Privacy Policy
Last updated 25 August 2026
What we collect, why we collect it, who it goes to, and how to get it back or deleted. Written to be read rather than skimmed past.
1.Who is responsible
Currier Media Inc. operates Build a Beat and is the organisation responsible for the personal information described in this policy. In some jurisdictions this role is called the "data controller".
You can reach us about anything in this policy at tylercurrier@currier-media.com.
We are based in Canada. Information is processed in Canada, the United States, and other countries where our service providers operate.
2.What we collect
Your email address, so we can sign you in and send you your songs. We do not ask for or store a password.
What you type when making a song: the style description, the subject or lyrics you provide, and the resulting title, lyrics, audio, and cover artwork.
Basic usage and device information: IP address, browser user agent, pages visited, and the referring link.
Billing information is handled by Stripe. We receive a customer identifier, the plan, the amount, the status, and the country and postal code used for tax. We never see or store your full card number.
If you arrived through a partner or affiliate link, we store the tracking identifiers carried by that link and associate them with your account.
If you record audio for a custom voice, we store that recording. That feature is currently disabled.
3.Why we use it
To create and deliver your songs and keep them available in your library. This is necessary to perform our contract with you.
To sign you in, take payment, apply your plan or redemption code, and provide support.
To email you about your songs and your account. We do not send marketing email unless you have opted in, and every marketing email includes an unsubscribe link.
To prevent abuse and control cost. Each song we generate costs us money, so we count generations per account and per IP address. We rely on our legitimate interest in keeping the Service viable and available.
To understand how people find and use the Service, and to measure advertising.
To meet legal, accounting, and tax obligations, and to establish or defend legal claims.
4.Automated processing
Songs are produced by automated systems without human review before delivery.
We do not make decisions producing legal or similarly significant effects about you by automated means alone.
5.Who we share it with
Supabase, for our database, authentication, and file storage. Vercel, for hosting. Stripe, for payments. Resend, for email delivery.
kie.ai, which routes our requests to the AI models that write lyrics, generate audio, and create cover artwork. The text you enter when making a song is sent to those models in order to produce your song. Do not enter information you would not want processed by a third-party model.
Meta, for advertising measurement. Where we send conversion events from our servers, contact details such as your email address are hashed with SHA-256 before they leave us; we do not transmit your email address to Meta in readable form.
Affiliate and partner networks, when you arrive through their link. We report that a payment occurred, its amount, currency, and time, and an opaque account identifier. We do not share your name, email address, or payment details with them, and the identifier reveals nothing about who you are.
Professional advisers, and authorities where we are legally required to disclose. If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising beyond the measurement described above.
6.International transfers
Our providers operate in several countries, including the United States, so your information may be transferred outside your country of residence.
Where information is transferred out of the United Kingdom or the European Economic Area, we rely on appropriate safeguards such as standard contractual clauses, or on transfers to countries recognised as providing adequate protection.
7.Cookies
A first-party cookie records which partner link brought you to the site so that partner is credited correctly. It lasts 30 days.
Session cookies keep you signed in. These are necessary for the Service to function.
The Meta Pixel sets its own cookies for advertising measurement. You can block these using your browser settings or an ad blocker, and the Service will continue to work.
We do not use cookies to build profiles for sale to third parties.
8.How long we keep it
Your account, songs, and library are kept while your account exists.
IP-based generation counts are kept only long enough to enforce daily limits.
Records we need for accounting, tax, and partner reconciliation are kept as long as the law requires, typically seven years.
If you delete your account we remove your songs and personal information, other than records we are legally required to retain, and other than backups which are overwritten on their normal cycle.
9.Your rights
You can ask for a copy of your information, ask us to correct it, ask us to delete it, ask us to restrict or object to a use, or ask for it in a portable format. Email tylercurrier@currier-media.com and we will respond within 30 days.
Where we rely on consent, you can withdraw it at any time; that does not affect processing carried out before you withdrew it.
We will not discriminate against you for exercising any of these rights.
Depending on where you live you may have additional rights under Canadian privacy law, the UK and EU GDPR, or California law. We honour these rights regardless of where you are located.
If you are in the UK or EEA and believe we have not handled your information properly, you may complain to your local supervisory authority. We would appreciate the chance to address it first.
10.Children
The Service is not intended for children under 13 and we do not knowingly collect their personal information.
If you believe a child has provided us with personal information, contact us and we will delete it.
11.Security
Audio files are stored in private storage and served through short-lived signed links rather than public URLs. Access to your library requires being signed in as you.
Payment card details never reach our systems.
No service is perfectly secure. If a breach affects your personal information we will notify you and the relevant regulator as the law requires.
12.Changes to this policy
We will update this policy as the Service changes. Material changes will be notified by email or in the Service before they take effect.
The date at the top of this page always reflects the current version.