Privacy Policy

PlaylistPilot™ ("we", "us") provides playlist automation and curation tools at playlistpilot.co.uk. We are the data controller for the personal information described in this policy. For any privacy question, contact us through our contact page.

We use your information to run your account, perform the playlist automations you configure, display your public profile pages when you enable them, process subscription payments, respond to support requests, and keep the service secure. We do not sell your personal information and we do not use it for third-party advertising.

We process your data to perform our contract with you (providing the service), on the basis of your consent (connecting a streaming account, enabling a public profile), for our legitimate interests (security, service improvement, fraud prevention), and to comply with legal obligations.

We share only what is necessary with the providers that power the service: our hosting and database platform, our payment provider for subscriptions, the streaming platforms you choose to connect (such as Spotify), and music analytics providers used to enrich playlist and placement data. Each processes data on our behalf or under their own terms for the connection you authorised.

We keep your data for as long as your account is active. Automation history and pitch records are retained while they remain useful to your workflow, and you can delete individual records at any time. Closing your account removes your account data and disconnects your linked streaming accounts.

You may request access to, correction of, or deletion of your personal data, object to certain processing, or ask for a copy of your data in a portable format. You can disconnect any connected streaming account and turn off any public profile from within the app at any time. Contact us to exercise these rights.

When you choose to connect a YouTube account, PlaylistPilot™ requests only the YouTube scope needed to show and manage the playlists you choose to manage:youtube.force-ssl. This permits PlaylistPilot™ to read your channel and playlist information and, only when you initiate an action in the app, create, edit, reorder or remove playlists and playlist items on that YouTube account. Google user data is used only to provide these user-requested YouTube features. We do not use it for advertising, sale, profiling, creditworthiness, or any unrelated purpose, and we do not allow third parties to use it for those purposes. PlaylistPilot™'s use and transfer of Google API data follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect your YouTube account at any time from Accounts & Platforms; this removes the stored YouTube credentials from PlaylistPilot™ and stops future access.

Access to app data is limited by account-level access controls. YouTube access and refresh tokens are kept in a restricted server-side credential record that is not available to standard user roles or returned by the playlist-management interface. The app uses a short-lived authorization state and PKCE during the YouTube connection flow, and uses the stored credential only from authenticated server-side functions to make the action you request. Uploaded masters are held in private storage and are available only through short-lived signed links issued to the account owner.

We may update this policy as the service develops. Material changes will be reflected in the "last updated" date above.