Privacy Policy

1. Our Commitment to Your Privacy

At Mpa Beat ("Give me the beat"), we believe privacy is a fundamental pillar of creative freedom. This Privacy Policy details how we collect, handle, protect, and process personal information when you use our web platform, mobile interfaces, and digital music services.

2. Information We Collect

We only gather data necessary to provide high-speed audio streaming, secure track downloads, creator royalties, and platform integrity:

• Account Identification: Display name, email address, profile avatar, and securely hashed passwords. We never store plaintext passwords.
• Mobile Money Numbers: Phone numbers entered during song checkout (MTN / Airtel) to deliver telecom prompts. We do not store mobile money PINs or banking credentials under any circumstances.
• Music Metadata: Song titles, genres, cover art, release years, and creator payout balance ledgers.
• Telemetry & Streaming Logs: Anonymous play counts, download counts, device categories, and IP rate-limiting telemetry to prevent unauthorized automated abuse.

3. Payment Security & Processing

Financial transactions are carried out via automated direct telecom carrier channels. All communication takes place over 256-bit TLS encrypted tunnels. Your mobile operator sends an interactive USSD prompt directly to your phone handset for authorization. Mpa Beat only retains the cryptographic transaction reference and payment status (Completed or Pending) to unlock your purchased audio files.

4. Cookies and Local Storage

We utilize browser cookies and client-side local storage strictly for functional requirements: maintaining your active audio player volume, keeping you authenticated between sessions, and remembering your dark mode preference. We do not sell tracking cookies or provide behavioral datasets to external third-party ad brokers.

5. Data Retention and Deletion

Account data is maintained as long as your account remains open. You have the statutory right under the Uganda Data Protection and Privacy Act to request an export of your information or full deletion of your profile and uploaded catalog. Inquiries can be submitted directly through our verified contact desk.

6. Security Safeguards

We apply defense-in-depth engineering practices across our infrastructure, including cryptographic secret management, strict Content Security Policies (CSP), subresource integrity, rate limiters, and perimeter DDOS mitigations to prevent unauthorized access.