PRIVACY POLICY

BeamTracer LLC ("we," "us," or "our") operates beamtracer.com, including the Audio Visualizers, OSC-1 Oscilloscope, and BT Laser Studio applications (the "Service"). We are based in San Mateo County, California.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information. We are committed to transparency and to protecting your privacy.

2.1 Information You Provide

• Account Information: Email address, display name, and profile photo (when signing up via Google OAuth or email).
• Payment Information: Billing details processed by Stripe. We do not store credit card numbers on our servers.
• Feedback: Messages submitted through our in-app feedback system. The message is delivered to our support inbox; we separately retain only its category, BeamTracer surface, selected work role, and submission time for aggregate intake counts. If you agree to be contacted about a report, the email address you enter is sent with that feedback to our support inbox and used only to follow up on it.
• Support Requests: Communications sent to our support email.
• Optional AI Tools: The prompts and media you choose to submit, including audio for lyric transcription, are sent for processing when you use the corresponding AI action.

2.2 Information Collected Automatically

• Product Usage: We record a small number of first-party events on our own servers to understand setup, sign-in reliability, which BeamTracer apps, tools, and visualizers are opened, personal visualizer star choices, successful exports, and whether a browser returns on a later day. Setup answers are limited to the fixed choices shown on screen. Event properties reject free text, email addresses, filenames, project content, credentials, and audio. Product activity uses a random browser id; after you sign in, an internal account id may also be attached to an event. We review these events only as aggregate totals and do not provide a person-level activity view. Clearing site data resets the browser id.
• Site Traffic: Our hosting provider (Vercel) counts page views for us with Vercel Web Analytics: the page visited, the referring site, country and region, device type, browser and operating system. It sets no cookie and does not tie a page view to your IP address; a returning browser is recognized within a single day by a hash of the request that Vercel discards after 24 hours. We read this only as totals. Query parameters other than the visualizer id, ref and utm_ campaign tags are removed before a page view is sent.
• Error Reports: If a BeamTracer page stops with an error, your browser sends us a short report so we can fix it: the error's name, the first 300 characters of its message with email addresses removed, the first line of where it occurred in our code, the page path without its query string, your browser name and major version, the BeamTracer version, and the random browser id described above. A report never includes your account id, email address, project content, files or audio. You can turn error reports off along with product analytics under Account → Privacy & Data.
• Server Logs: Our hosting provider (Vercel) may collect IP addresses and request metadata for security and performance purposes, subject to Vercel's privacy policy.

2.3 Information Stored Locally

Live audio analysis and visual rendering happen in your browser. Loading a local audio file for playback does not upload it; choosing an AI action such as lyric transcription sends the selected audio for that task. Application settings, presets, MIDI mappings, and preferences are saved on your device. Supported paid plans can sync eligible settings to your account. The random product-usage id described in 2.2 is stored locally and may also be mirrored in a first-party, same-site cookie so an email sign-in can remain part of the same aggregate journey.

• To provide, maintain, and improve the Service.
• To process subscriptions and payments via Stripe.
• To send transactional emails (account confirmation, password reset, billing receipts) via Resend.
• To respond to support requests and feedback.
• With your optional consent, given separately for each, to email you Tips & tricks (new blog posts and YouTube tutorials) and Product updates (new features and improvements), at most one email a day and three a week across both. You can sign up when creating an account, in Account settings, or without an account through the signup form on the blog; that form subscribes you only after you click the confirmation link we email you. You can change either choice in Account settings or unsubscribe through the link in any of these emails. Essential account and billing emails are separate.
• To confirm that a contact-form address belongs to the sender. A message you submit is held unsent and is delivered to us only when you click the confirmation link we email you. If you never confirm, it is discarded automatically within 24 hours and we never see it.
• To monitor and prevent abuse (rate limiting, fraud detection).
• To comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising. We do not build advertising profiles.

We use the following third-party services that may process your data:

We do not use third-party or cross-site tracking cookies. Authentication sessions use secure, HTTP-only cookies for session management. The random product-usage id and analytics preference described in 2.2 may use first-party, same-site cookies; they are not used to follow you across other websites or build an advertising profile. You can disable product analytics under Account → Privacy & Data, which stops these events, the error reports and the site-traffic page views described in 2.2 from being sent.

• Connections to the BeamTracer website use HTTPS encryption in transit.
• Payment details are handled by Stripe; BeamTracer does not store your card number.
• Access to account information is restricted to providing and maintaining the service.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request what personal information we collect, use, disclose, and sell.
• Right to Delete: You may request deletion of your personal information.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information beyond what is necessary for the Service.

To exercise any of these rights, contact us via our contact form (topic: Privacy request). We will respond within 45 days as required by law. We may ask you to verify your identity before processing your request.

Do Not Sell My Personal Information: We do not sell your personal information. We do not share personal information with third parties for cross-context behavioral advertising.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Payment records: Retained as required by tax and financial regulations (typically 7 years).
• Product usage events: Kept as long as they are useful for aggregate product improvement. Deleting your account clears any account link while retaining de-identified totals.
• Unconfirmed contact messages: Held at most 24 hours awaiting email confirmation, then deleted automatically. Confirmed messages are delivered to our inbox and retained there as ordinary correspondence.
• Unconfirmed email signups: Held at most 24 hours awaiting confirmation, then deleted automatically. A confirmed address is kept with our email provider until you unsubscribe or ask us to delete it.
• Server logs: Vercel retains logs per their data retention policy.
• Local data (localStorage): Stored on your device; you can clear it at any time via browser settings.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us via our contact form and we will delete it promptly.

The Service is operated in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US, which may have different data protection laws than your jurisdiction. By using the Service, you consent to this transfer.

For EU/EEA users: We process data based on consent (account creation) and legitimate interest (service operation, security). You may withdraw consent at any time by deleting your account.

We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on the Service at least 30 days before taking effect. The "Last Updated" date at the top reflects the most recent revision.

For privacy-related questions, requests, or complaints:

BeamTracer LLC
San Mateo County, California
Via our contact form (topic: Privacy request)

If you are not satisfied with our response, California residents may file a complaint with the California Attorney General's office at oag.ca.gov.