Privacy Policy

Last updated: July 2026

Information We Collect

Information you provide: - Photos you upload for playlist generation - Spotify account information (when you connect)

Information collected automatically: - Anonymous usage data (page views, generation counts) - Error logs (to improve the Service)

How We Use Your Information

We use your data solely to: - Process your uploaded images and generate playlists - Create and manage Spotify playlists on your behalf - Improve and debug the Service

Data Storage and Retention

• Photos: Processed in-memory only. Deleted immediately after playlist generation. We do not store, cache, or back up uploaded images.
• Spotify tokens: Encrypted and stored in a secure database. Used only to authenticate your Spotify sessions. Deleted when you log out.
• Session data: Cleared when your session expires or you log out.

Third-Party Services

We rely on third-party APIs: - Spotify — for playlist creation and music data. Spotify Privacy Policy - OpenRouter — for AI image analysis. OpenRouter Privacy Policy

We do not share your personal data with any other third parties.

Data Security

• All API communication uses HTTPS encryption
• Spotify tokens are encrypted at rest using Fernet (AES-128-CBC)
• Access to infrastructure is restricted and authenticated
• Secrets are stored in Azure Key Vault, not in application code

Your Rights

You can: - Disconnect your Spotify account at any time via Spotify's app settings - Request deletion of your data by contacting us - Stop using the Service — no data retention obligations beyond what's stated above

Children's Privacy

The Service is not intended for users under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy. Material changes will be posted on this page with an updated date.

Contact

For privacy questions, use the contact form at /contact.