This Privacy Policy explains how THAIBEATS AS (“THAIBEATS”, “we”, “us”, or “our”) processes personal data in connection with TRACKVID — our macOS desktop application and the cloud services that handle scheduling, publishing, and integrity checks. We are committed to handling your data lawfully, transparently, and securely under the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
01 Who we are
TRACKVID is operated by THAIBEATS AS, a company registered in Norway (org. no. [NNN NNN NNN]), with its registered office at [Street address], [Postal code] [City], Norway. For the purposes of applicable data-protection law, THAIBEATS AS is the data controller for personal data processed through TRACKVID, except where this Policy states that we act as a processor on your behalf.
If you have any questions about this Policy or our data practices, contact us at privacy@thaibeats.com.
02 Information we collect
We collect the following categories of data, depending on how you use TRACKVID:
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email address, password hash, organization, plan and license status. | You, at sign-up |
| Channel & OAuth data | YouTube channel IDs, channel titles, OAuth access & refresh tokens, quota usage, and metadata you configure per channel. | Google/YouTube OAuth, you |
| Content data | Tracklists, track metadata (titles, BPM, key, duration), generated artwork, branding overlays, and video metadata (titles, descriptions, tags, schedule). | You, the app |
| Render & usage data | Render history, encoding presets, app version, device type (Apple Silicon model), crash reports, diagnostic logs, and feature telemetry. | The app |
| Publishing data | Upload status, publish state transitions, blob audit results, and timestamps required to drive the publish state machine. | The cloud service |
| Billing data | Subscription tier, billing cycle, transaction identifiers, and partial card details held by our payment processor (we do not store full card numbers). | Payment processor |
| Support data | Messages, attachments, and correspondence you send to our support team. | You |
Your audio stays local. Source audio files are scanned and analyzed on your own device. We do not upload raw audio to our servers. Only the finished rendered video and the metadata required to publish it are transmitted to our cloud and to YouTube.
03 YouTube API Services
TRACKVID uses YouTube API Services to connect channels, upload videos, set metadata, and schedule or publish content on your behalf. By connecting a channel, you authorize TRACKVID to act on that channel through the YouTube Data API.
- Your use of TRACKVID's YouTube features is subject to the YouTube Terms of Service.
- Google's handling of your data is governed by the Google Privacy Policy.
- You can review and revoke TRACKVID's access to your Google account at any time via the Google security settings page.
We request the minimum YouTube authorization scopes necessary to upload, manage, and publish videos for the channels you connect. We store OAuth tokens encrypted at rest, use them solely to perform actions you have configured, and refresh them only to keep your connected channels working. We do not use YouTube API data for advertising, and we do not share it with independent third parties except the sub-processors listed in Section 6.
04 How we use information
We process personal data to:
- Provide the service — authenticate you, build tracklists, generate artwork, render videos, and upload, schedule, and publish to your connected channels.
- Operate the publish pipeline — run the publish state machine, claim due videos via cron, and perform watchdog and daily blob-audit integrity checks.
- Generate artwork & metadata — route prompts and reference inputs through our AI gateway to produce cover/thumbnail art and suggested metadata.
- Maintain & improve — diagnose crashes, monitor performance, deliver auto-updates, and improve features.
- Bill & administer — manage subscriptions, trials, renewals, and licensing.
- Communicate — send service notices, security alerts, and support responses.
- Protect — prevent fraud, abuse, and violations of our Terms, and comply with legal obligations.
05 Legal bases for processing
Under the GDPR, we rely on the following legal bases:
- Performance of a contract — to deliver the features you sign up for.
- Legitimate interests — to secure, maintain, and improve TRACKVID, prevent abuse, and operate our business, balanced against your rights.
- Consent — where required, for example optional analytics or marketing communications. You may withdraw consent at any time.
- Legal obligation — to meet accounting, tax, and other legal requirements.
07 Data retention
We keep personal data only as long as necessary for the purposes described in this Policy. Account and channel data are retained for the life of your account. Rendered blobs and release artifacts are retained per your plan's storage settings and may be purged after publishing or on request. Diagnostic logs are typically retained for a limited period and then deleted or anonymized. Billing records are kept as required by accounting and tax law. When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where retention is legally required.
08 International transfers
Some sub-processors operate outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data receives an equivalent level of protection.
09 Security
We use technical and organizational measures appropriate to the risk, including encryption of OAuth tokens and data in transit (TLS), access controls, signed and notarized application builds, integrity checks on uploaded blobs, and least-privilege access for our systems. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
10 Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”).
- Restrict or object to certain processing.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
To exercise these rights, email privacy@thaibeats.com. You also have the right to lodge a complaint with your local supervisory authority — in Norway, the Norwegian Data Protection Authority (Datatilsynet).
12Children's privacy
TRACKVID is intended for professional and adult creators and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us personal data, contact us and we will delete it.
13 Changes to this Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in-app or by email. Your continued use of TRACKVID after an update constitutes acceptance of the revised Policy.
14 Contact us
For privacy questions or to exercise your rights, reach us at:
[Street address], [Postal code] [City], Norway
Org. no. [NNN NNN NNN]
Privacy: privacy@thaibeats.com
General: support@thaibeats.com