Privacy Policy

This Privacy Policy explains how Audia Automation (the "Application", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our desktop application and visit our website at audiaautomation.com.

1. Who We Are

Audia Automation is operated by Audia Automation Ltd based in Cambridge, United Kingdom. For any questions about this Privacy Policy or your personal data, contact us at info.audiaautomation@gmail.com.

For the purposes of UK GDPR and EU GDPR, the data controller is Audia Automation Ltd.

2. What Information We Collect

We collect only the information necessary to operate the Application and provide our service.

Account Information

When you create an Audia Automation account, we collect your email address, an encrypted password hash (we never see or store your plaintext password), your subscription tier, and your usage counter (the number of beats processed in the current month).

Payment Information

When you purchase a subscription, payment processing is handled entirely by Stripe, Inc. We do not see, collect, or store your full card number or CVV. We retain only a Stripe customer ID and limited subscription metadata returned by Stripe (subscription status, renewal date, last four card digits).

Technical Information

Our authentication provider (Supabase) automatically logs your IP address and browser/device information at the moment of sign-in for security and abuse prevention.

Information from Google (YouTube)

When you connect your YouTube account, the Application receives an OAuth authorisation token that allows it to upload videos to your YouTube channel on your behalf. This token is stored locally on your computer in a file called token.pickle, protected by your operating system. This token is never transmitted to our servers or any third party. It remains on your machine until you uninstall the Application or revoke access via your Google Account.

Information from BeatStars

When you connect your BeatStars account, the Application stores your authenticated browser session locally on your computer. No BeatStars credentials are transmitted to our servers.

3. Google User Data — Detailed Disclosure

This section provides a detailed account of how the Application accesses, uses, stores, and shares data obtained through Google APIs, as required by the Google API Services User Data Policy.

Scopes Requested

The Application requests the following Google OAuth scope:

• https://www.googleapis.com/auth/youtube.upload — Permission to upload videos to your YouTube channel.

This is the only Google scope we request. We do not request access to your existing videos, comments, subscribers, analytics, playlists, or any other YouTube data.

How We Use This Data

The youtube.upload scope is used exclusively to upload music beat videos that you have explicitly chosen to upload through the Application's interface. We use this data solely to authenticate your YouTube channel, upload videos you have prepared within the Application, and set the title, description, tags, and privacy status of those videos as you specified.

Where This Data Is Stored

Your YouTube OAuth refresh token is stored on your local computer in a file called token.pickle. It is never transmitted to or stored on any server we operate. No employee, contractor, or third party of Audia Automation can access your YouTube credentials.

How Long We Retain It

We do not retain any Google user data on our servers. The local token on your computer remains until you uninstall the Application, revoke access at myaccount.google.com/permissions, or manually delete the token.pickle file.

What We Do NOT Do With Google User Data

• We do not transfer or sell your data to third parties (advertising platforms, data brokers, information resellers, or anyone else).
• We do not use your data for personalised advertising or retargeting.
• We do not use your data to determine credit-worthiness or for lending purposes.
• We do not use your data to train artificial intelligence or machine learning models.
• We do not read, modify, or delete any existing content on your YouTube channel.

Limited Use Disclosure

Revoking Access

You can revoke the Application's access to your YouTube account at any time by visiting myaccount.google.com/permissions and removing Audia Automation. Doing so will disable upload functionality but will not affect your YouTube account or your videos.

4. How We Use Your Information

We use your information to authenticate you when you sign in, provide the Application's features, enforce subscription tier limits (using the beats-per-month counter), process payments and manage subscriptions, send essential service emails (account changes, billing notifications, security alerts), and comply with our legal obligations.

We do not send marketing emails without your separate, explicit consent.

5. Who We Share Your Information With

We share your information only with the following processors, each strictly necessary to operate the service:

• Supabase Inc. — Authentication and database hosting. Stores your email, password hash, subscription tier, and usage counter. Privacy policy: supabase.com/privacy
• Stripe, Inc. — Payment processing. Handles your card data; we never see it. Privacy policy: stripe.com/privacy
• Cloudflare, Inc. — Website hosting and content delivery for audiaautomation.com. Privacy policy: cloudflare.com/privacypolicy

We do not sell your data. We do not share your data for advertising. We do not transfer your data outside the processors listed above.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (for example, payment records, which we retain for 7 years for UK tax purposes via Stripe).

7. Your Rights Under UK and EU GDPR

You have the right to access the personal data we hold about you, correct inaccurate personal data, delete your personal data ("right to be forgotten"), export your personal data in a portable format, restrict how we process your data, object to processing in certain cases, withdraw consent at any time, and lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email us at info.audiaautomation@gmail.com. We respond within 30 days.

8. Security

We protect your information using HTTPS for all communications with our servers, encrypted password storage (handled by Supabase using industry-standard hashing), Row-Level Security on our database (ensuring users can only access their own data), and local storage of YouTube and BeatStars credentials so they never reach our servers.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you and the UK ICO within 72 hours as required by law.

9. Children's Privacy

The Application is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Cookies (Website Only)

The audiaautomation.com website uses a small number of essential cookies for site functionality. The Application itself does not use cookies. We do not use third-party advertising or analytics cookies.

11. International Users

Audia Automation is operated from the United Kingdom. By using the Application, you consent to your data being processed in the UK. Our processors (Supabase, Stripe, Cloudflare) may store data in other jurisdictions; all are GDPR-compliant or operate under standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and in the Application. The "Last Updated" date at the top of this document reflects the most recent revision.

13. Contact

For any questions about this Privacy Policy or to exercise your rights:

Email: info.audiaautomation@gmail.com
Website: audiaautomation.com