Privacy Policy

What we collect

When you use SwitchTunes, we collect:

• Your email address, obtained from your Spotify account when you sign in
• OAuth access tokens for the music platforms you connect (Spotify, Apple Music, YouTube Music)
• Playlist and track data needed to perform your requested transfer
• Payment information — processed by Stripe, we do not store card details

How we use it

We use your data solely to:

• Authenticate with music platforms on your behalf
• Read your playlists from the source platform
• Create matching playlists on the destination platform
• Process payments for paid transfers
• Send transactional emails related to your transfers

We do not sell your data, run ads, or use your music data for any purpose beyond completing your transfer.

Third-party services

SwitchTunes integrates with the following services, each governed by their own privacy policies:

• Spotify (source/destination platform)
• Apple Music (source/destination platform)
• YouTube Music via Google (source/destination platform)
• Stripe (payment processing)
• PostHog (product analytics — pageviews, transfer events, and user identification by account email)
• Sentry (server-side error tracking — captures stack traces, request paths, and the email of the authenticated user when an error occurs)

YouTube API Services

SwitchTunes uses YouTube API Services to read your YouTube playlists and to create playlists in your YouTube account, only when you request a transfer. By connecting your Google account, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

The YouTube data we access is limited to your playlist names and their track listings. To complete transfers efficiently, we keep a cache that maps song titles and artists to matched YouTube video IDs; this cache contains no personal information. Your Google OAuth token is stored only to perform transfers you request, and we never share YouTube data with third parties.

You can revoke SwitchTunes' access to your Google account at any time via the Google security settings page, and you can request deletion of your stored data by emailing us.

SwitchTunes' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention

Platform tokens remain stored so you can run future transfers without reconnecting each time. Disconnecting a platform from your account page deletes its token, and you can also revoke access from the platform's own security settings. Transfer history (playlist name, song count, match rate) is retained so you can view past transfers in your account. You can request deletion of your account and all associated data at any time by emailing us.

Security

All connections use HTTPS. Your music platform credentials never touch our servers; platform access is granted through each service's official OAuth flow. If you create a SwitchTunes account with a password, we store it only as a salted hash, never in plain text. Platform tokens are stored in our managed database, which uses infrastructure-level encryption at rest.