Privacy Policy

This policy explains what personal information ArtistBots ("we", "us") collects when you visit the site, create an account, buy a plan or call the API, why we collect it, who it is shared with, how long it is kept, and what choices you have. We have tried to keep it plain and specific. By using ArtistBots you agree to this policy. The rules for using the service are in our Terms.

Last updated: 1 October 2026

1. Who we are

ArtistBots is an independent, third-party developer service that provides a search and media API. It is not affiliated with, endorsed by, or sponsored by YouTube, Google LLC or Spotify. Those names and logos belong to their owners and are used only to describe what the API connects to. For the purposes of this policy we are the party that decides how your account data is used. You can reach us through the details in section 13.

2. Information we collect

Account information.

• If you sign in with Google: your name, email address and profile picture, as provided by Google. We never receive your Google password.
• If you sign up with email: the full name and Gmail address you enter, and a password. The password is stored only as a salted hash, never in readable form.
• One-time codes (OTP) used for sign-up, password reset and setting a password. A code is stored only as a hash, is valid for 2 minutes, allows a limited number of attempts and is deleted once used or expired. While a sign-up is waiting for its code, the name and password hash you entered are held with that temporary record.

Account activity and billing information.

• Your API key(s), plan details (name, limits, start and expiry dates) and wallet balance.
• Wallet transactions: amount, type, status, date, and the Razorpay order and payment identifiers. We do not receive or store your card number, UPI ID, bank login or other payment instrument details.
• Counters of how many requests, audio downloads and video downloads your account has made.

Technical and usage information.

• API call logs: time, endpoint used, result status (success, error or denied), your IP address, the plan and the last characters of the key used, and, for search requests, the text you searched for.
• Short-lived security counters tied to your IP address or email, used for rate limiting and to slow down password guessing and OTP abuse.
• Standard server and hosting logs (for example IP address, browser type and request time) created by our hosting infrastructure.

Media requested through the API. To make repeated requests faster we may keep a cached copy of a requested audio file (up to about 10 MB) in our database for 24 hours, after which it is deleted automatically. The cache is identified only by the video ID and does not contain information about who requested it.

Messages you send us. If you contact us on Telegram, we receive the details you choose to share, such as your account email and payment references.

3. How we use your information

• To create and manage your account, sign you in and keep your session secure.
• To issue API keys, apply plan limits and quotas, and run the API.
• To process wallet top-ups and plan purchases, keep accounting records and resolve payment problems.
• To send one-time codes and other essential account emails.
• To detect, prevent and investigate abuse, fraud, excessive traffic and security incidents.
• To provide support, answer requests and meet legal obligations.

We do not sell your personal information, and we do not use it to make automated decisions that have legal effects on you.

4. Who we share information with

We share information only with service providers that help us run ArtistBots, and only as needed for the service they provide:

• Google for Google Sign-In and Google Fonts.
• Our email delivery provider to send one-time code emails (it receives your email address and the message).
• Razorpay to process payments. It collects your payment details directly and sends us the order and payment status.
• Our cloud infrastructure and hosting providers, which store and process the data described above on our behalf.
• Telegram, which hosts our support chat.

We may also disclose information when the law requires it, to respond to valid legal requests, to enforce our Terms, or to protect the rights, safety and security of our users, the public or the service. If ArtistBots is ever transferred to another owner, your information may be transferred with it, and this policy would continue to apply until you are told otherwise.

5. Cookies and similar technology

We use a session cookie to keep you signed in. It is marked HttpOnly and SameSite, and Secure when the site is served over HTTPS. Without it you could not stay signed in. The services listed in section 4 (Google Sign-In, Razorpay checkout) may set their own cookies or similar identifiers on your device. You can block or delete cookies in your browser settings, but parts of the site may then stop working.

6. How long we keep information

• One-time codes: deleted when used, and automatically removed 2 minutes after they are issued.
• Security and rate-limit counters: kept for minutes to hours and then removed automatically.
• API usage logs: kept for about 30 days, then removed automatically.
• Account data (profile, keys, plans, wallet balance): kept while your account exists.
• Payment and transaction records: kept after account deletion for as long as accounting, tax, fraud-prevention or legal rules require.
• Cached media: kept until it is removed from our cache; it is not linked to your account.

When you ask us to delete your account, we delete your profile, your plans and API keys and your usage logs. Payment records are kept as described above.

7. How we protect information

We use passwords and one-time codes that are stored only as hashes, encrypted connections (HTTPS), restricted access to the admin area, rate limiting and attempt limits on sign-in and one-time codes, and API keys that can be revoked or regenerated at any time. No system is completely secure, so we cannot guarantee absolute security. Keep your password and API keys private, and tell us quickly if you think your account has been misused.

8. Your choices and rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, to receive a copy, to object to or restrict certain uses, and to withdraw consent you gave earlier. You can change your password and regenerate or revoke API keys from your account. To use any of the other rights, contact us (section 13). We may need to confirm that the request comes from the account owner, and we will respond within a reasonable time. You may also have the right to complain to your local data protection authority.

9. International transfers

Our service providers may process information in countries other than your own, including countries that have different data protection laws. By using ArtistBots you understand that your information may be transferred to and processed in those places.

10. Children

ArtistBots is not meant for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

11. Links to other sites

The site links to services we do not control, such as YouTube, GitHub, Telegram and Google. Their privacy practices are their own, and we encourage you to read their policies.

12. Changes to this policy

We may update this policy as the service changes. When we do, we will change the "Last updated" date above. If the changes are significant, we will make that clear on the site. Continuing to use ArtistBots after an update means you accept the updated policy.

13. Contact

For questions about this policy, to exercise your rights, or to request deletion of your account, message us on Telegram from the account you want us to look at, or include your account email in the message.