B2B Studio

Privacy Policy

Effective 2026

B2B Studio is a practice and training tool — for learning, rehearsing, and playing back to back with friends from home. It is not professional equipment and is not meant to run a set in a venue.

Your music never reaches our servers. The room you play in lives in memory and disappears when it ends. We keep only what an account, a DJ name and a friends list actually need.

This covers b2bstudio.live and the B2B Studio desktop application (the “Service”), operated by B2B Studio (“we”, “us”).

01The short version

WhatWhere it goes
Your music filesNever to us. Read from your own disk. Sent directly to the people in your room.
Your rekordbox libraryNever to us. Parsed in your browser and kept there.
Live audio, mixing, cuesNever to us. Every machine renders its own sound.
The room and its timelineIn the server's memory for the life of the room, then gone. Never written to a database.
Account, DJ name, friendsStored, until you delete your account.
What you played, and how longStored, for play statistics and charts. Deleted with your account.

02What we collect

Your account. Your email address. If you sign in with Google, Facebook, X or Apple we also receive your name, profile picture and an account identifier from them. We never see your password with those services. If you use Sign in with Apple and hide your email, Apple gives us a relay address and we never see the real one.

Your DJ profile. A unique DJ name, and optionally a display name, picture, short bio, genres and links to your own social profiles. This is public — it shows in the session browser, on your profile and in charts. Don't put anything there you wouldn't put on a flyer.

Play activity. When signed in: that you joined or left a room, how long you played, whether anyone else held decks, which deck, and the title and artist of the loaded track. This is what makes charts possible. It includes what you played — if that bothers you, don't sign in. The booth works signed out.

Downloads. Platform, architecture, version, referring page, browser user-agent and a country. We do not store IP addresses — the country is derived and the address discarded.

Friends and invitations. Who is connected to whom, and which invitations have been used. Whether friends can see the room you're in is a switch in your profile. Turn it off and they see only that you're online.

In your browser, not with us. Preferences under keys beginning b2b. — DJ name, mixer and jog settings, MIDI mappings, layout. Never leaves your machine. No advertising or tracking cookies.

Not kept at all. Rooms, occupants, the shared timeline, every control gesture, and who is online are worked out live in memory. A restart ends every room in progress and none of it is recoverable — by us or anyone.

03Connecting you to other DJs

A back-to-back session is a direct connection between machines. That is what makes it fast enough to play on, and it has a consequence worth understanding.

04Your hardware and files

With your permission the Service may use your camera and microphone for video tiles and talk-back, Web MIDI for your controllers, and file access to read the music you pick. The desktop app can also see Pro DJ Link players on your local network.

All of it happens on your machine. Video and voice travel directly to the people in your room. We do not record, store or have access to any of it. Your browser asks before granting each permission and you can withdraw them at any time.

05Who else sees it

We do not sell your personal information and we do not share it for advertising. We use these providers to run the Service:

ProviderWhat for
SupabaseDatabase and sign-in — accounts, profiles, play activity, friends.
Fly.ioHosting for the site and signal server.
Google, Meta, X, AppleOnly if you sign in with them. Their own policies apply to what they do.
ResendAccount email — sign-in links and invitations.
STUN and relay serversEstablishing peer-to-peer connections, as above.

We may also disclose information where legally required or to protect someone's safety, and will tell you unless prohibited.

Our servers are in the United States. If you use the Service from elsewhere, your information is transferred there; where required those transfers rely on Standard Contractual Clauses or an equivalent mechanism operated by the providers above.

06Your rights, and how to delete your data

Wherever you are, you can ask us for a copy of what we hold, correct it, delete it, or have it sent somewhere in a portable form. Most of it you can do yourself from your profile.

In the UK and EU you have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, may withdraw consent at any time, and may complain to your national data protection authority. Our lawful bases are performance of a contract (your account and sessions), legitimate interests (security, abuse prevention, download counts) and consent (camera, microphone, MIDI).

In California, under the CCPA and CPRA, you may request the categories and specific pieces we hold, ask us to delete or correct them, and not be discriminated against for asking. We do not sell or share personal information as those terms are defined, so there is no opt-out to offer. Other US states with comprehensive privacy laws — including Florida, Colorado, Connecticut, Virginia, Texas and Oregon — give broadly equivalent rights, exercised the same way.

Contact us through b2bstudio.live. We reply within 30 days, or 45 where the law allows longer and we say why. We may need to confirm you control the account first.

Deleting your account and everything in it

Open your profile, choose Delete account, and confirm. That permanently removes your account, profile, DJ name, play history, friend connections and any invitations you sent. It cannot be undone, and because a DJ name is unique, releasing yours makes it available to someone else.

If you signed in with Google, Facebook, X or Apple, deleting your account here also severs the link to that provider — you do not need to do anything on their side. Removing the app from your Facebook settings has the same effect as asking us to delete: write to us and we will remove everything within 30 days.

If you cannot sign in, contact us through b2bstudio.live from the address on the account and we will delete it for you.

07Security

Connections use TLS. Passwords are hashed by our authentication provider and never visible to us. Database access is restricted by row-level security so one account cannot read another's private records. Server credentials are held as encrypted secrets.

None of that is a guarantee — no service can promise it will never be breached, and we won't pretend otherwise. If a breach affects your personal information we will notify you and the relevant regulator as the law requires.

08Children

The Service is not intended for anyone under 13 and we do not knowingly collect personal information from them; if you believe a child under 13 has given us information, write to us and we will delete it. In the UK and EU, users below the age at which they can consent for themselves (13 to 16, depending on the country) need a parent or guardian to authorise their use.

09Changes and contact

Changes are posted here with the date above. If one materially affects what we collect or do with it, we'll email account holders before it takes effect.

Privacy questions and requests can be sent to us through b2bstudio.live.
B2B Studio is operated from Florida, United States.