Last updated · 29 August 2026

Privacy Policy

This Privacy Policy explains how Audia Automation (the "Application", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use our desktop application and visit our website at audiaautomation.com.

1. Who We Are

Audia Automation is a service based in Cambridge, United Kingdom. For any questions about this Privacy Policy or your personal data, contact us at audiaautomation@gmail.com.

For the purposes of UK GDPR and EU GDPR, the data controller is Audia Automation.

2. What Information We Collect

We collect only the information necessary to operate the Application and provide our service.

Account Information

When you create an Audia Automation account, we collect your email address, an encrypted password hash (we never see or store your plaintext password), your subscription tier, and your usage counter (the number of beats processed in the current month).

Payment Information

When you purchase a subscription, payment processing is handled entirely by Stripe, Inc. We do not see, collect, or store your full card number or CVV. We retain only a Stripe customer ID and limited subscription metadata returned by Stripe (subscription status, renewal date, last four card digits).

Technical Information

Our authentication provider (Supabase) automatically logs your IP address and browser/device information at the moment of sign-in for security and abuse prevention.

Information from Google (YouTube)

When you connect your YouTube account, the Application receives an OAuth authorisation token that allows it to upload videos to your YouTube channel on your behalf. This token is stored locally in your computer's operating-system credential store (Keychain on macOS, Credential Manager on Windows), protected by your operating system. This token is never transmitted to our servers or any third party. It remains on your machine until you uninstall the Application or revoke access via your Google Account.

Information from BeatStars

When you connect your BeatStars account, the Application stores your authenticated browser session locally on your computer. No BeatStars credentials are transmitted to our servers.

Information from SoundCloud

When you connect your SoundCloud account, the Application authenticates through SoundCloud's official OAuth flow and receives an authorisation token that allows it to upload tracks to your SoundCloud profile on your behalf. This token is stored locally in your computer's operating-system credential store (Keychain on macOS, Credential Manager on Windows). This token is never transmitted to our servers or any third party. We do not see or store your SoundCloud password. The token remains on your machine until you uninstall the Application or revoke the Application's access from your SoundCloud account settings (Settings → Connections).

Information from Airbit

When you connect your Airbit account, the Application stores your authenticated browser session locally on your computer, in the same way as BeatStars. No Airbit credentials are transmitted to our servers.

3. Google User Data — Detailed Disclosure

Audia Automation uses YouTube API Services. By connecting your YouTube channel through the Application, you agree to be bound by the YouTube Terms of Service. Google's handling of your information is governed by the Google Privacy Policy.

This section provides a detailed account of how the Application accesses, uses, stores, and shares data obtained through Google APIs and YouTube API Services, as required by the Google API Services User Data Policy and the YouTube API Services Developer Policies.

Scopes Requested

The Application requests the following Google OAuth scope:

  • https://www.googleapis.com/auth/youtube.upload — Permission to upload videos to your YouTube channel.

This is the only Google scope we request. We do not request access to your existing videos, comments, subscribers, analytics, playlists, or any other YouTube data.

How We Use This Data

The youtube.upload scope is used exclusively to upload music beat videos that you have explicitly chosen to upload through the Application's interface. We use this data solely to authenticate your YouTube channel, upload videos you have prepared within the Application, and set the title, description, tags, and privacy status of those videos as you specified.

Where This Data Is Stored

Your YouTube OAuth refresh token is stored locally in your computer's operating-system credential store (Keychain on macOS, Credential Manager on Windows). It is never transmitted to or stored on any server we operate. No employee, contractor, or third party of Audia Automation can access your YouTube credentials.

How Long We Retain It

We do not retain any Google user data on our servers. The local token on your computer remains until you uninstall the Application, revoke access at myaccount.google.com/permissions, or manually remove the Application's entry from your operating system's credential store.

What We Do NOT Do With Google User Data

  • We do not transfer or sell your data to third parties (advertising platforms, data brokers, information resellers, or anyone else).
  • We do not use your data for personalised advertising or retargeting.
  • We do not use your data to determine credit-worthiness or for lending purposes.
  • We do not use your data to train artificial intelligence or machine learning models.
  • We do not read, modify, or delete any existing content on your YouTube channel.

Limited Use Disclosure

Audia Automation's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking Access

You can revoke the Application's access to your YouTube account at any time from Google's security settings page at security.google.com/settings/security/permissions (also reachable at myaccount.google.com/permissions) by removing Audia Automation. You can also disconnect YouTube from inside the Application, which revokes the token with Google immediately and clears it from your computer. Doing either disables upload functionality but does not affect your YouTube account or any videos already published.

Deleting Your Data

If you revoke access, delete your account, or ask us to delete your data, we delete all data obtained through YouTube API Services within 7 days. You can request deletion at any time by emailing audiaautomation@gmail.com.

Deleting data held by Audia Automation does not delete anything stored by YouTube. To remove videos, metadata, or other content from YouTube itself, use YouTube Studio or the YouTube app.

Third-Party Content and Advertising

The Application does not display advertising, and does not allow any third party to serve content or advertisements within it.

4. How We Use Your Information

We use your information to authenticate you when you sign in, provide the Application's features, enforce subscription tier limits (using the beats-per-month counter), process payments and manage subscriptions, send essential service emails (account changes, billing notifications, security alerts), and comply with our legal obligations.

We do not send marketing emails without your separate, explicit consent.

5. Who We Share Your Information With

We share your information only with the following processors, each strictly necessary to operate the service:

  • Supabase Inc. — Authentication and database hosting. Stores your email, password hash, subscription tier, and usage counter. Privacy policy: supabase.com/privacy
  • Stripe, Inc. — Payment processing. Handles your card data; we never see it. Privacy policy: stripe.com/privacy
  • Cloudflare, Inc. — Website hosting and content delivery for audiaautomation.com. Privacy policy: cloudflare.com/privacypolicy

Sub-processors and data processing terms

The three companies listed above are our only sub-processors. Each is engaged under its own data processing agreement (DPA) and processes personal data solely on our documented instructions. Supabase and Stripe may process data outside the UK and EEA; both operate under Standard Contractual Clauses for those transfers. We do not add a sub-processor without updating this page first. If you need a copy of our DPA, or want to be notified in advance of sub-processor changes, email audiaautomation@outlook.com.

We do not sell your data. We do not share your data for advertising. We do not transfer your data outside the processors listed above.

6. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (for example, payment records, which we retain for 7 years for UK tax purposes via Stripe).

7. Your Rights Under UK and EU GDPR

You have the right to access the personal data we hold about you, correct inaccurate personal data, delete your personal data ("right to be forgotten"), export your personal data in a portable format, restrict how we process your data, object to processing in certain cases, withdraw consent at any time, and lodge a complaint with the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email us at audiaautomation@gmail.com. We respond within 30 days.

8. Security

We protect your information using HTTPS for all communications with our servers, encrypted password storage (handled by Supabase using industry-standard hashing), Row-Level Security on our database (ensuring users can only access their own data), and local storage of YouTube, BeatStars, SoundCloud, and Airbit credentials and sessions so they never reach our servers.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you and the UK ICO within 72 hours as required by law.

9. Children's Privacy

The Application is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Cookies (Website Only)

The audiaautomation.com website uses a small number of essential cookies for site functionality. The Application itself does not use cookies. We do not use third-party advertising or analytics cookies.

11. International Users

Audia Automation is operated from the United Kingdom. By using the Application, you consent to your data being processed in the UK. Our processors (Supabase, Stripe, Cloudflare) may store data in other jurisdictions; all are GDPR-compliant or operate under standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via email and in the Application. The "Last Updated" date at the top of this document reflects the most recent revision.

13. Contact

For any questions about this Privacy Policy or to exercise your rights:

Email: audiaautomation@gmail.com
Website: audiaautomation.com