Legal
Privacy Policy
This Privacy Policy explains what information Foster Audio LLC ("ProductionDeck," "we," "us") handles through the ProductionDeck macOS application (the "App") and the website at www.productiondeck.io (the "Website"), and what happens to it.
The short version
- ProductionDeck is a local-first Mac app. It runs on your Mac and talks directly to the services and equipment you connect it to. We do not run a server that your production data, chat, or credentials pass through.
- The App does not send us anything. It has no analytics, telemetry, crash reporting, advertising, or tracking.
- When you connect YouTube or Facebook, the App reads your live stream's status, viewer count, and chat or comments, read-only, and shows them on your Mac's screen. That data is kept in memory only: it is never saved to disk and never sent to us or anyone else.
- Sign-in tokens and passwords are stored in your Mac's macOS Keychain.
- We collect information about you only when you buy a subscription, contact us, visit the Website, or choose to send us a diagnostics report.
- We do not sell personal information, and we do not use it for advertising.
1. Who this policy covers
This policy covers:
- Subscribers: the churches and organizations that buy ProductionDeck, and the people who manage their subscriptions.
- Operators: staff and volunteers who use the App.
- Website visitors.
- Viewers of a subscriber's live stream, whose public chat messages or comments the App may display (see Sections 6 and 7).
For data that the App handles only on a subscriber's own Mac, such as service plans, chat messages, and microphone assignments, the subscriber decides what to connect and how to use it. We never receive that data.
2. Information we collect
2.1 Subscription and billing information
When you buy or manage a subscription we collect the name of your church or organization, the campus the subscription covers, and a contact name, email address, and billing address.
Purchases are processed by Polar (Polar Software, Inc.), which acts as our reseller and merchant of record. Polar runs the checkout and the subscription management pages, charges your payment method, calculates and collects sales tax, and sends receipts. Polar's handling of your information is described in the Polar Privacy Policy. We do not receive or store full card numbers; we receive a record of the transaction and the subscription's status, and may see the card brand and its last four digits.
2.2 Support communications
If you email us, we keep your message, your email address, and anything you attach, so that we can help you.
2.3 Diagnostics reports you choose to send
The App can export a diagnostics report (Diagnostics → Export…). The report is created on your Mac and goes nowhere unless you send it to us yourself. It contains the App version, macOS version, which integrations are turned on, their connection status and recent connection messages, device addresses on your local network, and email server settings. Passwords, tokens, and other secrets are removed before the file is written, and email recipient addresses are counted rather than listed. It contains no YouTube or Facebook chat, viewer counts, or account names.
2.4 Website
When you visit the Website, our host Vercel receives standard request information (IP address, browser type, the page requested, and the time) to serve and secure the site.
The Website does not use cookies, analytics, or advertising, and does not track you across other sites. The one exception to loading only our own content is checkout: when you click to buy, the Website loads Polar's checkout, which opens on top of the page but is served and run by Polar. Polar may use cookies and collect device information to process the payment and prevent fraud, as described in Polar's privacy policy. Managing an existing subscription may also take you to account pages run by Polar. When you download the App, the file is delivered from GitHub's servers, which receive the same standard request information.
2.5 What the App does not send us
The App does not contact our servers. It sends us no usage statistics, crash reports, device identifiers, location, or production data, and it does not check in with us to verify your license. We plan to add license activation in a future version, which will occasionally contact us to confirm that your subscription is still active. Before any version with activation or update checks is released, we will update this policy to describe exactly what is sent and how often.
3. Information stored on your Mac
The App saves its data on the Mac it runs on, in ~/Library/Application Support/ProductionDeck/, and saves credentials in the macOS Keychain. This includes:
- dashboard layouts, checklists, quick cues, automations, and settings;
- service timing history (plan and item titles, start and end times, and, if you use the sound level meter, loudness readings);
- microphone profiles, including names and any photos you add;
- email report settings and the delivery status of each report;
- in the Keychain: sign-in tokens, client IDs and secrets, passwords, and access keys for the services you connect.
This data stays on your Mac until you delete it. Deleting the App's Application Support folder and its Keychain item (tv.clawson.productiondeck.secrets) removes it. We cannot see, recover, or delete it for you.
Microphone. If you use the sound level meter or timecode input, the App listens to the audio input you choose. Audio is processed on your Mac in real time and is never recorded or sent anywhere.
4. Third-party services you connect
ProductionDeck connects to other products and services only when you turn an integration on. Data then travels directly between your Mac and that service; it does not pass through us. Each service's own terms and privacy policy govern what that service collects.
| Service | What the App reads or sends | Where it's kept |
|---|---|---|
| YouTube | See Section 6 | Memory only; tokens in Keychain |
| See Section 7 | Memory only; tokens in Keychain | |
| Planning Center Services | Your service plans, items, item notes, song keys, and times, read-only | Plan details in memory; timing history on disk (Section 3); tokens in Keychain |
| Resi | Stream status and encoder information for your account | Memory; credentials in Keychain |
| Custom chat (e.g. Clawson.TV) | Chat messages from a chat service you configure. The App registers itself with that service under a random identifier created on your Mac. Moderation, if you turn it on, sends your delete, timeout, and ban actions to that service. | Memory; key in Keychain |
| ProPresenter, Smaart, Shure, MIDI, Bitfocus Companion | Status and, where you enable it, control commands, over your local network | Settings on disk |
| Spotify | Reads the track playing in the Spotify app on the same Mac. Album artwork is downloaded from Spotify's image servers. | Memory |
| Email (service reports) | If you turn on service report email, the App sends reports through the mail server you configure, to the recipients you choose. Reports contain plan titles, timings, and loudness readings. | Settings on disk; password in Keychain |
Web remote. The App can serve a read-only status page to devices on your local network. It is off by default, it doesn't leave your network, and it doesn't include YouTube or Facebook chat, comments, viewer counts, or account names.
5. How we use information
We use the information in Section 2 to:
- provide, bill for, and manage subscriptions;
- answer support requests and fix problems;
- keep the Website and our business secure and prevent misuse;
- send notices about your subscription, this policy, or the EULA;
- meet legal, tax, and accounting obligations.
We do not sell personal information, use it for advertising, or share it for cross-context behavioral advertising.
6. YouTube
6.1 YouTube API Services
ProductionDeck uses YouTube API Services to show a YouTube channel's live broadcast on the dashboard. By using ProductionDeck's YouTube features you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
6.2 How you connect
You sign in with your Google account through Google's own sign-in page in your web browser. ProductionDeck never sees your Google password. The App asks for a single permission, "View your YouTube account" (youtube.readonly), which is read-only: the App cannot post, upload, delete, moderate, change settings, or start or stop a stream.
By default, sign-in uses ProductionDeck's built-in Google OAuth client. You can instead use your own Google Cloud project (Settings → YouTube Live → Advanced); the App then uses your project, and Google's terms between you and Google apply to it.
6.3 What the App accesses
While you are signed in, the App reads:
- your channel name, to show which account is connected;
- your channel's active live broadcast: its video ID, title, whether it is live, and when it started or ended;
- the broadcast's current concurrent viewer count;
- the broadcast's live chat messages: each message's text, the sender's YouTube display name, and the time it was sent.
Live chat messages are written by your stream's viewers, so the App displays their public display names and messages to the operator, just as the chat appears on YouTube.
If you enter a specific YouTube video ID in Settings, the App reads the same live details for that video.
6.4 How it is used, stored, and shared
- Use. YouTube data is used only to show your broadcast's status, viewer count, chat, and a muted preview on your ProductionDeck dashboard.
- Storage. YouTube data is kept in your Mac's memory only while the App is running. It is not written to disk, logs, diagnostics reports, email reports, or the web remote. It is cleared when the broadcast ends, when you disconnect, or when you quit the App. The only thing kept is your Google sign-in token, stored in the macOS Keychain on your Mac so you stay signed in, until you disconnect or revoke access.
- Sharing. YouTube data is never sent to us or to any third party. It appears only on the screens where you run the App.
- No secondary use. We do not use YouTube or other Google user data for advertising, do not sell or transfer it, do not use it to train artificial intelligence or machine learning models, and do not let any person read it other than the operators using the App on your Mac.
ProductionDeck's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6.5 Embedded YouTube player and cookies
The YouTube Live card shows a muted preview using YouTube's embedded player, loaded from youtube.com inside the App. YouTube serves that player directly. It may show content chosen by YouTube, including ads, and Google may store cookies or similar data on your Mac and collect information about the device viewing it, as described in the Google Privacy Policy. ProductionDeck does not serve ads, and it does not read those cookies.
6.6 Revoking access and deleting YouTube data
- In the App: Settings → YouTube Live → Disconnect. The App asks Google to revoke its access immediately and deletes the sign-in token from your Mac. If Google can't be reached, the token is still deleted and the App tells you to finish removing access on Google's page.
- At Google: remove ProductionDeck at Google Account → Security → Third-party connections. The App notices within an hour, deletes its sign-in token, and shows the account as disconnected.
Because the App keeps no other YouTube data, disconnecting or revoking access removes everything. Disconnecting does not change anything on YouTube itself. We hold no YouTube data on our side; if you ask us to delete YouTube data, we will confirm that within 7 days (see Section 9).
7. Facebook
7.1 How you connect
You sign in through Facebook Login in your web browser. ProductionDeck never sees your Facebook password. Facebook Login uses a Meta developer app: the one your organization registers and enters in Settings → Facebook Live, or ProductionDeck's own Meta app where we offer one. Meta's handling of your data is described in the Meta Privacy Policy.
7.2 Permissions requested and why
| Permission | Why the App needs it |
|---|---|
public_profile | Required by Facebook Login to identify the signed-in account. |
pages_show_list | To find the Facebook Page whose live videos you want to monitor. |
pages_read_engagement | To read the Page's live videos and their viewer counts. |
pages_read_user_content | To read comments on the Page's live video. |
All access is read-only. The App cannot post, comment, reply, hide or delete comments, or start or stop a live video.
7.3 What the App accesses
- for your Page (or your own profile, if no Page is set): its live videos' ID, title, live status, link, and current viewer count;
- for the active live video: comments, including each comment's text, the time it was posted, and the commenter's name and profile picture link as provided by Facebook. The App displays the name and text; it does not download or display the profile picture.
Comments are written by your stream's viewers, so the App displays their names and comments to the operator, just as they appear on Facebook.
7.4 How it is used, stored, and shared
- Use. Facebook data is used only to show your live video's status, viewer count, comments, and a muted preview on your ProductionDeck dashboard.
- Storage. Facebook data is kept in your Mac's memory only, up to the 120 most recent comments. It is cleared when the live video ends, when you disconnect, or when you quit the App. It is not written to disk, logs, diagnostics reports, email reports, or the web remote. The only things kept are your Facebook access token and, if you entered them, your Meta app's ID and secret, stored in the macOS Keychain on your Mac.
- Sharing. Facebook data is never sent to us or to any third party, and is never sold or used for advertising.
7.5 Embedded Facebook player and cookies
The Facebook Live card shows a muted preview using Facebook's embedded video player, loaded from facebook.com inside the App. Meta may store cookies or similar data on your Mac and collect information about the device viewing it, as described in the Meta Privacy Policy. ProductionDeck does not read those cookies.
7.6 Removing access and deleting Facebook data
See Section 9.
8. Sharing information with others
We share the information in Section 2 only:
- with service providers who help us run the business, such as Polar (checkout, payments, sales tax, and subscription management, as our merchant of record), Vercel (website hosting), and Google Workspace (email), each limited to what they need to provide their service;
- when the law requires it, or to protect the rights, property, or safety of our users, the public, or us;
- if our business is merged, acquired, or sold, in which case the buyer must honor this policy, and we will notify you first.
We never share YouTube or Facebook data, because we never receive it.
9. How to delete your data
YouTube and Facebook data held by the App. The App keeps this data only in memory, so quitting the App deletes it. To delete the sign-in tokens and stop all access:
- In ProductionDeck: open Settings, choose YouTube Live or Facebook Live, and click Disconnect. The token is deleted from your Mac immediately.
- At YouTube/Google: remove ProductionDeck at Google Account → Third-party connections.
- At Facebook: open Facebook Settings & privacy → Settings → Apps and websites (direct link), find the app you connected, and click Remove. This withdraws its permissions at Facebook. (Disconnecting in ProductionDeck deletes the token from your Mac but does not remove the app on Facebook's side.)
Data stored on your Mac. Delete it as described in Section 3. Uninstalling the App does not remove it automatically.
Data we hold (Section 2). Email andrew@productiondeck.io with the subject "Delete my data" and tell us which church or account it concerns. We will confirm your request, delete the data within 30 days, and tell you when it's done. For any request about YouTube or Facebook data we will respond within 7 days. We may keep records we are required by law to keep, such as invoices, and will tell you if we do.
10. How long we keep information
- Subscription and billing records: while the subscription is active, and afterwards for as long as tax and accounting law requires (typically 7 years).
- Support emails and diagnostics reports you send: up to 2 years after the issue is resolved, unless you ask us to delete them sooner.
- Website request logs: kept by Vercel under its own retention policy; we do not keep separate copies.
- YouTube and Facebook data: we never receive it. On your Mac, it is held in memory only, as described in Sections 6 and 7.
11. Security
Credentials are stored in the macOS Keychain, never in plain-text files. Connections to online services use HTTPS. Secrets are removed from logs and diagnostics reports. Features that can control live equipment or services, the web remote, and chat moderation are off by default. No system is perfectly secure, so please keep your Macs, accounts, and network protected. You can report a security problem to andrew@productiondeck.io.
12. Your rights
Depending on where you live, you may have the right to ask us to tell you what personal information we hold about you, give you a copy, correct it, delete it, or stop or restrict using it, and to object to how we use it. You can make any of these requests by emailing andrew@productiondeck.io. We will not treat you differently for making a request. We may need to confirm your identity before acting on it. If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority.
Our legal bases for handling the information in Section 2 are performing our contract with you (subscriptions and support), our legitimate interests (security and running the business), and legal obligations (tax and accounting).
13. Children
ProductionDeck is a tool for church and event production staff. It is not directed to children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
14. International users
We are based in the United States, and the information in Section 2 is processed there. Data the App handles stays on your Mac or goes directly to the services you connect.
15. Changes to this policy
We will post any change on this page and update the effective date. If a change affects how the App handles your data, especially YouTube or other Google user data, we will tell you in the App or by email before the change takes effect, and we will not use data in a new way without your consent where the law or Google's policies require it.
16. Contact us
Questions, complaints, or requests about privacy:
Foster Audio LLC
Email: andrew@productiondeck.io
Mail: 184 Alvie Ln, Pollok, TX 75969
ProductionDeck is not affiliated with, endorsed by, or sponsored by Google, YouTube, Meta, Facebook, or any other third-party service it connects to. All third-party names and marks belong to their owners.