Privacy Policy

Last updated: June 20, 2026

This Privacy Policy explains how TuneTailor collects, uses, shares, stores, and deletes personal data when you visit the storefront, place an order, submit a story or lyrics, contact support, receive a song, or request a revision.

1. Who controls your data

The data controller is NIȚĂ IOAN-MĂDĂLIN PERSOANĂ FIZICĂ AUTORIZATĂ, trading as TuneTailor, CUI 43998606, with registered office at Sat Săveni, Comuna Săveni, Strada Nicolae Iorga, Nr. 48, Județ Ialomița, Romania.

Privacy requests may be sent to support@tunetailor.org or through the contact form.

2. Personal data we collect

Depending on how you use TuneTailor, we collect:

• Order and contact data: your name, email address, billing details, market, currency, order details, payment status, and identifiers needed to manage the purchase. Payment-card data is handled by Shopify and the payment providers offered at checkout rather than stored by TuneTailor.
• Creative brief data: song title, genre, stories, memories, lyrics, names, relationships, occasions, requested phrases, exclusions, mood, voice preferences, pronunciation guidance, and any other information you choose to submit.
• Fulfilment data: production status, quality checks, revision requests, support decisions, delivery timestamps, private-link records, completed lyrics, song files, cover artwork, and purchased add-ons.
• Support and communication data: messages sent through email or the contact form and records needed to answer, resolve, or document the request.
• Storefront and security data: device, browser, IP address, cookie or consent choices, request and error logs, and limited interaction events such as sample plays, calls to action, checkout starts, purchases, delivery milestones, and revision requests.

A gift purchaser may submit personal data about another person. The purchaser is responsible for having permission to provide that information. Please include only information reasonably needed to create the song.

3. Why we use personal data

We process personal data as needed to:

• take payment, create the personalized deliverables, and perform the contract;
• deliver private files, renew access, provide revisions, and answer support requests;
• prevent fraud, abuse, unauthorized access, and technical failures;
• maintain accounting, tax, transaction, dispute, and compliance records;
• operate, secure, troubleshoot, and improve the storefront and fulfilment systems; and
• publish a review, sample, testimonial, reaction, song, artwork, name, or story only when separate consent has been given for that public use.

The legal basis is normally performance of the purchase contract, steps requested before entering that contract, compliance with legal obligations, or TuneTailor's legitimate interests in securing and operating the service. Where consent is required, including for optional public marketing use or consent-gated technologies, we rely on consent and you may withdraw it.

4. Processors and recipients

We disclose personal data only as needed for the purposes above. Current service-provider categories include:

• Shopify: storefront hosting, checkout, orders, customer records, policy pages, markets, payment integrations, and store administration.
• Cloudflare: secure application delivery, workflow processing, private file storage, application records, network security, and domain services.
• Resend and email-routing providers: transactional email delivery and inbound support routing.
• Restricted production workspace and production tools: storage and processing used by authorized personnel to create, check, and revise the purchased song, lyrics, audio, artwork, and add-ons.
• Payment providers: payment authorization, fraud checks, refunds, and chargeback handling for the options displayed at checkout.

We may also disclose information to authorized fulfilment personnel, accountants, legal or professional advisers, regulators, courts, law enforcement, or another recipient when required by law or reasonably needed to establish, exercise, or defend legal claims.

5. International processing

Some providers may process data outside Romania or the European Economic Area. Where required, we use an applicable transfer mechanism or other safeguards intended to protect the data. Contact us for information about safeguards relevant to your data.

6. Private delivery files and links

Delivered songs, lyrics, artwork, and add-ons are kept in private order-scoped storage and served through a secure customer link. Anyone who possesses the link may be able to access the page and files, so share it only with people you trust.

Security links may expire. We use order and contact information to verify an access-renewal request and issue a renewed link through support. We do not promise a self-service renewal flow.

7. Cookies and analytics

Shopify, Cloudflare, and connected services may use cookies or similar technologies needed for storefront operation, checkout, security, consent management, and preferences. Optional analytics or marketing technologies are used according to the consent choices presented where required.

TuneTailor's application analytics are designed to record limited service events without customer contact data, submitted stories, lyrics, private tokens, or media URLs.

8. Retention

We retain briefs, order details, revision requests, communications, and production records only for as long as needed for operations, support, accounting, legal obligations, and fraud or dispute handling. When those needs end, the data is deleted or anonymized.

Separately, delivery files remain available indefinitely while TuneTailor operates and the files remain available so customers can continue to access their purchase. This is not a promise of permanent archival after the service ceases to operate. Customer-requested deletion under section 9 ends that delivery access.

9. Deletion requests

After verifying identity and clearly warning that access cannot be restored, TuneTailor will delete the customer's song, lyrics, artwork, and brief within 30 days. Transaction, accounting, tax, fraud, or dispute records may be retained when legally required or otherwise lawfully necessary.

If you separately allowed a song, lyrics, artwork, name, testimonial, reaction, or story to be used publicly, you may withdraw that permission at any time. We will stop new use and remove marketing and storefront copies we control within 30 days.

10. Your privacy rights

Depending on applicable law, you may have rights to access, correct, erase, restrict, or object to processing; receive portable data; withdraw consent; and complain to a supervisory authority. These rights can be limited where an exception applies, including where records must be retained by law or are needed for legal claims.

Send a request to support@tunetailor.org. We may ask for information reasonably needed to verify identity. You may also complain to Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority.

11. Security

We use technical and organizational measures intended to protect personal data, including restricted staff access, private storage for delivered files, scoped customer links, and service access controls. No system can guarantee absolute security. Contact us promptly if you believe a private link or account information has been exposed.

12. Changes to this policy

Material changes are dated and published prospectively. The version in effect when an order was placed continues to describe that order's handling unless applicable law requires otherwise.

13. Contact

Email support@tunetailor.org or use the contact form. We respond within 24 hours, including weekends and public holidays.

NIȚĂ IOAN-MĂDĂLIN PERSOANĂ FIZICĂ AUTORIZATĂ
Trading as TuneTailor
CUI 43998606
Sat Săveni, Comuna Săveni, Strada Nicolae Iorga, Nr. 48, Județ Ialomița, Romania