1. Who is responsible
BeatBloom is operated by 2B Studios Inc. The registered address and privacy/support email have not yet been supplied. This is a pre-launch draft, not a completed public privacy notice. Those contact details, the final processing inventory, and applicable jurisdictions must be confirmed before launch.
2. Information we handle
Visiting the website may generate technical server logs, including IP address, request time, browser information, and requested page. This presentation page has no analytics or advertising trackers. In the studio, information can include your email, display name, date of birth, country, language and timezone, account-security records, workspace membership, invitations, credit usage, creative prompts, lyrics, generated audio, recipes, and feedback.
3. Why information is used
Account, workspace, and creation data support the service you request and its contract. Security records support legitimate interests in protecting accounts, preventing abuse, and resolving incidents, subject to your rights. Information may also be retained to meet legal obligations. Optional website-language storage relies on your consent. No marketing mailing list is collected on this page; marketing consent must be separate from account access.
4. Providers and sharing
Selected cloud functions send the relevant text or audio to the configured provider. The current integrations include OpenAI for writing, Runpod for music inference, and ElevenLabs for optional speech; Kokoro can run in a separately configured service. Hosting, identity, private object storage, and SendGrid account emails also process data when enabled. Workspace members see information allowed by their role. The actual enabled processors, their locations, retention terms, and contractual safeguards must be verified for the deployed service.
5. International processing
A cloud provider may process information outside your country or the EEA. Where required, the operator must establish an appropriate transfer mechanism, such as an adequacy decision or standard contractual clauses, and assess additional safeguards. This draft does not promise EEA-only processing or claim that every provider arrangement has been completed.
6. Storage, retention, and security
The website privacy choice expires after 183 days. An optional language choice is removed when you withdraw permission or the choice expires and the page is next loaded. Account sessions are configured for eight hours. Creative and account records are stored by the service; precise deletion periods for logs, invitations, account records, media, and backups still require a documented retention schedule. Access controls and secure sessions reduce risk but cannot guarantee absolute security.
7. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw optional storage consent in Cookie settings without affecting earlier lawful processing. You may complain to your local data protection authority. A working privacy contact and a verified rights-request process must be provided before public launch; this draft does not present a functioning deletion-request form.
8. Teens and family spaces
Accounts are intended for adults and teens aged 13–17 in guardian-managed family spaces. Under-13 accounts are not supported. Local consent ages and guardian requirements still apply. Guardians manage access and teen credit budgets. Avoid including identifying or sensitive information about children in prompts, lyrics, or audio.
9. Updates
Material changes to purposes, providers, or rights information must be reflected in this notice before they take effect and communicated when required. The updated date identifies this draft. Review the separate cookie policy and terms for website storage and service conditions.
10. United Kingdom
2B Studios Inc. is incorporated in the United Kingdom. You may complain to the Information Commissioner’s Office (ICO). UK restricted transfers require an applicable UK transfer mechanism and assessment; EEA transfers require their applicable safeguards. These deployment arrangements still need verification.
Information Commissioner’s Office (UK)