Privacy policy

1. Identity of the Data Controller

This Privacy Policy applies to the website, applications, and services operated by Beep Ltd (“Beep,” “we,” “us,” or “our”).

• Data Controller: Beep Ltd
• Registered Address: 71 Vixen Tor Road, Tavistock, PL19 8GQ, United Kingdom
• Privacy & Data Protection Contact: support@beepltd.com

If you have any questions regarding this Privacy Policy or our privacy practices, please contact our Data Protection Team at the email address provided above.

2. Information We Process & Collection Methods

We collect personal data directly from you, automatically via your use of our platform, and through third-party services.

A. Information You Provide Directly

• Account Information: Developer display names, email addresses, passkeys, or authentication details.
• Site Content & Contributions: Forum discussions, suggestions, votes, comments, poll responses, and form submissions created by developers or end-users.
• Support Inquiries: Information provided when submitting a ticket or contacting customer service.

B. Automatically Collected Technical Information

• Device & Usage Details: Platform, browser type, app version, IP address, system logs, and security/rate-limit activity telemetry.
• End-User Identifiers: Identity and verification details required to sign in or participate in site activities.

C. Payment & Billing Information

Payment details (credit/debit card numbers, billing addresses) are collected and processed directly by our third-party payment processor, Stripe. Beep does not store full credit card details on its servers.

3. Legal Bases for Processing (GDPR/UK GDPR Compliance)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on the following legal grounds under Article 6 of the GDPR:

4. Sub-Processors and Third-Party Service Providers

We share data with trusted third-party vendor platforms to operate our services. Each provider processes data under strict contractual obligations in compliance with data privacy regulations:

• Google Firebase & Google Cloud: Primary hosting, backend infrastructure, authentication, database storage, and security logging.
• Google Vertex AI: Used to generate vector embeddings from public wiki pages, static pages, published blog content, and visitor search queries to power semantic search capabilities.
• Stripe, Inc.: Subscription management, payment processing, tax verification, and billing history.
• SendGrid (Twilio): Transactional email delivery, system alerts, and notification digest distributions.
• reCAPTCHA Enterprise / Firebase App Check: Automated bot protection, rate-limiting, and security verification on login and submission endpoints.
• Google Analytics: Optional analytics on our marketing website (loaded only upon explicit visitor consent).

5. Data Retention Schedule

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.

• Developer Accounts: Retained as long as the account remains active. Deleted within 30 days of an explicit account deletion request.
• Site Content & Contributions: Retained until deleted by the site administrator or developer, or upon account closure.
• Operational & Security Logs: IP addresses and audit logs stored in Google Cloud/Firebase are retained for a maximum of 90 days before automated purging or anonymization.
• Billing & Financial Records: Transaction references held via Stripe are retained for 7 years to satisfy statutory tax and legal recordkeeping requirements.

6. Your Data Rights & How to Exercise Them

Depending on your geographic location, you may have the following data rights under laws such as GDPR, UK GDPR, and CCPA/CPRA:

• Right of Access & Portability: Obtain a copy of your personal data in a structured, machine-readable format.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of personal data held by us.
• Right to Rectification: Request correction of inaccurate or incomplete personal information.
• Right to Object / Restrict: Limit or object to certain types of processing (e.g., direct marketing or analytics).
• Right to Withdraw Consent: Where processing relies on consent (such as marketing analytics), you may withdraw consent at any time.

Submitting a Privacy Request

To exercise any of these rights, please submit a request by contacting us at support@beepltd.com. We will verify your identity and respond within 30 days (or 45 days where permitted under CCPA).

7. Children's Privacy

App Page is intended exclusively for use by business professionals and developers over the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect, solicit, or market personal information from children under the age of 13 (or under 16 in the EEA/UK). If we learn that personal data of a minor has been collected without parental consent, we will promptly delete that data.

8. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our sub-processors (including Google Cloud, Stripe, and SendGrid) maintain servers. When transferring data outside the EEA or UK, we rely on standard contractual clauses (SCCs) approved by the European Commission or adequacy framework mechanisms to safeguard your personal data.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our technology stack, operational practices, or legal obligations. We will notify you of material changes by posting the updated policy on our site with a new "Last Updated" date and, where appropriate, sending an email notification via SendGrid.