Privacy Policy

01 Information We Collect

We collect information you provide directly to us, information we collect automatically when you use the Service, and information from third-party sources.

Information you provide directly:

• Name and email address when you request beta access or create an account
• Performer type and other optional profile information you choose to share
• Pinterest board URLs you submit for processing
• Audio or music files you upload to the Service
• Communications you send us, including support requests and feedback

Information collected automatically:

• Log data including IP address, browser type, operating system, referring URLs, and pages visited
• Device information such as device type, unique device identifiers, and mobile network information
• Usage data including features accessed, session duration, and interaction events
• Cookies and similar tracking technologies (see Section 5)

02 How We Use Your Information

We use the information we collect to provide, improve, and personalize the Service. Specifically, we use your information to:

• Process your beta access request and create your account
• Deliver the core functionality of the Service — generating visual outputs from your Pinterest boards and audio tracks
• Send you transactional emails related to your account, such as access confirmations and usage updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service's features and performance
• Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities
• Comply with legal obligations
• Send you promotional communications about new features or beta updates, where you have opted in

03 Pinterest Board Data

We support two methods of accessing Pinterest boards: (1) publicly available boards, which require no authentication, and (2) private boards, which require you to authenticate via Pinterest's OAuth flow and explicitly grant Boards to Beats read-only access to your boards and pins. When you authenticate via Pinterest OAuth, we request only the minimum scopes required (boards:read, pins:read) and do not access your Pinterest profile data, follower information, analytics, or any data beyond the board images you select. Pinterest access tokens are stored only for the duration of your active session and are not retained after you disconnect your Pinterest account or log out.

We do not access any Pinterest data that you have not explicitly selected for processing. We do not scrape Pinterest at scale, build Pinterest user databases, or aggregate content from boards that do not belong to you.

In accordance with Pinterest's Developer Guidelines and API Terms of Service, we also commit to the following:

• No persistent storage of API data. Pinterest board images and metadata retrieved via the API are processed in memory and are not stored on our servers beyond the duration of your active session. We call the Pinterest API each time we need to access your board information rather than caching it.
• Data used solely to serve you. Pinterest data accessed through your account is used exclusively to provide the Service to you. We do not combine your Pinterest account information with data from other users' accounts or with data from other services.
• No sharing or selling of Pinterest data. We do not share, sell, or transfer any data accessed via Pinterest's API to third parties for any purpose, including advertising or analytics services.
• No credential collection. We do not solicit or store your Pinterest username, password, or session cookies. All Pinterest access is handled exclusively through Pinterest's official OAuth authorization flow.
• No training data use. We do not use Pinterest imagery or metadata to train machine learning models or build datasets.
• Your responsibility. You are responsible for ensuring you have the right to use any Pinterest board you submit. We are not responsible for third-party content accessed via Pinterest URLs.

04 Audio and Music Data

When you upload audio files or connect music tracks to the Service:

• Audio files are processed to extract BPM, energy, waveform, and timing metadata required to generate your visuals.
• We do not use your audio files for any purpose other than generating your requested visual output.
• Audio files and their derived metadata are deleted from our servers within 30 days of your last session, or sooner upon your request.
• You represent that you own or have obtained all necessary rights and licenses to use any music you submit through the Service.
• We do not reproduce, distribute, or publicly perform your audio files.

05 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Service. These technologies help us keep you logged in, remember your preferences, and understand how you interact with the Service.

Types of cookies we use:

• Essential cookies: Required for the Service to function, such as session authentication. These cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Service so we can improve it. We use privacy-respecting analytics that do not sell your data.
• Preference cookies: Remember your settings and choices across sessions.

You can control non-essential cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect Service functionality.

06 How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Service providers: We share information with trusted third-party vendors who help us operate the Service (e.g., cloud hosting, email delivery). These providers are contractually obligated to use your information only to provide services to us.
• Legal compliance: We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Boards to Beats, our users, or others.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: We may share information with third parties when you explicitly direct us to do so.

07 Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Account data (name, email, profile): Retained for the lifetime of your account plus 30 days after deletion.
• Pinterest board data (cached images, metadata): Deleted within 24 hours of export or session end.
• Audio files: Deleted within 30 days of your last active session.
• Generated visual outputs: Retained in your account library until you delete them or close your account.
• Log and analytics data: Retained for up to 12 months in identifiable form, then anonymized or deleted.

You can request deletion of your account and associated data at any time (see Section 8).

08 Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We honor these rights regardless of where you are located:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain exceptions.
• Portability: Request a machine-readable copy of your data to transfer to another service.
• Opt-out of marketing: Unsubscribe from promotional communications at any time.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us using the information in Section 13. We will respond to verified requests within 30 days.

09 Children's Privacy

The Service is not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at the address in Section 13.

10 Security

We take the security of your information seriously. We implement and maintain reasonable administrative, technical, and physical security measures designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction.

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Uploaded files are stored with encryption at rest.
• Access to personal data within our systems is restricted to authorized personnel on a need-to-know basis.
• We conduct regular reviews of our security practices.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by law.

11 Third-Party Links

The Service may contain links to third-party websites, including Pinterest, streaming platforms, and other services. These links are provided for your convenience. We have no control over the content or privacy practices of those sites, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any third-party services you visit.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new effective date
• Sending you an email notification if you have an account with us
• Displaying a notice within the Service

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you should stop using the Service and may request deletion of your account.

13 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us. We take privacy inquiries seriously and will respond promptly.