Privacy Policy

1. Overview

Song Syncer is a Discord bot developed and operated by RSA Solutions. This Privacy Policy describes what data Song Syncer collects, how it is used, and your rights with respect to that data.

2. Data We Collect

Song Syncer collects and processes the following data in order to function:

• Discord User Information: Your Discord username and user ID (used to attribute which user shared a link and to enforce undo permissions).
• Discord Server & Channel Information: The server ID and channel ID where Song Syncer is configured to operate.
• Music Links: Spotify track URLs and YouTube video URLs that are shared in monitored channels.
• Spotify Account & Playlist Information: OAuth credentials (stored as refresh/access tokens), your Spotify user ID, and the playlist ID configured for sync.
• YouTube Account & Playlist Information: OAuth credentials (stored as refresh/access tokens) and the YouTube playlist ID configured for sync.
• Activity Logs: A log of sync events including track name, source platform, outcome (added/duplicate/failed), and timestamp.

3. How We Use Your Data

All data collected is used exclusively for the operation of Song Syncer:

• Authenticating with Spotify and YouTube APIs on your behalf to add tracks to your playlists.
• Detecting and attributing shared music links in configured Discord channels.
• Preventing duplicate playlist entries.
• Enabling the undo feature to remove previously added tracks.
• Generating activity logs visible to authorized users.

We do not use your data for analytics, advertising, profiling, or any purpose beyond the core functionality described above.

4. Data Storage & Security

Song Syncer is self-hosted software. Data including OAuth tokens, server/channel configuration, and activity logs are stored locally on the host machine running the bot. This data is not transmitted to any RSA Solutions-operated remote servers.

OAuth tokens for Spotify and YouTube are stored on the host machine and used solely to authenticate API requests. These tokens are never shared with third parties outside of the respective platform APIs (Spotify, Google/YouTube).

5. Third-Party Services

Song Syncer interacts with the following third-party platforms on your behalf:

• Discord — for reading messages in configured channels. Governed by Discord's Privacy Policy.
• Spotify — for adding tracks to playlists. Governed by Spotify's Privacy Policy.
• Google / YouTube — for adding videos to playlists via the YouTube Data API. Governed by Google's Privacy Policy. Song Syncer's use of YouTube API Services is also subject to the YouTube Terms of Service.

6. Google API Disclosure

Song Syncer uses the YouTube Data API to add videos to YouTube playlists. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the youtube scope necessary to write to your YouTube playlist.
• YouTube account data is used solely to add music links to your designated playlist.
• We do not use YouTube account data for any purpose beyond playlist management.
• We do not share YouTube account data with any third parties.

7. Data Retention

Song Syncer retains activity logs and configuration data for as long as the bot is operational. OAuth tokens are retained until manually revoked or until the bot is uninstalled. There is no automated data expiration.

You may revoke Song Syncer's access to your Spotify account at any time via Spotify's connected apps page. You may revoke access to your Google/YouTube account at any time via Google's security settings.

8. Access & Availability

Song Syncer is currently operational on an invite-only basis for a private group. Public availability is not yet offered. Access may be expanded in the future at RSA Solutions' discretion.

9. Children's Privacy

Song Syncer is not directed at children under the age of 13. We do not knowingly collect data from children. If you believe a child has provided data through Song Syncer, please contact us so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. Continued use of Song Syncer after changes are posted constitutes acceptance of the updated policy.

11. Contact

For questions or concerns about this Privacy Policy or Song Syncer's data practices, contact RSA Solutions at:
songsyncer.rsasolutions.org