Privacy

How Alpha-DJ-Engine handles your data.

Controller

Alphabees UG (haftungsbeschränkt)
Kolonnenstraße 8, 10827 Berlin, Germany
Phone: 0049 (0)30 20008140
Email: info@alphabees.de

Responsible for data protection: Lasse Erdweg, reachable at the address above.

Your account

Using Alpha requires an account. We store your email address, a username and your password. The username does not have to be your real name — pick whatever you like. Passwords are never stored in plain text; we keep only a salted hash.

It starts on this website: when you click a download button, you enter your email address and we email you the download link — it is valid for 48 hours. You choose your username and password later, the first time you open Alpha.

This sign-up runs on our own servers. The software behind it is BetterAuth, an open-source component we host ourselves, so no outside sign-in provider is involved: your email address and your confirmation code are not handed to a third party, and nothing about this step leaves the EU.

Nothing of this happens while you simply browse. An account is created only once you start a download and enter your address yourself — if you never do, we never learn it.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract and steps taken at your request before entering into one.

Licence and devices

We store your licence key together with an identifier for each device you activate. We need this to honour the licence terms — one person, up to two devices on a paid licence, one on the free version — and to let you move your licence to a new machine.

While you are on the free tier, we also count how many tracks you have analyzed, up to the limit of ten. After that the counter stops mattering: the paid licence is unlimited and permanent.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

What the app sends us

Your audio files stay on your machine. Tempo, key and energy are computed locally, and no audio is ever transmitted.

Arranging your set is done on our servers. For that, the app sends the metadata of the tracks in your set — such as title, artist, tempo, key, energy and duration — so the sequencing engine can order them. This is what makes the harmonic arrangement work.

Writing the USB drive is local as well — the drive is plugged into your machine, not ours.

The app contains no crash reporting and no usage analytics. It does not report back what you do with it.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

How long we keep your account

Because the licence is permanent, we keep your account data for as long as your account exists. You can ask us to delete it at any time and we will, subject only to invoices and accounting records, which German tax and commercial law (§ 147 AO, § 257 HGB) requires us to retain for up to ten years.

This website

The site is built from static pages. Fonts, stylesheets, scripts and icons all come from this domain — no request goes to Google Fonts or to any content delivery network.

Three things come from elsewhere. The support chat in the corner of the page is loaded from chat.alphalearn.ai — our own system, not another company's, but a different address, so your browser contacts it on every page and transmits your IP address in doing so.

The second is Google Analytics. Its script is loaded on every page, but it starts in a switched-off state: until you agree, it sets no cookies and cannot recognise you. Declining keeps it that way. See the next section.

The third is the demo video on the start page. It is hosted on YouTube (Google Ireland Ltd.) and embedded in privacy-enhanced mode (youtube-nocookie.com). Nothing loads on its own: your browser only contacts YouTube after you click “Watch demo”, which transmits your IP address to Google and starts the player. If you never open the demo, no request reaches YouTube. Legal basis: § 25(2) TDDDG and Art. 6(1)(b) GDPR — you asked for the video; for the transfer to Google LLC in the USA, the European Commission's standard contractual clauses apply.

When you write in that chat, your messages are processed on our AlphaLearn platform — Alphabees software, running for Alphabees — to answer your question. The details are in the AlphaLearn privacy policy.

The site is served by GitHub Pages, a service of GitHub, Inc. (San Francisco, USA), delivered through edge servers — the one that answered most recently sat in Frankfurt. GitHub receives the usual request data: your IP address, the time of the request, the page requested, the referring page and your browser's user agent.

We have no access to those logs and no way to influence how long GitHub keeps them. Nothing is stored on servers of our own, because for this site we operate none.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in a working, secure website.

Cookies and analytics

The site itself sets no cookies of its own.

We use Google Analytics 4, a service of Google Ireland Ltd., to understand how the site is used. It sets cookies and processes usage data, including a shortened form of your IP address. This happens only if you consent; you can withdraw that consent at any time with effect for the future. Data may be transferred to Google LLC in the USA, safeguarded by the European Commission's standard contractual clauses.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG — your consent.

The measurement ID for this site is G-DQBC6VLYFP. The script is on every page, but Google Consent Mode is set to “denied” for everything before it loads, so until you agree it stores nothing on your device and cannot identify you. Agreeing switches it on; declining leaves it off. You can change your mind at any time via “Cookie settings” in the footer.

In its switched-off state the script still contacts Google once per page, which transmits your IP address. No cookie is set and no profile is built from it. Legal basis for that contact: Art. 6(1)(f) GDPR — our legitimate interest in measuring the site at all — and you can object at any time.

Email addresses you give us

There are two different reasons we might have your address, and they follow different rules.

To download Alpha. Your address becomes your account name, so we need it to give you the software and your free tracks. We email you the download link — using it confirms the address is really yours. This is not marketing, and it does not depend on your consent — it is what you asked us to do. Legal basis: Art. 6(1)(b) GDPR.

To tell you about Alpha. If you ask to hear about new releases, or leave your address to be told when your device is supported, we confirm it first: you receive a message with a confirmation link, and we only add your address once you have clicked it (double opt-in). We record the time of your confirmation so we can demonstrate that you gave it. Every message contains an unsubscribe link, and you can withdraw your consent at any time with effect for the future. Legal basis: Art. 6(1)(a) GDPR — your consent.

We do not pass your address on. We keep it for as long as you have an account, or until you unsubscribe. After that we retain the record of your consent for up to three years, so we can show it was given if that is ever questioned.

Emails — including the confirmation code for your account — are sent through our own Alphabees platform. Where a specialised delivery service helps transport them, it acts only on our instructions.

Payment

Payments are processed by Stripe. You enter your payment details directly with Stripe; they are not visible to us. We receive only what we need to issue your licence and your invoice.

Legal basis: Art. 6(1)(b) GDPR — performance of a contract.

How we share data

We do not sell your data. We share it only with service providers that act on our instructions, with public authorities where we are legally required to, and otherwise only with your explicit consent.

If you are a business customer and need a data processing agreement for your own records, write to info@alphabees.de — we provide one on request.

Transfers outside the EU

Where a processor operates outside the EU, the transfer is safeguarded by the European Commission's standard contractual clauses under Art. 46 GDPR.

Data security

We use TLS encryption for data in transit, role-based access control with multi-factor authentication on our own systems, separated development and production environments, and regular backups.

Your rights

Under the GDPR you have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20) and to object to processing (Art. 21). You can withdraw consent at any time with effect for the future.

To exercise any of these, write to info@alphabees.de. You also have the right to lodge a complaint with a supervisory authority — for us that is the Berlin Commissioner for Data Protection and Freedom of Information.

Children

Alpha is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We revise this page when our processing changes. The current version is always the one published here.

Contact

See the imprint.