Legal
Privacy policy
Draft — not legal advice; to be reviewed before launch. Draft of 2026-10-26. The operator named below is a placeholder.
This policy explains how Ryszard Jakub Sandak s.p., Slovenia handles personal data in Tonetuned. For visitor conversations, the business that owns the assistant is the controller and the operator is its processor (see the data processing addendum).
1. Who is responsible
For owner accounts, the operator named above is the controller. For the conversations visitors have with an owner's assistant, the owner is the controller and we act as processor.
2. What we collect
Owner accounts: email address, business name, plan and billing status, the knowledge and settings you enter.
Visitor chats: the messages a visitor sends, the assistant's replies, a random visitor identifier stored in the visitor's browser, the email address a visitor chooses to leave, and a one-way hash of the visitor's IP address combined with the assistant's id, used only for rate limiting.
Technical data: standard server logs such as IP address and user agent, kept for security.
3. Why we process it (legal bases)
Providing the service you asked for (contract); keeping it secure and preventing abuse (legitimate interests); billing and tax records (legal obligation); optional emails such as digests, which you can switch off (consent or legitimate interests).
4. How the AI is used
To write an answer, the visitor's message and the matching approved knowledge are sent to our language model provider. Knowledge marked internal is never sent for visitor conversations. We do not use your content to train models, and our provider is contractually restricted from doing so.
5. Sub-processors
We use the following providers. We will update this list before adding a new one.
| Sub-processor | Purpose | Data involved |
|---|---|---|
| Anthropic | Language model that writes the assistant's answers | Visitor messages and the approved knowledge sent with them |
| Supabase | Database, authentication and file storage | Account data, knowledge, conversations |
| Cloudflare | Hosting, content delivery, DNS and DDoS protection | Request metadata such as IP address |
| Paddle | Payments and invoicing (merchant of record) | Billing details and subscription status |
| Resend | Transactional email (sign-in links, notices, digests) | Owner email address and message content |
6. Retention
Conversations are kept until the owner deletes them or closes the account. Rate-limit counters are deleted within a day. Account data is deleted within 30 days after account closure, except records we must keep for tax purposes.
7. International transfers
Some sub-processors are based outside the EU. Where personal data is transferred, we rely on adequacy decisions or standard contractual clauses. The database is planned to run in an EU region.
8. Your rights
You can ask for access, correction, deletion, restriction, portability or object to processing, and complain to the Information Commissioner of the Republic of Slovenia. Visitors should contact the business they chatted with; we will help that business respond.
9. Cookies and storage
We use only what is needed to sign you in, remember your theme and, in the chat, a visitor identifier in local storage. We do not use advertising cookies.
10. Contact
rjs@rjscode.com
Ryszard Jakub Sandak s.p., Slovenia