Privacy.
Last updated
Beam connects your Macs to each other. Today, the windows you beam, your keyboard and mouse, the clipboard and sound go from one of your Macs to the other and do not pass through our servers.
Your Beam account holds who you are, which Macs are yours, and your plan. That is what our servers see. Below is every piece of it, who helps us hold it, and how to delete it.
Who we are
Noats, Inc. makes Beam and runs beam.win. For anything in this policy, write to hello@beam.win.
What stays between your Macs
When you beam a window or a whole Mac, the picture, the sound, your keyboard and mouse input, and the clipboard if you have clipboard sync on, go straight from one of your Macs to the other, over your own network or your Tailscale tailnet. The connection is encrypted and pinned to Macs you trust. We are not in that path and cannot see any of it.
The same goes for share links. The Mac that owns the window serves that page itself, to whoever opens the link. Nothing is uploaded anywhere. Who you give the link to is up to you.
Beam contains no analytics, no crash reporting and no telemetry. If you send us a problem report, the app zips the diagnostics onto your Desktop and you decide whether to attach it to an email.
If we offer an optional Relay later, for Macs that cannot reach each other directly, it would carry your connection through a server. We will describe exactly what it carries, and who runs it, on this page before you can turn it on.
Your account
You sign in with an email address and password, or with Google, GitHub or X. Sign-in is run by Clerk, on accounts.beam.win. Clerk holds your email address, your name, your password (we never see it) or the profile the provider you chose passes on, and your sign-in sessions, which include the IP address and browser or device each one came from. If you are on a team, Clerk also holds the team's name, its members, their roles and any invitations.
Our own server keeps a copy of your email address, whether it is verified, your name, and an id that ties it to your Clerk account.
Each Mac you sign in on
When a Mac signs in, it sends us, and we keep:
- Its name and model, such as "Studio" and "Mac Studio", so you can tell your Macs apart on your account page and in the app.
- A hardware id, which is a one-way hash of the Mac's hardware identifier, never the identifier itself. It lets us tell two Macs apart when one has a copy of the other's Beam settings.
- Its tailnet addresses, if it is on Tailscale, so your other Macs can find it when they are apart.
- Its Beam device id and public key, so your Macs can prove to each other that they belong to you.
- Dates: when it was added, approved, signed out or removed, and when it last checked in.
A new Mac waits until you approve it, from a Mac you already approved or from a link we email you.
When you beam
While you are beaming from a signed-in Mac, it asks our server for permission when you open a window, and checks in about once a minute with how many windows are open. That is how the free daily minutes and the two-Macs-at-a-time rule work. We keep a record of those check-ins and of the minutes used. It does not say which Mac you are looking at, or what is in the window.
A Mac you only beam into, and never sign in on, sends us nothing. Signed-in Macs also renew their sign-in about once a day.
Your plan and payments
Payment is handled by Stripe. Stripe collects your card details on its own pages, under its own privacy policy. We receive and keep your email address, a Stripe customer reference, your plan, and the details of each payment: date, amount, currency, any promotion code, refunds and disputes. For a free trial we also keep a fingerprint Stripe gives us for your card, never the card number, so each card starts one trial.
Emails
We send account email, such as "approve this Mac" and "a Mac was added", through Resend, which receives your email address and the message. We keep a record of each one we send (who it went to, its subject and when, not what it said) for 30 days. Clerk sends its own sign-in emails, such as verification codes and team invitations. We do not send marketing email, and we do not sell, rent or share your address for anyone else's marketing.
Questions you ask on this website
The questions on beam.win end with a box where you can ask one of your own. What you type is sent to Google's Gemini, which writes the answer. Cloudflare Turnstile first checks that you are not a bot, and sees your IP address to do it. To limit how many questions one visitor can ask, we count them in Upstash under a one-way hash of your IP address, never the address, and each count expires within about a day. We do not keep your question or the answer, and neither is tied to your account.
Who helps us run it
- Clerk runs sign-in and teams, and holds what is listed under Your account (privacy policy).
- Cloudflare runs our account server and its database, which hold your account record, your Macs, your plan and your usage records. It also serves the app download and updates. It sees the IP address of each request; our server does not store it. Its Turnstile check guards the question box on this website (privacy policy).
- Stripe takes payments and holds your card and billing details (privacy policy).
- Resend delivers our account email (privacy policy).
- Vercel hosts this website and its account pages, and receives standard web-request information, including your IP address (privacy policy).
- Google Analytics runs on this website only, never in the app. It counts visits, sees which parts of a page people read and how many who start a purchase finish it. It sets cookies, and Google processes your IP address as part of that (privacy policy).
- Google Gemini answers what you type into the question box on this website, and receives that text (privacy policy).
- Upstash holds the question box's counters, keyed by a one-way hash of your IP address (privacy policy).
Each of them handles your data to provide their service to us. We do not sell it.
Update checks
Beam checks beam.win for a newer version, about once a day and when you ask it to, and downloads updates from updates.beam.win. That request carries the app's name and version, nothing else, whether or not you are signed in.
Permissions
Beam asks macOS for Screen Recording, to capture what it is sharing, and Accessibility, to deliver your input to it. Both are used only for what you picked, only while you are beaming it, and only on the Mac doing the sharing.
How long we keep things
We keep your account and your Macs while your account is open. A Mac you remove stays on your account's list, marked removed, so it cannot quietly come back.
Usage records go sooner. The record of each permission to view, and of the free minutes it used, is deleted 30 days after it expires. The record of a viewing session is deleted 90 days after it ends. The record of an email we sent is deleted after 30 days.
If you bought Beam before plans, we keep the email address from that purchase, so your Lifetime finds you when you sign in.
When you delete your account we erase your name, your email address, the details of your Macs, your team memberships and your record of minutes used from our server, and Clerk deletes your sign-in account. A subscription stops renewing and runs to the end of the period you paid for. We keep the record of what you bought: the plan, its dates and Stripe's references. We also keep the card fingerprint of a used free trial, which names no one, and the purchase email of anyone who bought Beam before plans, until they ask us to remove it. Payment records stay in Stripe, and in our books, for as long as tax and accounting law requires.
Signing out and deleting your account
- One Mac: Sign Out in Beam's account settings on that Mac.
- Every Mac at once: Sign Out Everywhere on your account page. Every Mac is signed out, and you sign in again on each one you want to use.
- Delete your account: on your account page, choose Account Settings, open Security, and choose Delete account. Or email hello@beam.win from the address on your account and we will delete it and confirm when it is done.
Your rights
You can, at any time:
- ask what we hold about you, and get a copy;
- ask us to correct it;
- ask us to delete it;
- object to us using it;
- complain to your data protection regulator.
One email to hello@beam.win is enough for any of these.
Children
Beam is not intended for children, and we do not knowingly collect anything from them.
Changes
If this policy changes we will update the date at the top of this page. If a change is significant, we will email you before it takes effect.