TuneSage Privacy Policy
Last updated: August 12, 2026
Trovedex LLC ("TuneSage," "we," "us," or "our") operates the TuneSage service at https://tunesage.com (the "Service"). This policy explains what personal information we collect, why we collect it, how we use and share it, and what rights you have.
For the purposes of the EU and UK General Data Protection Regulation, Trovedex LLC is the data controller for the information described in this policy. Our contact details are at the end.
1. Summary
We collect very little. To use the Service you give us an email address and choose a password. Everything else we hold is either the musical content you create with the Service or ordinary technical records generated by running a website.
We do not collect your name, mailing address, or payment card details. Payments are handled by Stripe, which collects that information directly and is responsible for it as an independent controller.
We do not use your musical content to train, fine-tune, or improve our music generation models.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
2. Information We Collect
2.1 Information you give us
- Account information. Your email address and a hashed version of your password. We never store your password in readable form.
- Your musical content. The compositions, generated material, and related project data you create, save, or export using the Service.
- Generation settings. The musical constraints you supply, such as meter, form, or supplied notes and chords.
- Support correspondence. If you email us, we keep your message and our reply, including your email address.
- Forum posts. If we operate a community forum and you post to it, your username and post content are public.
2.2 Information collected automatically
- Server and access logs. IP address, browser and device information, pages requested, and timestamps. These are generated automatically by our hosting infrastructure and are used for security, debugging, and abuse prevention.
- Session data. A cookie or token that keeps you logged in.
- Usage data. Non-musical statistics about how the Service is used, such as the number of generations produced relative to the number saved or exported, and the length of saved or exported material.
2.3 Information we do not collect
We do not ask for your legal name, date of birth, mailing address, or telephone number. We do not receive or store your payment card number, expiry date, or security code.
3. Payments
Payments are processed by Stripe, Inc. Depending on the arrangement in effect, Stripe may act as the merchant of record for your purchase, meaning Stripe is the seller for the transaction and is responsible for collecting and remitting applicable sales tax or VAT.
Stripe collects the billing information necessary to process your payment, including your name, billing address, and card details. Stripe handles that information under its own privacy policy, available at https://stripe.com/privacy, and acts as an independent controller in respect of it.
We receive from Stripe only what we need to administer your account: a customer identifier, your subscription status and plan, the amount and date of payments, and the last four digits and brand of your card for reference. We do not receive your full card number.
4. Cookies and Similar Technologies
We use only cookies that are strictly necessary to operate the Service:
- an authentication cookie or token that keeps you signed in;
- security cookies used to protect against cross-site request forgery.
These are exempt from consent requirements because the Service cannot function without them, and we do not use them to track you.
We do not use advertising cookies, third-party marketing pixels, or cross-site tracking technologies.
5. How We Use Your Information
| Purpose | Information used |
|---|---|
| Creating and maintaining your account | Email address, hashed password |
| Providing the Service and storing your work | Musical content, generation settings |
| Processing subscriptions and renewals | Email address, Stripe customer identifier |
| Sending service and account emails (password resets, receipts, security notices, changes to these terms) | Email address |
| Responding to support requests | Support correspondence |
| Keeping the Service secure and preventing abuse | IP address, server logs, account identifiers |
| Understanding and improving how the Service works | Aggregate usage data |
| Sending our newsletter, where you have opted in | Email address |
| Meeting legal, tax, and accounting obligations | Transaction records |
6. Legal Bases for Processing
For users in the EU, UK, and other jurisdictions where a legal basis is required:
- Performance of a contract — creating your account, storing your work, and providing the Service you have subscribed to.
- Legitimate interests — securing the Service, preventing fraud and abuse, debugging, and understanding aggregate usage. We have considered these interests against your rights and consider them proportionate given the limited data involved.
- Consent — marketing emails, which you may withdraw at any time by unsubscribing.
- Legal obligation — retaining transaction and tax records.
7. Your Musical Content
Your compositions belong to you. We store them so that we can provide the Service to you, and we access them only where necessary to operate the Service, resolve a support request you have raised, investigate a suspected violation of our Terms, or comply with a legal obligation.
We do not use your musical content to train, fine-tune, or otherwise develop our generation models, and we do not sell, license, or disclose it to third parties for their own purposes.
You can export your work at any time from within the Service.
8. Marketing Email
We send our newsletter only to people who have opted in. Agreeing to our Terms of Service or subscribing to the Service does not sign you up for marketing email; that requires a separate, affirmative opt-in.
Our newsletter is sent using AWeber. You can unsubscribe using the link in any newsletter, or by emailing us. Unsubscribing from marketing does not stop transactional email, which we must send to administer your account.
9. Service Providers
We share personal information with a small number of providers who process it on our behalf, under contract and only for the purposes we specify:
| Provider | Purpose | Information involved |
|---|---|---|
| Stripe | Payment processing and, where applicable, merchant of record | Billing details (collected directly by Stripe), email address |
| Hostinger | Hosting the application and database | All account and content data |
| Resend | Sending account and security emails | Email address |
| AWeber | Newsletter delivery, for subscribers who opt in | Email address |
| ImprovMX | Forwarding email sent to our published addresses | Contents of email you send us |
We may also disclose information where required by law, in response to valid legal process, to enforce our Terms of Service, to protect the rights, safety, or property of Trovedex LLC or others, or in connection with a merger, acquisition, reorganisation, or sale of assets — in which case we will give notice before your information becomes subject to a different privacy policy.
We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising.
10. International Transfers
We are based in the United States, and our infrastructure and service providers are located in the United States. If you use the Service from outside the United States, your information will be transferred to and processed there.
Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses where applicable.
11. Retention
We keep your account information and musical content for as long as your account is open.
When you delete your account, we delete your content and account information from our active systems. Residual copies may remain in routine backups for a limited period before being overwritten in the normal course, and are not used for any purpose during that time.
Other retention periods:
- Server logs — retained for a limited period for security and debugging, then deleted or anonymised.
- Transaction and billing records — retained as required by tax and accounting law, typically seven years.
- Support correspondence — retained for as long as needed to handle the matter and for a reasonable period afterwards.
- Deleted accounts — when an account is deleted, we retain a one-way cryptographic hash of the associated email address for twelve (12) months, to recognise repeat registrations and prevent abuse of free trials. A hash of this kind cannot be used to recover or contact the original address. We rely on our legitimate interest in preventing abuse of the Service for this retention.
- Banned accounts — where we suspend or terminate an account for violating our Terms of Service, we may retain the associated email address, IP address, and related identifiers indefinitely, in order to enforce our Terms, prevent the creation of replacement accounts, and protect the Service and its users from abuse and fraud. We rely on our legitimate interest in operating a secure service for this retention.
- Forum posts — remain visible after account deletion, automatically disassociated from your account and attributed to an anonymous "[account deleted]" label. Contact us if you would like specific posts removed entirely, and we will remove them where practicable.
12. Security
We take reasonable measures to protect your information, including:
- storing passwords using a modern, salted password hashing algorithm — never in readable form;
- encrypting data in transit using HTTPS;
- encrypting backups and restricting access to them;
- limiting access to production systems;
- keeping payment card data entirely outside our systems by using Stripe.
No system is perfectly secure, and we cannot guarantee absolute security. We encourage you to use a strong, unique password and to export your work regularly so that you always hold your own copy.
If a breach affecting your personal data occurs, we will notify you and any relevant supervisory authority where required by law.
13. Your Rights
Depending on where you live, you may have some or all of the following rights:
- Access — request a copy of the personal information we hold about you.
- Portability — receive your data in a portable format. You can export your musical content from within the Service at any time.
- Correction — correct inaccurate information. You can update your email address in your account settings.
- Deletion — delete your account and associated data, subject to the retention exceptions in Section 11.
- Restriction and objection — ask us to restrict or stop certain processing.
- Withdraw consent — unsubscribe from marketing at any time.
- Non-discrimination — we will not treat you differently for exercising any of these rights.
To exercise any of these rights, email support@tunesage.com. We will respond within the time required by applicable law, generally within 30 days, and may need to verify your identity by confirming control of the account's email address.
If you are in the EEA or UK and believe we have not handled your data properly, you may lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.
14. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Users under 18 must have the consent of a parent or legal guardian, as described in our Terms of Service.
If you believe a child under 13 has provided us with personal information, contact us at support@tunesage.com and we will delete the information and terminate the account.
15. Changes to This Policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and notify you by email or through the Service. Continued use of the Service after a change takes effect indicates that you have read the updated policy.
16. Contact
Questions about this policy, or requests relating to your personal information:
Email: support@tunesage.com
Mail:
Trovedex LLC
8401 Mayland Drive, Suite A
Richmond, VA 23294