Privacy Policy

Last updated: [DATE — set on legal review]

⚠ Legal review required. This policy is structured to meet GDPR requirements but contains placeholders that must be completed and reviewed by a qualified privacy professional before you rely on it. Sections marked [bracketed] need your specific details or legal confirmation.

This Privacy Policy explains how MooreBeats ("we", "us") collects, uses, and protects your personal data when you use MooreBeats Infinity (the "Service") at moorebeats.com. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who We Are (Data Controller)

MooreBeats is the data controller responsible for your personal data.

Address: 268 Meserole Street, Brooklyn, NY
Email: get@moorebeats.com
Phone: +1 (347) 406-3419

[If you have EU users, GDPR Article 27 may require you to appoint an EU-based representative. Confirm with counsel and add their details here if applicable.]

2. What Data We Collect

Category	Examples	Purpose
Account data	Name, email, password (hashed)	Create and manage your account
Subscription & payment	Tier, subscription history, purchases (payments processed by Stripe — we do not store card numbers)	Provide paid features, process payments
Usage data	Content viewed, watch duration, last login, play counts	Operate the Service, recommendations, analytics
Communications	Newsletter opt-in status, feedback you submit	Send updates you consented to, respond to feedback
Technical data	Browser/user-agent, authentication token (stored in your browser)	Security, keeping you signed in

3. Legal Bases for Processing

Under GDPR we rely on the following legal bases:

Contract: to provide the Service you sign up for (account, streaming, purchases).
Consent: for marketing emails and any non-essential tracking. You may withdraw consent at any time.
Legitimate interests: for security, preventing fraud, and improving the Service, balanced against your rights.
Legal obligation: to retain transaction records where required by tax or accounting law.

[Confirm these legal bases with counsel and adjust to match your actual practices.]

4. How We Use Your Data

To create and operate your account and deliver the Service.
To process subscriptions and purchases.
To send you the newsletter and event updates only if you opted in.
To understand how the Service is used and improve it.
To protect the security and integrity of the Service.

5. Sharing & Third-Party Processors

We share data with service providers ("processors") who act on our behalf. Each processes only what is needed to perform their function:

Stripe — payment processing
Coinbase Commerce / NOWPayments — cryptocurrency payments (if used)
Eventbrite — event ticketing and attendee import
Titan Email — sending transactional and newsletter emails
Google Drive — media storage (admin use)
Anthropic — AI features for content generation (admin use)
Hostinger — hosting infrastructure

[Ensure you have a Data Processing Agreement (DPA) with each processor, and confirm which transfer any data outside the EU/EEA. For those that do, document your transfer safeguards, e.g. Standard Contractual Clauses.]

6. International Data Transfers

Some of our processors are located outside the European Economic Area (EEA). Where data is transferred internationally, we take steps to ensure it is protected in accordance with GDPR.

[Specify the safeguards you rely on — e.g. EU Standard Contractual Clauses — after confirming with counsel.]

7. Data Retention

We keep personal data only as long as necessary for the purposes described, unless a longer period is required by law (for example, transaction records for tax purposes). Unverified accounts may be removed after 14 days. When you delete your account, we erase or anonymize your personal data.

[Confirm your specific retention periods per data category with counsel.]

8. Your Rights

If you are in the EU/EEA (and in many other regions), you have the right to:

Access the personal data we hold about you — available via Account → Privacy → Download my data.
Rectify inaccurate data — update it in your account or contact us.
Erase your data ("right to be forgotten") — via Account → Privacy → Delete my account.
Restrict or object to processing.
Data portability — receive your data in a machine-readable format (JSON export).
Withdraw consent at any time (e.g. unsubscribe from the newsletter).
Lodge a complaint with your local data protection authority.

To exercise any right, use the in-app tools or email get@moorebeats.com. We respond within one month.

9. Cookies & Tracking

We use essential storage (such as an authentication token) to keep you signed in — this is necessary for the Service to function. We use limited usage analytics to operate and improve the Service. We do not use third-party advertising cookies. See our cookie notice shown on first visit.

[If you add any non-essential/analytics cookies or third-party trackers, list them here and ensure they are only set after consent.]

10. Security

We protect your data with industry-standard measures including encrypted passwords (bcrypt), HTTPS/TLS, Content Security Policy, and access controls. No system is perfectly secure, but we work to safeguard your information.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy. Material changes will be communicated through the Service. The "last updated" date reflects the latest version.

13. Contact

Questions or requests: get@moorebeats.com · MooreBeats, 268 Meserole Street, Brooklyn, NY.

View Terms of Service →