Privacy Policy

Privacy Policy

Effective date: June 23, 2026

1. Who We Are

BPMdex (“we,” “our,” or “us”) operates the BPMdex platform, including the web application at app.bpmdex.com, the mobile interface at mobile.bpmdex.com, the admin portal at admin.bpmdex.com, and this website at www.bpmdex.com.

2. Information We Collect

Account information. Access to BPMdex is granted by invitation only. When you authenticate, we receive your name, email address, and account identifier from your identity provider (Microsoft Entra ID or Google OAuth). We do not collect or store passwords.

Library data. We store track metadata you upload or sync to the platform, including but not limited to: track title, artist, album, BPM, musical key, genre, energy level, rating, release year, and custom notes. We do not store audio files.

Usage data. We collect standard web server logs, including IP addresses, browser type, pages visited, and timestamps. This data is used solely for security monitoring and platform diagnostics.

Feedback submissions. If you submit feedback through the in-app feedback tool, we store the category, subject, body, and your email address associated with the submission.

3. How We Use Your Information

• To authenticate you and provide access to your library
• To store, display, and search your DJ track metadata
• To respond to feedback and support requests
• To monitor service health, security, and usage patterns
• To send transactional emails (e.g., account invitations) via Microsoft Graph

We do not use your data for advertising, profiling, or sale to third parties.

4. How We Share Your Information

We do not sell or rent your personal information. We may share data with:

• Microsoft Azure — our cloud infrastructure provider. Data is stored and processed within Microsoft Azure datacenters. See Microsoft’s Privacy Statement.
• Microsoft Entra ID / Google OAuth — used for identity verification only. No library data is transmitted to these providers.
• Law enforcement — only if required by applicable law, court order, or to protect the rights, property, or safety of BPMdex or its users.

5. Data Storage and Security

All data is stored in Microsoft Azure infrastructure (United States). Data in transit is encrypted via TLS. Data at rest is protected by Azure-managed encryption. Access to production systems is restricted to authorized administrators and controlled via Azure Entra ID and Key Vault.

6. Data Retention

We retain your account and library data for as long as your account is active. You may request deletion of your account and associated data by contacting us at the address below. Deleted data may persist in backups for up to 30 days before permanent removal.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. To exercise these rights, contact us using the details below. We will respond within 30 days.

8. Cookies

BPMdex uses session storage and local storage in your browser to maintain authentication state (via Microsoft MSAL). We do not use third-party tracking cookies or analytics cookies.

9. OAuth and Token Handling

BPMdex uses OAuth and OpenID Connect tokens from Microsoft Entra ID, Google OAuth, Spotify, SoundCloud, and other connected providers only to authenticate sessions, maintain authorized account connections, and call APIs that you have approved. BPMdex does not collect or store identity-provider passwords, does not expose OAuth tokens to other users, and does not use OAuth tokens for advertising or unrelated profiling. Tokens and connected-account credentials are stored only when needed for signed-in session state or connected features, protected using platform security controls, and can be revoked by signing out, disconnecting a provider, revoking provider consent, or contacting support.

10. Children’s Privacy

BPMdex is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page reflects when the current version was last revised. Continued use of BPMdex after changes constitutes acceptance of the updated policy.

12. Contact