what we store

• Your sign-in email (Google)
• OAuth tokens for YouTube and Dropbox, AES-256-GCM encrypted at rest — we never see them in plaintext
• Settings you provide: beat store URL, contact email, and your own API keys if you supply them
• Upload history: video titles, tags, links and privacy status for videos you upload
• Aggregated YouTube Analytics for your uploads (traffic sources and search terms), retained for 28 days

how files flow

• Audio and artwork are rendered into video inside your browser — source files are never uploaded to or stored on BeatDrop servers
• The rendered video is sent to YouTube through BeatDrop's Cloudflare Functions and is not stored by BeatDrop
• Dropbox is used only to list folders and download the files you select; BeatDrop never accesses or shares files between accounts

third parties

• Supabase (database and authentication)
• Cloudflare (hosting)
• Google (sign-in, YouTube uploads, Gemini for title/tag generation)
• Dropbox (only when you connect it)

your choices

You can disconnect YouTube or Dropbox, delete your account data, or remove individual connections at any time. Trend data is automatically deleted after 28 days per YouTube API policy.