Privacy Policy

Last Updated: October 31, 2025

Introduction

Welcome to Beatput ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at beatput.app (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Our Commitment to Your Privacy

WE WILL NEVER SELL YOUR PERSONAL INFORMATION.

Your trust is paramount to us. We want to make this absolutely clear: we do not, have never, and will never sell, rent, or trade your personal information to third parties for their marketing purposes or any other reason. Your data is yours, and we respect that. We only use your information to provide and improve our Service, as detailed in this policy.

Information We Collect

Personal Information You Provide

When you register for an account and use our Service, we collect:

Account Information: Email address, name, and password (stored as a cryptographic hash using bcrypt)
User Preferences: Video title templates, description templates, Instagram profile link, and public contact email for video descriptions
Subscription Information: Current subscription plan (Free, Pro, or Ultimate), billing cycle, renewal dates, and PayPal subscription identifiers

Automatically Collected Information

We automatically collect certain information when you use our Service:

Authentication Data: Session cookies (HTTP-only) to maintain your logged-in state
Local Storage Data: Cached user profile information and session expiration times stored in your browser's local storage
Usage Information: Information about how you interact with our Service, including features accessed and errors encountered

Third-Party Authentication Tokens

When you connect third-party services:

YouTube OAuth Tokens: Access tokens and refresh tokens for uploading videos to your YouTube channel (stored temporarily in your browser's local storage)

How We Use Your Information

We use the collected information for the following purposes:

Account Management: Creating and maintaining your account, authenticating your identity, and managing your subscription
Service Delivery: Processing your audio and video files to generate YouTube-ready content according to your preferences
Communication: Sending verification emails, password reset links, and service-related notifications via Resend email service
Payment Processing: Managing subscriptions and processing payments through PayPal
Service Improvement: Understanding how users interact with our Service to improve functionality and user experience
Security: Protecting against unauthorized access and ensuring the security of our Service

How We Process Your Media Files

Client-Side Processing

Important: All audio and video processing occurs entirely in your web browser using FFmpeg WebAssembly technology. We do not upload, store, or have access to your original audio or video files on our servers.

YouTube Upload Process

When you upload a video to YouTube:

Your processed video is uploaded directly from your browser to YouTube's servers
We only facilitate the upload by providing OAuth authentication and metadata configuration
We do not store or retain copies of your videos

Data Storage and Security

Database Storage

We store user account information, preferences, and subscription data in a secure PostgreSQL database. All passwords are hashed using bcrypt with appropriate salt rounds before storage.

Security Measures

We implement industry-standard security measures including:

Encrypted password storage using bcrypt hashing
HTTP-only cookies for session management to prevent XSS attacks
Secure token generation for email verification and password resets using cryptographically secure random bytes
Time-limited verification and reset tokens (24 hours for email verification, 1 hour for password resets)

Data Retention

Active Accounts: We retain your account information for as long as your account remains active
Verification Tokens: Email verification tokens expire after 24 hours
Password Reset Tokens: Password reset tokens expire after 1 hour
Session Data: Browser session data expires after 48 hours of inactivity

Third-Party Services

We use the following third-party services that may collect and process your information:

PayPal

Purpose: Payment processing and subscription management
Data Shared: Your user ID, selected plan, and billing preferences
Privacy Policy: https://www.paypal.com/privacy

Google/YouTube API

Purpose: Authenticating with YouTube and uploading videos to your channel
Data Shared: OAuth access tokens, video metadata (titles, descriptions, tags, visibility settings)
Scope: https://www.googleapis.com/auth/youtube.upload
Privacy Policy: https://policies.google.com/privacy

Resend

Purpose: Sending transactional emails (verification, password reset)
Data Shared: Your email address and name
Privacy Policy: https://resend.com/legal/privacy-policy

FFmpeg.wasm

Purpose: Client-side video processing
Processing Location: Entirely in your browser
Data Shared: None (runs locally)

Your Rights and Choices

Access and Update

You can access and update your account information and preferences at any time by:

Logging into your account at beatput.app/profile
Modifying your video templates and contact information
Changing your email address or password

Account Deletion

You have the right to delete your account at any time. When you delete your account:

All your personal information is permanently removed from our database
Your preferences and subscription data are deleted
All verification and password reset tokens are removed
Your authentication session is terminated
Note: This action cannot be undone

To delete your account, visit beatput.app/profile and select "Delete Account."

Email Communications

You will receive the following types of emails:

Verification Emails: Required to activate your account
Password Reset Emails: Sent when you request a password reset
Service Notifications: Critical updates about your subscription or account

We do not send marketing emails or newsletters.

Cookie Management

You can control cookies through your browser settings. However, disabling cookies may prevent you from using certain features of our Service that require authentication.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may disclose your information only in the following circumstances:

With Your Consent: When you explicitly authorize us to share your information
Service Providers: To third-party service providers who assist us in operating our Service (PayPal, Google/YouTube, Resend) under confidentiality agreements
Legal Requirements: When required by law, court order, or governmental regulation
Protection of Rights: To protect our rights, property, or safety, or that of our users or the public
Business Transfers: In connection with a merger, acquisition, or sale of assets (users would be notified)

International Data Transfers

Our Service is hosted and operated in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by:

Updating the "Last Updated" date at the top of this Privacy Policy
Posting a notice on our website
Sending an email notification to your registered email address (for significant changes)

Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated Privacy Policy.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the personal data we collect, use, and disclose
Right to Delete: You can request deletion of your personal information
Right to Opt-Out: You have the right to opt-out of the sale of your personal information (note: we do not sell personal information)
Right to Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights

To exercise these rights, please contact us using the information below.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right of Access: Request access to your personal data
Right to Rectification: Request correction of inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Restrict Processing: Request limitation of processing your personal data
Right to Data Portability: Request transfer of your personal data
Right to Object: Object to processing of your personal data
Right to Withdraw Consent: Withdraw consent at any time

Legal Basis for Processing

We process your personal data based on:

Contract Performance: To provide the Service you requested
Legitimate Interests: To improve our Service and prevent fraud
Legal Obligations: To comply with applicable laws
Consent: Where you have provided explicit consent

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: martin@beatput.app

We will respond to your inquiry within 30 days.

Beatput