Privacy Policy

1. Data we collect

• Account data: When you sign in (e.g. with Google), we receive your email, name, and profile image from the provider to create and manage your account.
• Platform data: When you connect a music platform (e.g. YouTube, Spotify, Apple Music, Tidal, Deezer), we access your playlist names, track titles, artists, and related metadata through that platform's API. For Google/YouTube specifically, this includes your YouTube playlist names and the tracks within them.
• Usage data: We may collect how you use the product (e.g. pages visited, actions taken) to improve the service and fix issues.

2. How we use your data

We use your data solely to provide and improve Playlisted (e.g. moving playlists between platforms, storing your shares), to communicate with you about the service, and to comply with legal obligations. We do not use your data for advertising, retargeting, or personalized marketing. We do not sell, rent, or share your data with advertising platforms, data brokers, or any other third parties for commercial purposes.

3. Cookies and analytics

We use essential cookies to keep you signed in and to remember your preferences. We may use privacy-friendly analytics (e.g. Umami) in production to understand usage without tracking you across the web. You can control cookies in your browser settings.

4. Third parties

We rely on third-party services for authentication (e.g. Google), hosting, and platform APIs (YouTube, Spotify, Apple Music, etc.) to provide the product. Those services have their own privacy policies. We only share data with them as needed to operate Playlisted.

5. Data retention, deletion, and your rights

We retain your account and playlist data only while your account is active. Playlist data processed during exports, imports, or transfers is used transiently to complete the operation and is not stored long-term.

Deleting your data: You can delete your account and all associated data at any time from Settings within the app. When you delete your account, we permanently remove your profile information, connected platform tokens, and any stored playlist data from our servers. You can also disconnect individual platforms from Settings, which revokes our access and deletes the associated tokens.

You may also request data deletion by emailing us at hello@playlisted.app. We will process deletion requests within 30 days.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. Contact us to exercise these rights.

6. Data protection

We implement industry-standard security measures to protect your data, including:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Platform access tokens and refresh tokens are stored encrypted at rest in our database.
• Access to production systems and user data is restricted to authorized personnel only, using role-based access controls.
• We use secure, short-lived tokens for authentication and automatically revoke platform tokens when you disconnect a service.
• We regularly review our security practices and promptly address any identified vulnerabilities.

7. Google API Services

Playlisted's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only access YouTube data necessary to export, import, or transfer your playlists.
• We do not use Google user data for advertising, retargeting, or any purpose unrelated to providing Playlisted's core functionality.
• We do not sell Google user data to third parties.
• We do not use Google user data to build user profiles for advertising or marketing.
• Human access to Google user data is limited to what is necessary for security, legal compliance, or providing the service to you, and only with your consent.

8. Contact

For privacy-related questions or requests, contact us at hello@playlisted.app.