Privacy Policy

Effective date: 8 October 2026

This Privacy Policy explains how TuneLens ("we", "us", "our") collects, uses, and protects information when you use our service at tunelens.com.

TuneLens is run by Peter Bladh Konsult AB (org. no. 559058-7613), Västergatan 21, 434 30 Kungsbacka, Sweden. We are the data controller for the personal data described here. Contact us about anything in this policy at [email protected].

1. What We Collect

Data	Why	Retention
Email address	Account authentication via Supabase	Until account deletion
The site that first sent you to TuneLens (its address only, never what you searched for), the page you landed on, and the campaign tags (UTM parameters) on that link, if it had any	To see which posts and links bring people in	Stored with your account until account deletion
Uploaded audio files	To perform mix and brief analysis	Kept so you can reopen, re-analyze and share your songs. Deleted when you delete the song or your account
Analysis sessions	So you can review past results in My Stuff	Stored per user account; you can delete individual sessions
Pitch and outreach records	Your CRM data within TuneLens	Until you delete them or your account
Brief text submitted	To run AI analysis	Stored as part of the session record
Brief text pasted into the free public Brief Checker (no account needed)	To decode the brief, and to cache the result so the same brief isn't re-analysed. Retained to help us understand what music briefs are asking for.	Retained. Not linked to any account or identity — no login is involved. Do not paste text you are not free to share.
IP address on the free public Brief Checker	Abuse prevention and rate limiting only	Stored only as a one-way salted hash, never in readable form. Daily counters reset.

2. How We Use Your Data

To provide and improve the TuneLens service.
To authenticate your account and keep your data private to you.
To pass audio and brief text to AI analysis models for the purpose of generating results.
To publish anonymised, aggregated statistics across all analyses (for example, which mix issues come up most often). These never include your audio, lyrics or anything that identifies you or your songs.
We do not sell, rent, or share your personal data with third parties for marketing purposes.

The legal basis for each use under the GDPR:

Performing our contract with you (Art. 6(1)(b)): your account, analyses, saved work, credits and payments.
Our legitimate interests (Art. 6(1)(f)): product analytics and error monitoring, anonymised statistics across analyses, keeping the service secure, preventing abuse such as several accounts run to collect free credits, and emailing you about TuneLens features similar to the ones you use. You can object at any time, and you can unsubscribe from product emails with the link in every one.
Legal obligations (Art. 6(1)(c)): keeping accounting records for as long as Swedish law requires.

3. Third-Party Services

Supabase — handles authentication and database storage. Your email and session data are processed by Supabase in accordance with their Privacy Policy.

Google Gemini — audio and text data is sent to Google's Gemini models on Vertex AI for analysis. Google processes this data as a data processor under our agreement and does not use it to train its models. See Google's Privacy Policy.

Lemon Squeezy — processes payment, subscription, and billing data when you upgrade to a paid plan. Receives your email, billing country, and payment-method details directly from your browser; we do not store full card numbers. See Lemon Squeezy's Privacy Policy.

PostHog — product analytics. Captures event data (page views, feature usage, errors) so we can understand how TuneLens is used and improve it. When you are signed in, events are tied to your account ID only, never your email or name. Your IP address is not stored, and PostHog sets no cookies. See PostHog's Privacy Policy.

Sentry — error and performance monitoring. When the app encounters an error, Sentry receives the stack trace and request context, which may include your user ID (never your email) and the action you were performing, so we can debug and fix it. Your IP address is not stored. See Sentry's Privacy Policy.

Resend — email delivery. Receives your email address and name when we send you account-related messages such as sign-in links, password resets and billing notifications, and when we send product emails such as tips and feature updates. See Resend's Privacy Policy.

Transfers outside the EU. Some of these providers process data in the United States, including Google (AI analysis), Lemon Squeezy and Resend. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

4. Data Security

We use HTTPS for all data in transit. Audio files are stored in a private server directory accessible only to authenticated users. Supabase row-level security ensures users can only access their own records.

5. Your Rights

Under the GDPR you have the right to:

get a copy of the personal data we hold about you (access), and receive it in a portable format;
have inaccurate data corrected;
have your account and data deleted;
restrict or object to how we use it, including objecting to analytics and product emails;
complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), or the authority where you live.

To use any of these rights, email [email protected]. We reply within one month. You can also delete individual analysis sessions, pitches and outreach contacts directly in the app.

6. Children's Privacy

You must be 16 or older to create a TuneLens account (see our Terms of Service). We do not knowingly collect data from anyone younger. If you believe a child under 16 has an account, tell us and we'll delete it.

7. Changes to This Policy

We may update this policy from time to time. We'll notify users of significant changes via the app or by email.

Questions? Contact us at [email protected].