Privacy Policy

1. Information We Collect

We collect the minimum information required to authenticate your account, maintain your studio workspace, and synthesize high-fidelity audio:

• Account Information: When signing in through Google, we receive your email address, full name, Google UID, and profile picture avatar.
• Prompts & Musical Parameters: The text descriptions, genres, BPM, musical keys, and structural sections you enter into the workstation.
• Reference Audio: Audio files you temporarily upload for style analysis or stem separation are processed ephemerally in volatile memory solely for acoustic feature extraction and are never permanently published, shared, or retained.
• Generated Audio Assets: The resulting audio files, isolated multitrack stems, and project metadata saved to your cloud library.
• Usage & Credit Ledger: Transaction timestamps, credit balances, and IP addresses used for anti-abuse rate limiting.

2. How Your Information Is Used

Your data is processed strictly for the following functional purposes:

• To synthesize instrumental tracks and isolate audio stems through our neural pipelines.
• To manage monthly credit balances, quota resets, and automatic failure refunds.
• To persist your beat library in private cloud storage across your devices.
• To protect against automated scraping, multi-account abuse, and unauthorized access.

3. Third-Party Infrastructure

To deliver digital audio synthesis, we partner with specialized cloud infrastructure providers. We transmit only the data strictly necessary to execute each task:

• Audio Synthesis Engines: Prompts and arrangement specifications are transmitted securely to render audio tracks.
• Stem Separation Engines: Audio files submitted for stem separation are processed through neural multitrack isolation networks.
• Database & Cloud Storage: User records and audio files are persisted in secure cloud storage with row-level security.

4. Cookies & Local Storage

We use strictly necessary authentication session cookies and browser LocalStorage to maintain your login state and preserve in-progress studio settings so your work is not lost if your browser refreshes. We do not deploy third-party advertising cookies or cross-site tracking scripts.

5. Data Retention, GDPR & CCPA User Rights

Depending on your location (including the European Economic Area, United Kingdom, and California), you maintain specific statutory rights regarding your personal data:

• Right of Access & Portability: You can download and export all your audio tracks, multitrack stems, and studio project history directly from the workstation at any time.
• Right to Erasure (Right to Be Forgotten): You can delete any saved beat from your cloud library immediately. To request complete deletion of your user account and all server ledger records, email privacy@getbeatsflow.com.
• Right to Rectification: You can update or correct inaccuracies in your account details at any time.
• Non-Discrimination: Under the California Consumer Privacy Act (CCPA), we will never discriminate against you or deny service for exercising your privacy rights.
• No Sale of Personal Data: BeatsFlow AI does not sell, rent, or lease your personal information, reference audio, or musical compositions to third parties.

6. Data Security & Encryption

All communications between your browser and BeatsFlow AI are protected with industry-standard TLS 1.3 encryption in transit. Cloud database records and audio file storage leverage Row-Level Security (RLS) policies ensuring that only your authenticated account can access private projects and audio stems.

7. Contact & Data Protection Inquiries

For questions regarding this Privacy Policy, data processing disclosures, or to exercise your GDPR/CCPA data deletion rights, please contact our privacy compliance team at privacy@getbeatsflow.com.