based in Ontario, Canada. This Privacy Policy describes how we collect, use, store, and protect your information when you use the BeatValet desktop application and related services (collectively, the "Service").

By using BeatValet, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create a BeatValet account, we collect:

• Email address
• Password (stored as a salted hash; we never store plaintext passwords)

1.2 User Configuration Data

To operate the Service, we store your preferences and settings, including:

• Output folder paths and file naming preferences
• Media generation settings (e.g., image generation prompts, template choices)
• BeatStars session tokens (encrypted)
• Platform behavior preferences (visibility defaults, description templates, license settings)

This data is stored in our database hosted on Supabase.

1.3 Project Metadata

When you process a beat through BeatValet, we collect and store:

• Project file name and beat title
• Musical metadata (BPM, key, genre tags)
• Processing status and stage progress
• Upload URLs (BeatStars, YouTube) once published
• Error logs for troubleshooting

We do not upload or store your audio files, FL Studio project files (.FLP), or rendered stems on our servers. Audio processing occurs locally on your device.

1.4 Google YouTube Data

When you connect your YouTube account, BeatValet accesses the following through the YouTube API:

• Channel information (via the youtube.readonly scope) — to display your channel name and verify your account connection.
• Video upload capability (via the youtube.upload scope) — to upload videos to your YouTube channel on your behalf.
• Video metadata management (via the youtube scope) — to update titles, descriptions, tags, thumbnails, visibility, and scheduled release dates on videos uploaded through BeatValet.

How YouTube data is handled:

• YouTube OAuth tokens (access and refresh tokens) are stored only on your local device using your operating system's secure credential storage (Windows DPAPI, macOS Keychain, or Linux Secret Service). They are never transmitted to or stored on our servers.
• We do not access, collect, or store your YouTube watch history, subscriptions, playlists, comments, analytics, or any YouTube data beyond what is described above.
• We do not use your YouTube data for advertising, market research, or any purpose unrelated to the functionality you initiate within BeatValet.
• We do not transfer your YouTube data to any third party.

1.5 Automatically Collected Information

We may collect limited technical information to maintain and improve the Service:

• Application version and operating system
• Error reports and crash logs (no personal content included)

We do not use third-party analytics or tracking services at this time. If this changes, we will update this policy.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — process your beats, organize files, generate media assets, and upload to platforms you have connected.
• Maintain your preferences — remember your configuration settings across sessions.
• Troubleshoot and improve — diagnose errors and improve reliability.
• Communicate with you — respond to support requests, notify you of important changes to the Service, and send product updates and tips (you may opt out of marketing emails at any time).

We do not use your information for advertising, sell your data to third parties, or use your content to train AI models.

3. Third-Party Services

BeatValet uses the following third-party services to provide its functionality:

3.1 Supabase

• Purpose: User authentication, database storage for account settings and project metadata.
• Data shared: Email address, user preferences, project metadata (not audio files).
• Privacy Policy: https://supabase.com/privacy

3.2 Google APIs (YouTube Data API v3)

• Purpose: Upload videos and manage video metadata on your YouTube channel.
• Data shared: Video files (generated locally and uploaded directly to YouTube), video metadata (title, description, tags, thumbnail).
• Privacy Policy: https://policies.google.com/privacy

BeatValet's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.3 Google Gemini / Imagen API

• Purpose: Generate thumbnail images for your beats based on text prompts.
• Data shared: Text prompts that may include your beat title, genre, and style descriptors. No audio files are shared.
• Privacy Policy: https://policies.google.com/privacy

3.4 AWeber

• Purpose: Email communications, including product updates, tips, and announcements.
• Data shared: Email address.
• Privacy Policy: https://www.aweber.com/privacy.htm

You may unsubscribe from marketing emails at any time using the unsubscribe link included in every email. Unsubscribing from marketing emails does not affect transactional communications related to your account (e.g., password resets, critical service notifications).

We do not share your information with any third parties beyond those listed above. If we add new third-party services, we will update this policy before any data is shared.

4. Data Storage and Security

4.1 Where Your Data Is Stored

• Server-side data (account settings, project metadata) is stored on Supabase infrastructure. Supabase hosts data on Amazon Web Services (AWS) with servers located in regions that may include the United States and Canada.
• Local data (audio files, rendered exports, YouTube OAuth tokens) remains on your device and is never transmitted to our servers.

4.2 Security Measures

We use commercially reasonable measures to protect your data, including:

• Encrypted connections (TLS/HTTPS) for all communications between the desktop application and our servers.
• Salted password hashing for account credentials.
• Operating system secure credential storage for sensitive tokens (YouTube OAuth, BeatStars sessions).
• Row-level security policies on our database to ensure users can only access their own data.

No method of electronic storage or transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

• Account data is retained for as long as your account is active.
• Project metadata is retained for as long as your account is active to provide upload history and status tracking.
• Local data (audio files, exports, tokens) is under your control and is not managed by us.

When you delete your account, we will delete your account data and project metadata from our servers within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.

6. Your Rights and Choices

6.1 Access and Portability

You may request a copy of the personal data we hold about you by contacting us at privacy@beatvalet.com.

6.2 Correction

You may update your account information and preferences through the BeatValet application at any time.

6.3 Deletion

You may request deletion of your account and associated data by contacting us at privacy@beatvalet.com. We will process deletion requests within 30 days.

6.4 Revoking Third-Party Access

• YouTube: You can revoke BeatValet's access to your YouTube account at any time through your Google Account permissions page. Revoking access will delete the locally stored YouTube tokens from BeatValet.
• BeatStars: You can disconnect your BeatStars session through the BeatValet settings screen at any time.

6.5 Canadian Privacy Rights

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access, correct, and request deletion of your personal information. To exercise these rights, contact us at privacy@beatvalet.com.

7. Children's Privacy

BeatValet is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@beatvalet.com.

8. International Data Transfers

If you are located outside of Canada, please be aware that your information may be transferred to, stored, and processed in Canada and the United States (where our infrastructure providers operate). By using the Service, you consent to this transfer.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and notify you through the BeatValet application. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@beatvalet.com

Website: https://www.beatvalet.com

This Privacy Policy was last updated on February 13, 2025.