privacy policy

introduction

welcome to the spotify soundcloud bpm & key overlay ("we," "our," or "us"). this privacy policy explains how we collect, use, disclose, and safeguard your information when you use our chrome extension and related services (collectively, the "service").

please read this privacy policy carefully. by installing our extension or using our service, you agree to the collection and use of information in accordance with this policy.

information we collect

1. automatically collected information

when you use our service, we automatically collect certain information:

• extension installation id: a unique identifier generated when you install the extension
• platform data: song ids and metadata from spotify and soundcloud that you interact with
• usage data:
  • number of api requests made
  • timestamps of requests
  • types of analyses performed (bpm, key detection)
• technical data:
  • browser type and version
  • operating system
  • ip address (for api rate limiting)

2. information you provide

when creating an account or upgrading to pro:

• account information: email address, name (optional)
• payment information: processed securely through paddle (we do not store payment details)
• verification data: recaptcha responses for bot prevention

3. analyzed music data

our service analyzes and stores:

• track metadata: platform type, track ids, track titles
• analysis results: bpm, musical key, confidence scores
• download availability: youtube metadata for tracks (when available)

how we use your information

we use collected information to:

1. provide core services

• display bpm and key information on supported platforms
• cache analysis results for faster future access
• track usage against plan limits

2. improve our service

• analyze usage patterns to enhance features
• debug issues and improve performance
• develop new functionality

3. account management

• manage subscriptions and billing cycles
• enforce usage limits for free tier users
• provide customer support

4. security and compliance

• prevent abuse and fraudulent activity
• comply with legal obligations

third-party services

we integrate with several third-party services:

analytics and music data providers

• reccobeats api: for music analysis and metadata
• rapidapi (spotify web api): for spotify track information
• custom audio analyzer: our proprietary service for soundcloud analysis

infrastructure and security

• google recaptcha enterprise: for bot prevention during account creation
• digitalocean: cloud hosting and data storage
• paddle: payment processing and subscription management

these services may collect and process data according to their own privacy policies.

data storage and retention

• analysis data: cached indefinitely to improve performance
• user account data: retained as long as your account is active
• usage logs: retained for 90 days for debugging and support
• deleted accounts: data removed within 30 days of account deletion

data is stored on secure servers in the united states.

your privacy rights

you have the right to:

• access: request a copy of your personal data
• correction: update inaccurate information
• deletion: request removal of your account and associated data
• portability: receive your data in a machine-readable format
• opt-out: disable the extension or specific features at any time

to exercise these rights, contact us at privacy@flow-finder.net

data security

we implement appropriate technical and organizational measures to protect your data:

• encrypted data transmission (https)
• secure api authentication
• regular security audits
• limited access to personal data

however, no method of transmission over the internet is 100% secure.

children's privacy

our service is not intended for users under 13 years of age. we do not knowingly collect information from children under 13.

international data transfers

if you access our service from outside the united states, your data may be transferred to and processed in the united states or other countries.

changes to this privacy policy

we may update this privacy policy from time to time. we will notify you of material changes by:

• updating the "last updated" date
• sending an email (for registered users)
• displaying a notice in the extension

contact us

if you have questions about this privacy policy, please contact us at:

cookie policy

our extension uses browser local storage (similar to cookies) to:

• store your preferences and settings
• cache analysis results locally
• maintain your session state

you can clear this data through your browser settings.

california privacy rights

california residents have additional rights under the ccpa, including the right to:

• know what personal information is collected
• know whether personal information is sold or disclosed
• say no to the sale of personal information
• equal service and price, even if you exercise your privacy rights

we do not sell personal information.

european privacy rights

if you are in the european economic area (eea), you have additional rights under gdpr:

• legal basis for processing (legitimate interests, consent, or contract performance)
• right to lodge a complaint with supervisory authorities
• right to withdraw consent
• right to object to processing

our legal basis for processing is primarily contract performance (providing the service you requested) and legitimate interests (improving our service).