Tune54

Privacy Notice

Last updated: April 27, 2026

This Privacy Notice describes how QUANTUM SpA ("QUANTUM", "we") collects, uses, shares and protects your personal data when you use the Tune54 service (the "Service").

1. Data controller

The controller of your personal data is QUANTUM SpA, a stock company that operates the Service under the brand Tune54. We act as the data controller with respect to information we collect directly from you.

2. Data we collect

We collect the following categories of personal data:

  • Account data: name, email address, Google account identifier (when you sign in with Google).
  • Contact data: mobile phone number to deliver your daily briefings by SMS.
  • Preferences: topics, keywords, language, voice, delivery time, time zone and Service settings.
  • Generated content: the briefings (text and audio) created for you, along with metadata (duration, delivery status, date).
  • Technical data: IP address, device type, browser, operating system and basic usage data for diagnostics and security.
  • Attribution data: UTM parameters, referrer and landing page, captured when creating an account to understand where you heard about us.
  • Communications: support requests you send us and our responses.

Payment data: your card or payment method data is collected directly by Paddle (our Merchant of Record) and is not stored by us. We only retain non-sensitive identifiers (customer and subscription IDs) to associate your payments with your account.

3. How we use your data

  • Provide the Service: generate and deliver your daily briefings.
  • Manage your account: authentication, support and Service communications.
  • Process payments: share the minimum data with Paddle to manage subscription and billing.
  • Improve the product: aggregated usage analysis to fix bugs and develop new features.
  • Security and fraud prevention: detect suspicious activity and protect the platform.
  • Comply with legal obligations: accounting, tax and regulatory.
  • Marketing: send you communications about the Service (you can unsubscribe at any time).

4. Legal bases

  • Performance of the contract: to provide you the Service you have contracted.
  • Legitimate interest: to improve the product, prevent fraud and maintain security.
  • Consent: for marketing communications and non-essential cookies.
  • Legal obligation: to comply with accounting, tax and regulatory laws.

5. Who we share your data with

We share personal data only with the following categories of recipients:

  • Paddle — acts as our Merchant of Record. Processes payments, manages subscriptions, calculates and remits taxes, issues invoices and handles refunds. More information at Paddle's privacy policy.
  • Infrastructure providers: hosting, database and storage services that run the Service.
  • AI providers: OpenAI (voice synthesis) and Perplexity (search and summarisation) process your preferences and keywords to generate content. These providers act as sub-processors and do not use your data to train their models.
  • Twilio: sends the SMS with the link to your briefing.
  • Transactional email provider: sends Service emails (welcome, confirmations, alerts).
  • Professional advisors: lawyers, accountants and auditors, under confidentiality duties.
  • Authorities: when we are legally required to do so.

6. International transfers

Some of our providers are located outside your country of residence. When this happens, we ensure that appropriate safeguards exist (such as standard contractual clauses or adequacy decisions) to protect your data.

7. How long we keep your data

  • Account data and preferences: while your account is active.
  • Generated briefings: up to 90 days, unless deleted earlier at your request.
  • Billing data: up to 7 years, in accordance with legal accounting and tax obligations.
  • Technical logs: up to 90 days.

When we no longer need the data, we delete it or anonymise it irreversibly.

8. Your rights

You have the right to: access your data, correct it, request its deletion, object to processing, restrict it, request portability, withdraw your consent and lodge complaints with the competent data protection authority. To exercise any of these rights, write to admin@tune54.com. We will respond within a reasonable period and, in any case, within 30 days.

9. Security

We apply reasonable technical and organisational measures to protect your data: encryption in transit (HTTPS), encryption at rest, role-based access control, audit logs and periodic security reviews. No system is 100% secure, but we work continuously to minimise risks.

10. Cookies and similar technologies

We use essential cookies and local storage for the Service to function (session, preferences). We may also use analytics cookies to understand usage in aggregate. You can manage cookies from your browser settings. Essential cookies cannot be disabled without affecting Service operation.

11. Minors

The Service is not directed to children under 18. We do not knowingly collect data from minors. If you discover that a minor has provided us with data, contact us so we can delete it.

12. Changes to this Notice

We may update this Privacy Notice occasionally. If changes are material, we will notify you by email or in-app before they take effect.

13. Contact

For questions or requests about your personal data, write to admin@tune54.com.