PRIVACY POLICY

BeamTracer LLC ("we," "us," or "our") operates beamtracer.com, including the Audio Visualizers, OSC-1 Oscilloscope, and BT Laser Studio applications (the "Service"). We are based in San Mateo County, California.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information. We are committed to transparency and to protecting your privacy.

2.1 Information You Provide

• Account Information: Email address, display name, and profile photo (when signing up via Google OAuth or email).
• Payment Information: Billing details processed by Stripe. We do not store credit card numbers on our servers.
• Feedback: Messages submitted through our in-app feedback system. The message is delivered to our support inbox; we separately retain only its category, BeamTracer surface, selected work role, and submission time for aggregate intake counts.
• Support Requests: Communications sent to our support email.
• Optional AI Tools: The prompts and media you choose to submit, including audio for lyric transcription, are sent for processing when you use the corresponding AI action.

2.2 Information Collected Automatically

• Product Usage: We record a small number of first-party events on our own servers to understand setup, sign-in reliability, which BeamTracer apps, tools, and visualizers are opened, personal visualizer star choices, successful exports, and whether a browser returns on a later day. Setup answers are limited to the fixed choices shown on screen. Event properties reject free text, email addresses, filenames, project content, credentials, and audio. Product activity uses a random browser id; after you sign in, an internal account id may also be attached to an event. We review these events only as aggregate totals and do not provide a person-level activity view. Clearing site data resets the browser id.
• Server Logs: Our hosting provider (Vercel) may collect IP addresses and request metadata for security and performance purposes, subject to Vercel's privacy policy.

2.3 Information Stored Locally

Live audio analysis and visual rendering happen in your browser. Loading a local audio file for playback does not upload it; choosing an AI action such as lyric transcription sends the selected audio for that task. Application settings, presets, MIDI mappings, and preferences are saved on your device. Supported paid plans can sync eligible settings to your account. The random product-usage id described in 2.2 is stored locally and may also be mirrored in a first-party, same-site cookie so an email sign-in can remain part of the same aggregate journey.

• To provide, maintain, and improve the Service.
• To process subscriptions and payments via Stripe.
• To send transactional emails (account confirmation, password reset, billing receipts) via Resend.
• To respond to support requests and feedback.
• To confirm that a contact-form address belongs to the sender. A message you submit is held unsent and is delivered to us only when you click the confirmation link we email you. If you never confirm, it is discarded automatically within 24 hours and we never see it.
• To monitor and prevent abuse (rate limiting, fraud detection).
• To comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising. We do not build advertising profiles.

We use the following third-party services that may process your data:

We do not use third-party or cross-site tracking cookies. Authentication sessions use secure, HTTP-only cookies for session management. The random product-usage id and analytics preference described in 2.2 may use first-party, same-site cookies; they are not used to follow you across other websites or build an advertising profile. You can disable product analytics under Account → Privacy & Data, which stops these events from being sent.

• Connections to the BeamTracer website use HTTPS encryption in transit.
• Payment details are handled by Stripe; BeamTracer does not store your card number.
• Access to account information is restricted to providing and maintaining the service.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request what personal information we collect, use, disclose, and sell.
• Right to Delete: You may request deletion of your personal information.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information beyond what is necessary for the Service.

To exercise any of these rights, contact us via our contact form (topic: Privacy request). We will respond within 45 days as required by law. We may ask you to verify your identity before processing your request.

Do Not Sell My Personal Information: We do not sell your personal information. We do not share personal information with third parties for cross-context behavioral advertising.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Payment records: Retained as required by tax and financial regulations (typically 7 years).
• Product usage events: Kept as long as they are useful for aggregate product improvement. Deleting your account clears any account link while retaining de-identified totals.
• Unconfirmed contact messages: Held at most 24 hours awaiting email confirmation, then deleted automatically. Confirmed messages are delivered to our inbox and retained there as ordinary correspondence.
• Server logs: Vercel retains logs per their data retention policy.
• Local data (localStorage): Stored on your device; you can clear it at any time via browser settings.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us via our contact form and we will delete it promptly.

The Service is operated in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US, which may have different data protection laws than your jurisdiction. By using the Service, you consent to this transfer.

For EU/EEA users: We process data based on consent (account creation) and legitimate interest (service operation, security). You may withdraw consent at any time by deleting your account.

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Service at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.

For privacy-related questions, requests, or complaints:

BeamTracer LLC
San Mateo County, California
Via our contact form (topic: Privacy request)

If you are not satisfied with our response, California residents may file a complaint with the California Attorney General's office at oag.ca.gov.