Privacy Policy

NeuralDeck ("we", "us") operates the NeuralDeck 4-deck AI DJ studio web application and Android TWA (the "Service"). This policy explains what data we collect, why, and your choices.

What we collect

• Account data: email, display name, hashed password (bcrypt). Never plain-text passwords.
• Spotify connection (optional): if you link Spotify, we store your Spotify access & refresh tokens and your Spotify user id / display name.
• Payment data: if you upgrade to PRO, Stripe processes payments on our behalf. We store only Stripe session IDs, subscription IDs and payment status — never card numbers.
• Content you create: saved mixes (PRO users), published sets (title, tracklist, audio blob you record and choose to publish), and comments.
• Analytics: we use PostHog to record anonymous product analytics and session replays to improve the app. This includes viewport size, clicks, and page views. IPs are truncated.

What we do NOT collect

• Audio from your microphone or camera.
• Your local files — MP3s you upload are processed client-side and never uploaded to our servers unless you explicitly "Publish" a set.
• Your Spotify listening history beyond the playlists you explicitly load in the app.

How we use data

• Operate and secure the Service (authentication, subscription state).
• Provide AI harmonic recommendations (track titles, BPMs, keys sent to our LLM provider — OpenAI via Emergent Universal Key — never your personal data).
• Fulfil payments (Stripe) and grant PRO features.
• Publish sets you explicitly choose to publish, on public /set/<id> pages.

Third-party services

• Stripe — payments processing. See stripe.com/privacy.
• Spotify — music metadata & OAuth. See spotify.com/legal/privacy-policy.
• OpenAI (via Emergent Universal Key) — AI recommendations. See openai.com/policies/privacy-policy.
• PostHog — anonymous product analytics. See posthog.com/privacy.

Your rights

You can delete your account at any time by contacting us at the address below. On deletion, all your personal data, saved mixes, published sets, and Spotify tokens are permanently removed within 30 days. You can disconnect Spotify from your account at any time.

Children

NeuralDeck is not directed at children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

Contact

For any privacy request, contact us at privacy@neuraldeck.app.

We may update this policy from time to time; when we do, the "Last updated" date at the top will change. Material changes will be announced in-app.