THE BEAT MINE — FREE PRODUCER ACCOUNT PRIVACY NOTICE Version BM-FREE-PRIVACY-R85-PUBLICATION-1 Effective upon actual publication on thebeatmine.com. 1. Scope and contact THE BEAT MINE LLC operates free producer accounts, private preparation and explicitly published previews at thebeatmine.com. This notice describes that phase, not an active checkout or payout service. Contact support@thebeatmine.com for privacy, correction, closure or removal requests. Justin reviews requests weekly; applicable legal deadlines are not displaced by that cadence. We may ask for proportionate verification of account control. Do not send passwords, recovery codes, card details or unnecessary sensitive information. 2. Account and uploaded information Account information includes email, a framework-hashed password, display name, account/producer identifiers, verified-email status, acceptance records and access-security information. Profile information can include biography, social links, styling and profile/cover images. These support account access and preparing your shop. Beat drafts include audio, filename, size, duration, content hash and generated/reviewed metadata. Upload acknowledgments bind your account, the file hash, notice text/version and acceptance time. Signup records retain the exact accepted terms/privacy text, version, hash and acceptance details. These records identify permissions and what was presented; they do not independently prove ownership of the music. The service uses host-only session and CSRF cookies for sign-in and request protection, and rate-limit counters to reduce abuse. Current session configuration expires on browser close with a one-hour age limit; confirmation links expire after one day and password-reset tokens after 30 minutes. These access settings do not establish deletion deadlines for all underlying records. Hosting and security operations can generate request logs. No new analytics or advertising-tracking system is part of this free-account composition; that is not a claim that infrastructure creates no logs. Transactional email supports confirmation, password recovery and account security. Registration is not consent to marketing or a paid subscription. This composition does not enable Google account linking or campaign sending. 3. Private drafts and public previews Editing and saving a beat draft does not itself make it public. An explicit publication action makes the identified preview, producer attribution, artwork and selected profile/shop information visible to logged-out visitors. The publication notice identifies what will be exposed. Protected full delivery files are not offered as public downloads. Do not place information you want kept private in fields selected for publication. Public pages can be shared, and visitors may retain content already delivered to their browsers. Stopping public display cannot recall those copies or automatically delete stored originals and backups. Private access controls do not prevent access by authorized infrastructure operators and service providers performing necessary administration, troubleshooting and security work. Access should be limited to those purposes; private uploads are not licensed for unrelated promotion. 4. Providers and international processing Render hosts the service; its current hosting region is Oregon, United States. Resend delivers transactional account email and receives recipient and message content, including account links. Support mail forwards through Porkbun to Justin's Gmail inbox. These services process information to provide hosting, delivery and support. A hosting region does not establish that every provider activity or backup stays in that region. International users should understand that service information is processed in the United States; provider processing and retention also depend on their service arrangements. This statement is not a claim that a particular international-transfer safeguard or jurisdiction's requirements have been verified. 5. Retention and removal criteria Account/profile information and private or published material are retained to operate the account and the uses you request. Closure or removal requests trigger review of which data remains needed. We distinguish disabling access, withdrawing a preview, deleting eligible active files and retiring backups; none automatically completes the others. During request review, we consider whether records remain necessary to establish permissions and accepted agreements, fulfill existing buyer obligations, investigate an identified security or rights dispute, or meet an applicable legal obligation. Continued retention must have a specific reason; the request record should identify deferred items and further review needed. Data no longer needed for those purposes should be removed through the supported reviewed procedure. An unresolved dependency is not permission to reuse material for new publication or sales. This is a criteria-based review process, not an automatic inactivity purge or a claim that every record is immediately erasable. Eligible unpublished draft removal releases its accounted active storage while preserving limited rights/removal evidence. Purchased versions and accepted agreements require separate review; this free phase creates no new purchases. Support correspondence is used to address requests and document their outcomes and is reviewed according to continuing support, dispute or legal need. Verification/session/security records are kept for access and abuse-prevention purposes; token expiry does not by itself erase logs. We do not promise a universal provider-data deletion period. Daily application backup scheduling is not currently enabled. One encrypted predeployment checkpoint is retained separately on the owner's Mac. No operating daily backup service, automatic 14-day retirement or recovery guarantee is represented here. Provider-managed snapshots are separate and do not establish an application-consistent restore. Backup retention and recovery copies must be considered separately when handling a removal request; we will explain relevant limitations rather than describe active-file deletion as complete erasure. Earlier pilot records remain subject to their accepted schedules. This notice does not reset those obligations or waive applicable privacy rights. You may request access, correction, closure or removal through the contact above. This notice describes processing; acknowledging it does not grant music-publication permission or waive your rights.