PEACHPrivacy Policy
Effective date: October 11, 2026
This Privacy Policy explains how PeachBeat ("PeachBeat", "we", "us") collects, uses, shares and protects personal data when you visit peachbeat.store, buy a beat license, contact us, or interact with our YouTube channel. Questions: inbox@peachbeat.store.
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Order & billing data | Name, email, country, order ID, products bought, amount, tax, coupon used | Lemon Squeezy (checkout) |
| Payment data | Card or PayPal details | Handled only by Lemon Squeezy and its payment processors. We never see or store full card numbers. |
| License & delivery data | Artist name, licensee name/email, signature on the license agreement, download link activity | You, at checkout and signing |
| Communications | Emails and chat messages you send us | You |
| Usage & analytics data | Pages viewed, beats played, referrer (e.g. which YouTube video), approximate location, device/browser, cookie identifiers | Our site and Google Analytics |
| Marketing preferences | Whether you opted in to emails, unsubscribe status | You |
2. How we use data and our legal bases
- To fulfil your order: deliver files, issue the license PDF, verify licenses, provide support (contract).
- To send marketing emails about new beats and deals only if you opted in. You can unsubscribe at any time via the link in every email (consent).
- To run, secure and improve the store: fraud prevention, analytics, measuring which videos bring visitors (legitimate interests).
- To comply with law: tax, accounting and enforcement of license terms (legal obligation / legitimate interests).
We do not sell your personal data and do not use it for automated decisions with legal effects.
3. Service providers (processors)
- Lemon Squeezy acts as our Merchant of Record. It processes payments, calculates and remits sales tax/VAT, and handles invoices and refunds. Lemon Squeezy's own privacy policy applies to data you give it at checkout. We receive order details (name, email, country, items) to deliver your license.
- Upstash (Redis database) stores order records, license records, download tokens, analytics counters and email preferences.
- Google Drive stores our clean audio files and creative-process records. Your license files may be delivered through time-limited links. We do not store buyers' payment data in Drive.
- Google Analytics measures site traffic using cookies. You can block it with your browser settings or the Google Analytics opt-out add-on. See how Google uses data.
- Vercel hosts the website and processes server logs (IP address, request data).
- Email provider (our domain mailbox) sends order and, if you consented, marketing emails.
4. YouTube API Services and Google user data
PeachBeat uses YouTube API Services to upload and manage videos on our own YouTube channel (titles, descriptions, thumbnails, scheduling) and to read public statistics for our videos. By watching our videos or interacting with our channel, you are also subject to the YouTube Terms of Service and the Google Privacy Policy.
Our Google API access is limited to our own accounts. We do not request access to visitors' or buyers' Google accounts. If that ever changes, the following applies: PeachBeat's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We will use such data only to provide the features you requested, will not use it for advertising, will not sell it, and will not let humans read it except with your consent, for security, or as required by law. You can revoke access at any time at Google security settings.
5. Cookies
We use essential storage (cart, session, language) and analytics cookies (Google Analytics). Where required by law we ask for consent before setting non-essential cookies. You can delete or block cookies in your browser.
6. International transfers
Our providers may process data in the United States, the EU and other countries. Where required, transfers rely on safeguards such as the EU Standard Contractual Clauses.
7. Retention
- Orders, invoices and license records: as long as the license is valid and at least 7 years for tax and legal purposes.
- Download links: expire after 3 days. The underlying access records are kept with the order.
- Marketing data: until you unsubscribe. After that we keep a suppression record so we don't email you again.
- Analytics: aggregated counters indefinitely; Google Analytics data per its retention setting (max. 14 months).
- Support emails: up to 3 years.
8. Your rights
EU/EEA/UK (GDPR): you can access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. You may also complain to your local data protection authority.
California (CCPA/CPRA): you can know what personal information we collect, request deletion or correction, and opt out of "sale" or "sharing". We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for using these rights.
To use any right, email inbox@peachbeat.store from the address used for your order. We respond within 30 days and may need to verify your identity. Some data (for example invoices) must be kept by law. Data held by Lemon Squeezy as Merchant of Record can also be requested from them directly.
9. Security
We use HTTPS, access-restricted admin tools, signed time-limited download links and least-privilege API keys. No method of transmission or storage is 100% secure.
10. Children
Our store is not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We may update this policy. The effective date above shows the latest version. If a change is material, we will notify buyers by email.
12. Contact
PeachBeat · inbox@peachbeat.store · peachbeat.store