Privacy & data use

We use your material to operate the studio, create what you request, keep projects available to you, calculate generation costs, and diagnose failures.

Beat Board does not currently sell personal information or use third-party advertising trackers. There is no separate undisclosed human-review or moderation service in the application. The generation providers named below may still log, review, or restrict requests under their own terms.

• Account data: email address, internal user ID, authentication sessions, and account timestamps.
• Creative work: songs, lyrics, scripts, prompts, reference photos, faces and characters, costumes, props, storyboards, generated clips, edits, exports, and related project settings.
• Director activity: tool names and arguments, estimates, confirmations, results, failures, and undo information. Tool arguments can include prompts and selected project details.
• Operations: provider task IDs, generation status, costs, durations, route and request IDs, errors, and security or reliability logs.

Public watch pages record a view and viewing milestones at 25%, 50%, 75%, and 100%, plus replays, shares, and “Make your own” clicks. Records can include the video slug, time watched, referral or promotion code, browser user-agent, and a random watch-session ID.

The watch-session cookie lasts up to one year. Promotion, source-video, and referral cookies last up to 90 days. If an IP-hash secret is configured, Beat Board stores a short daily one-way hash rather than the raw IP in its application database. Hosting and security providers may still process network addresses in their infrastructure logs.

Only the material needed for the feature you choose is sent to that provider. Those companies operate their own infrastructure and may have independent retention, safety, or abuse-prevention systems.

Beat Board uses Supabase authentication cookies to keep signed-in users authenticated. Public watch pages use the session and attribution cookies described above. These are used for account access, watch-page measurement, referrals, and promised promotions—not third-party behavioral advertising.

Project data is kept while it is needed to provide your account and reusable library. Operational records and provider logs can remain longer for reliability, billing reconciliation, security, backups, or legal requirements. Each external provider controls its own retention period.

Access is limited to the user who owns the project and authorized operators or service providers who need it to run and secure Beat Board. Tenant separation is enforced through authenticated requests and database row-level security; privileged service credentials are reserved for server-side jobs that require them.

To ask what is held about you, correct it, or request deletion, email james@badasssaas.com.

This page will be updated when Beat Board adds a provider, starts collecting a new category of information, or materially changes how information is used. The date at the top identifies the current version.