Privacy Policy

1. Introduction

Welcome to ScheduleBeats. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our beat scheduling and automation service. Please read this policy carefully. By using ScheduleBeats, you consent to the practices described herein.

2. Information We Collect

We collect information that you provide directly to us:

• Account Information: Name, email address, password (hashed)
• Payment Information: Processed by Stripe (we do not store card details)
• BeatStars Credentials: Session data for automated uploads (encrypted)
• YouTube Connection: OAuth tokens for video uploads (encrypted)
• Content: Beat audio files, cover images, metadata (titles, tags, descriptions)
• Scheduling Data: Upload times, preferences, history

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our Service
• Process your subscription payments
• Upload your beats to BeatStars on your behalf
• Upload your beat videos to YouTube on your behalf
• Schedule and manage your beat releases
• Send you service-related communications and notifications
• Respond to your inquiries and support requests
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse

4. Third-Party Services

Our Service integrates with the following third-party platforms. Each has their own privacy policy:

Stripe (Payment Processing)

We use Stripe to process subscription payments. When you subscribe:

• Your payment information is sent directly to Stripe
• We do not store your credit card number or CVV
• Stripe may collect additional information per their privacy policy
• See: stripe.com/privacy

BeatStars

We use your BeatStars session credentials to upload beats on your behalf:

• Your credentials are encrypted and stored securely
• We only access your account to perform scheduled uploads
• See: beatstars.com/privacy

YouTube (Google)

We use OAuth 2.0 to access your YouTube account for video uploads:

• We never see or store your Google password
• OAuth tokens are encrypted and stored securely
• See: policies.google.com/privacy

Vercel (Hosting & Storage)

Our Service is hosted on Vercel. Your files are stored using Vercel Blob:

• Audio files and images are stored securely
• See: vercel.com/legal/privacy-policy

5. Analytics & Tracking

We use the following services to analyze usage and improve our Service:

Microsoft Clarity

We use Microsoft Clarity to understand how users interact with our website:

• Clarity records session replays and heatmaps
• Personal information (passwords, payment details) is automatically masked
• You can opt out via your browser's Do Not Track setting
• See: Microsoft Privacy Statement

Vercel Analytics

We use Vercel Analytics to track page views and performance metrics. This data is anonymized and aggregated.

FirstPromoter (Affiliate Tracking)

We use FirstPromoter to manage our affiliate/referral program:

• Tracks referral links and conversions
• Uses cookies to attribute referrals
• See: firstpromoter.com/privacy

6. Google User Data

When you connect your YouTube account, we access the following Google user data:

• Your YouTube channel information (channel name, ID)
• Permission to upload videos to your YouTube channel
• Your Google account email address for authentication

Limited Use Disclosure

ScheduleBeats' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing and Disclosure

We do not share, sell, rent, or trade your Google user data with any third parties.

Your Google data is used solely for:

• Authenticating your identity when you sign in
• Uploading beat videos to your YouTube channel on your behalf
• Displaying your channel name in the application

Revoking Access

You can disconnect your YouTube account at any time from your ScheduleBeats settings. You can also revoke access directly from your Google Account permissions page. When you revoke access, we delete your Google OAuth tokens from our servers within 24 hours.

7. Cookies

We use cookies and similar technologies:

• Essential Cookies: Required for authentication and session management
• Analytics Cookies: Help us understand how you use our Service (Clarity, Vercel)
• Affiliate Cookies: Track referrals for our affiliate program (FirstPromoter)

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

8. Data Security

We implement appropriate security measures to protect your personal information:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed using industry-standard algorithms
• OAuth tokens and credentials are encrypted at rest
• Payment data is handled by Stripe (PCI-DSS compliant)
• Regular security audits and updates

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but will notify you of any breaches as required by law.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services:

• Account Data: Retained until you delete your account
• Content (beats, images): Deleted within 30 days of account deletion
• Payment Records: Retained as required for tax/legal purposes
• Logs: Retained for up to 90 days for security purposes

10. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Disconnect: Disconnect third-party services (BeatStars, YouTube) at any time
• Opt-out: Opt out of marketing communications

To exercise these rights, contact us at support@schedulebeats.com.

11. Data Residency

Your data is stored in the following geographic locations:

Video files are temporarily processed on our EU-based servers and deleted after upload to YouTube. All data transfers between regions are encrypted using TLS 1.3.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Our servers and third-party services may be located in the United States or other countries. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

13. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our website. The "Last updated" date at the top indicates when this policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: support@schedulebeats.com