Privacy policy

Who we are

BeatsOnDeck is the marketplace described in these pages, and is responsible for the personal data it collects through the site. If you want a copy of your data, a correction, or your account deleted, get in touch and we will deal with it.

What we collect

• • Account details: your name, email address, and a hashed password. We never store the password itself.
• • Whether your email address has been confirmed, and short-lived tokens used to confirm it or to reset a password. Those are stored hashed and expire.
• • Producer storefronts: display name, bio, profile picture, social links, and the beats you list.
• • Uploaded files: the audio itself and any cover art, plus the title, genre, tags, BPM and key you enter.
• • Marketplace activity: purchases, play counts, balance history, withdrawals, refunds and featured placements.
• • Moderation records: whether an account has been suspended and the reason given.

We do not use advertising or analytics trackers, and we do not build profiles of you for anyone else.

Cookies

One cookie, set when you sign in, which holds your session so you stay signed in. It expires after a week or when you sign out. There are no advertising or analytics cookies, so there is nothing here to opt into.

How we use it

To run the marketplace: showing listings, streaming previews, delivering purchased files, moving money between balances, confirming that an email address belongs to the person using it, letting you recover an account, and preventing fraud or abuse.

Your audio files

Preview audio is public — anyone can play it. The full file is served only to the producer who uploaded it and to people who have bought it. If you upload a beat without a separate preview, the full track becomes the preview and is therefore publicly playable.

What we share

Your public listing — producer name, bio, profile picture, beat titles, tags and play counts — is visible to anyone. Beyond that we share personal data only with the services needed to run the site:

• • A hosting provider, which runs the application.
• • A database provider, which stores the records described above.
• • An object storage provider, which stores uploaded audio and images.
• • An email provider, which delivers account emails such as password resets.
• • Payment providers, which receive what they need to move money.

These providers process data on our instructions. We do not sell personal data, and we do not share it for advertising.

Where data is held

Our providers operate internationally, so your data may be stored or processed outside your own country, including outside the UK and EEA.

Security

The site is served over HTTPS. Passwords are stored hashed, and reset and verification tokens are stored hashed as well, so the database contains no credential that can be used as-is. Downloads of purchased files are checked against the purchase record on every request rather than being handed out as public links.

Retention

Purchase and balance records are kept for as long as needed for accounting and dispute resolution. Because a purchase is a permanent download right, a sold beat's file is retained even after the producer delists it — that is what the buyer paid for, and deleting it would take away something they own. Verification and reset tokens are short-lived and are spent or expire.

Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account. You can edit your details and listings from your dashboard and hide your storefront at any time. Depending on where you live you may also have the right to object to or restrict how we use your data, and to complain to your local data protection regulator.

Deleting an account does not remove records we are required to keep for accounting, or files that buyers are still entitled to download.

Changes

If this policy changes materially we will update the date at the top. Your continued use of the site after a change means you accept the updated policy.