PRIVACY POLICY

1. Information We Collect

We collect the following types of information:

• Account Information — Name, email address, and password (hashed) when you register, or profile data from Google when you sign in with Google SSO.
• Payment Information — Processed securely by Stripe. We do not store your full credit card number. We retain transaction IDs and amounts for your purchase history.
• Usage Data — Beat generation preferences (genre, mood, BPM), listening history, and interactions with the platform.
• Device & Log Data — IP address, browser type, and access timestamps for security and analytics.

2. How We Use Your Information

• To provide and improve the Service, including AI beat generation.
• To process payments and manage subscriptions.
• To send transactional emails (password resets, purchase confirmations).
• To maintain security and prevent abuse.
• To personalize your experience based on your preferences.

3. Data Sharing

We do not sell your personal data. We share information only with:

• Stripe — For secure payment processing.
• Cloud Infrastructure — For hosting, storage, and AI processing.
• Legal Requirements — When required by law or to protect our rights.

4. Data Storage & Security

Your data is stored in secure, encrypted databases. Passwords are hashed using bcrypt and are never stored in plain text. We use HTTPS for all data transmission and follow industry-standard security practices.

5. Cookies & Local Storage

We use essential cookies for authentication (session tokens) and preferences. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

6. Your Rights

You have the right to:

• Access, update, or delete your personal information.
• Export your data upon request.
• Opt out of non-essential communications.
• Request deletion of your account and associated data.

7. Data Retention

We retain your account data for as long as your account is active. Payment records are retained for legal and accounting purposes. If you delete your account, personal data is removed within 30 days, except where required by law.

8. Children's Privacy

Beat Homie is not intended for children under 13. We do not knowingly collect data from children. If we learn a child under 13 has provided personal information, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the information available on our website.