Privacy

What we collect

Signing in is Google only. From it we receive your email address, your display name and a Google account identifier. We never see and never store your Google password.

When you generate a session we store what you asked for — the arc, the length, and any genre, mood, instruments or tempo you typed — along with the settings chosen on your behalf, timestamps, and what the session cost us to produce.

If you ask for access we store the email address you give us, which of the four uses you pick, anything you write in the note, and the time you sent it. We also keep a one-way fingerprint of your network address — not the address itself — purely to stop the form being flooded. That request is a message to us, not an account: it is stored separately, and it grants nothing until a person acts on it.

Where it is stored

Account records, session details and access requests are held in Google Firestore. Generated audio is held in Google Cloud Storage. Both are in Google Cloud’s us-central1 region, in the United States.

An access request is also emailed to us through Resend, our email provider, so that a person sees it. Nothing else on this site sends email, and we never email the address you submit until we reply to you ourselves.

Audio files are private. Playing one uses a link that expires shortly after it is issued, so a link copied out of the page stops working rather than becoming a permanent public URL.

Two things that leave our control, stated plainly

Text you type is sent to our music generation provider in order to produce audio. That includes any genre, mood or instrument description you write. Do not put anything private, identifying or confidential in those fields — they are creative direction, not a notes app.

Cover images are publicly readable. Each session gets generated abstract artwork, and those image files are served from a public location so they load quickly. The images contain no people, no text and nothing you typed — but the file itself is reachable by anyone holding its address. Your audio is not stored this way.

What we do not do

This site sets no cookies, runs no analytics and carries no third-party trackers or advertising. We do not sell personal information, and we do not process payments — there is nothing to pay for yet, so we hold no card details of any kind.

How long we keep it

Sessions and account records are kept while your account exists. Ask us to delete your account and we remove the account record, its sessions and their audio.

Access requests are kept while the beta runs, because they are the list we work through. Ask and we delete yours — including if you decide you would rather not be on it.

Getting your data, or getting rid of it

Email the address you signed in with to privacy@mail.beatarc.com and say what you want — a copy, a correction, or deletion. The beta is small enough that a person reads it.

Changes

If this policy changes in a way that affects what we collect or who sees it, everyone with an account is told before the change takes effect.