Midwest Beats Privacy Policy

Effective October 1, 2026.

Who we are

Steady Flow, LLC, doing business as Midwest Beats ("we," "us"), operates MidwestBeats.music and a private, owner-operated content-management tool. Contact midwestbeatsproducer@gmail.com with privacy questions or requests.

This notice covers our main website, its Starter Pack email form, related communications and our private Google-connected tool. The merchandise store has a separate Privacy Policy. Music purchases on BeatStars are also subject to the disclosures and transaction terms presented there. Website visitors do not need to connect a Google account.

Website, email and purchases

When you request a Starter Pack or subscribe, we receive your email address. When you contact us, we receive your message and the information you provide. We use this information to fulfill requests, provide support, send the updates described at signup and manage communication preferences.

Our signup endpoint sends email addresses to MailerLite, our email-list and delivery provider, and assigns them to relevant Midwest Beats subscriber groups. Vercel hosts the website. Hosting and security services process technical information, such as network addresses and browser/request information, to deliver and protect the site. Providers may process information in the United States and other locations where they operate.

The main website serves audio previews and links to third-party destinations. It loads Google Fonts from Google's servers, which receive network information such as your IP address and browser request details. Linked platforms, our merchandise store and email services have their own technology and privacy practices. Email services can measure delivery and engagement when those features are enabled. Browser controls can limit cookies; blocking necessary technologies may affect services you choose to use. We do not treat a visit to our website as consent to unrelated advertising tracking.

BeatStars is our linked music-purchasing destination. Shopify hosts our separate merchandise store, and Printful supports merchandise production and fulfillment. Purchases can involve contact details, addresses, order and payment-status information, support messages and delivery records. The relevant transaction and store policies apply; this notice does not replace an existing license, refund right or merchandise policy.

Our private Google-connected tool

The tool is operated privately by the Midwest Beats owner to organize brand media and upload, schedule and review brand videos. It is not offered as a public account-connection service. It uses YouTube API Services.

Google issues authorization tokens after the owner approves access. The tool does not receive the Google password through that process. Tokens permit continued access until they expire, are revoked or otherwise stop working.

YouTube: the tool requests youtube.upload and youtube.readonly permissions. It uploads approved videos with titles, descriptions, visibility and scheduling settings, and reads authorized channel and video information to check the results. App-held records can include channel and video identifiers, URLs, metadata, upload and scheduling results, and verification records. Connecting an account is not permission to publish arbitrary content.

Google Drive: the tool requests the full drive permission. This technically permits broad access to view, edit, create and delete files in the connected account. Our content workflow uses the owner-approved brand-media library for organization and publishing; that operational selection does not limit the Google authorization to one folder or make it read-only.

Google's practices are described in the Google Privacy Policy. Use of the YouTube-enabled tool is subject to the YouTube Terms of Service.

Processing and sharing

Our content workflow uses local software, OpenAI-powered automation and Telegram reports. Google-derived operational information can appear in tool results, agent context and reports processed by those services. We configure the service-provider controls available to us to prevent use of this information for generalized model training. Training restrictions do not themselves delete earlier records or mean that providers retain no information.

With the owner's authorization, approved brand media retrieved from Drive is transferred to selected publishing platforms, including YouTube, Instagram/Facebook and TikTok. Owner-created media held independently of Google is distinct from metadata obtained through Google APIs. Information is not processed exclusively on one computer.

Midwest Beats' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and the applicable Google Workspace API user-data requirements. We use that information for the disclosed, owner-authorized content-management features. We do not sell it, use it for advertising targeting, or use or transfer it to train or improve generalized, non-personalized AI models. We limit transfers and human access to the purposes and exceptions those policies permit; these restrictions also govern our use of service providers.

Information may be disclosed where legally required or permitted for security, protection of rights or a lawful business transfer. These general purposes do not override the stricter restrictions on Google and YouTube data, including required consent.

Retention and safeguards

We retain website communications and subscription records for their purposes, communication preferences, security and applicable legal obligations. Minimal suppression information may be retained to honor an unsubscribe. Transaction records follow the applicable purchase and store policies.

The private tool stores credentials and operational records locally and can create copies in reports, provider systems and backups. We use access controls and local storage encryption to protect the information. These safeguards do not establish that every external copy or backup has the same protection. No security measure guarantees absolute protection.

Retention of app-held Google data is subject to the applicable Google API requirements. Ordinary stored YouTube API metadata must be refreshed or deleted within 30 calendar days; specified authorization-token and analytics/statistics categories have different rules. Renewing an authorization token does not refresh stored metadata. These requirements apply to covered app-held copies, including relevant logs, reports and backups; a backup is not an automatic exception. Independently held original media and content already published on a platform are handled separately.

The workflow has used AI and messaging services. We do not claim that all historical provider-held copies have been erased or that every independent account copy can be erased within seven days. This is not an exception to obligations for data held by the tool or processed on its behalf. Identified handling gaps must be resolved before the affected processing continues.

Disconnecting Google and deleting app-held data

The private operator can request help disconnecting through the contact below and use the local programmatic-revocation procedure supplied with the tool. That procedure sends a revocation request to Google immediately when confirmed. Drive and YouTube use the same Google project, so revocation can disconnect both, not just the selected service. Affected work must be stopped before disconnection and must not resume without a valid authorization and resolution of applicable data-handling requirements.

You can also remove access through Google account permissions. Removing access does not itself erase existing app-held copies. For deletion or help disconnecting, email midwestbeatsproducer@gmail.com with the subject Google Data Request. Do not send tokens, authorization codes or passwords.

Covered app-held YouTube data must be deleted as soon as possible and within seven calendar days after a deletion request or in-tool revocation. Revocation through Google's security settings is subject to the applicable 30-calendar-day deletion limit. YouTube also requires periodic confirmation that authorization remains valid and deletion of associated API data when authorization tokens cannot be refreshed. A new authorization does not erase an existing data-handling obligation. Drive requests are handled under the applicable Google requirements and privacy law; we do not describe the YouTube-specific timelines as a universal rule for every Google service.

Deleting app-held information does not delete information held by YouTube or remove published videos. Use YouTube's controls to remove a published video. Disconnecting this tool does not authorize deletion of independently held original media in Drive or elsewhere.

Your choices and requests

Use the unsubscribe link in a marketing email or contact us to stop marketing messages. No password, fee or unnecessary identity documents are needed to unsubscribe. Necessary nonmarketing messages about transactions, security or support may continue.

Depending on applicable law and its thresholds and exceptions, you may have rights to access, correct, delete or obtain your information, withdraw consent, restrict or object to processing, or opt out of certain uses. Email us with the subject Privacy Request. We may request proportionate verification and will explain an applicable exception or refusal where required. If an appeal right applies, reply with Privacy Appeal. We will not discriminate for exercising an applicable right.

Do not send full payment-card details or unnecessary sensitive information through forms or support email.

Children and changes

Our site is a general-audience music and brand site, not a service directed to children under 13. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action. We will not knowingly retain information collected from a child where prohibited by law.

Changes to this policy apply prospectively. We provide additional notice or obtain consent for material changes where required. Nothing here limits privacy or consumer rights that cannot lawfully be limited.