Privacy Policy
Last updated: 2026-08-12
TaleInTune.com (hereinafter “we”, “our” or “the Service”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, store and protect your personal data when you use our Service.
1. Data controller
The controller of your personal data is Mantas Bakšys, operating under individual activity certificate No. 1134180 and providing services through the website TaleInTune.com. You can contact us:
- Address: Pilėnų g. 13, Akademija, LT-55352, Kauno r., Lithuania
- By email: info@taleintune.com
- By telephone: +370 615 79513
2. What data we collect
In providing personalised song creation services, we collect the following personal data about you:
Order form:
- Your name and email address
- Telephone number (if you have provided one)
- The recipient's name and your relationship to them
- Information about the occasion and your wishes for the song
- Additional comments and requests, and the photographs which you send us by email after ordering, where you have purchased a photo music video - we use those photographs solely to produce the video and keep them no longer than is necessary for that purpose
Payment data:
Payment data is processed by a third party - Stripe. We do not store your bank card details. You will find Stripe's privacy policy here .
Technical data:
- IP address
- Browser type and version
- Device information
- Page view and usage statistics
3. Purposes of data use
We use your personal data for the following purposes:
Provision of the service
Creating and delivering a personalised song in accordance with your order
Communication
Contacting you about the status of your order, confirmations and questions
Payments
Processing payments and financial accounting
Service improvement
Statistical analysis and improving the quality of our services
Legal requirements
Compliance with the law and defence of legal claims
If you begin an order and give us your email address so that we can deliver your song, but do not complete the order, we use your form answers and that email address to send you a few reminders about the unfinished order. Every one of those emails contains a one-click link that stops the reminders permanently. Unfinished-order data is retained for no longer than 30 days and is then deleted.
4. Legal basis
We process your personal data on the following bases:
- Performance of a contract - the data is necessary in order to fulfil your order
- Legal obligation - for tax and accounting purposes
- Legitimate interest - improving our services, ensuring security and sending reminders about unfinished orders
- Our legitimate interest - improving the website and measuring advertising results (analytics and marketing technologies)
5. Data retention
We retain your personal data for as long as is necessary in order to provide our services and to comply with our legal obligations:
- Order data is retained for 10 years (in accordance with accounting requirements)
- Communication data is retained for 3 years
- Technical data (logs) is retained for up to 12 months
Once the retention period has expired, the data is securely deleted.
6. Data transfers
In order for the service to work, we use the following processors. We transfer to each of them only as much data as is needed to perform its function:
Stripe Payments Europe / Stripe, Inc. (payments)
Ireland and the USA. Receives the email address, payment data and the order amount. We neither see nor store card details - they are processed by Stripe alone.
Supabase (database and file storage)
Order data, song lyrics and audio files. Servers in the EU region.
Google (Gemini artificial intelligence) - USA
Receives the content of the song order (the recipient's name, memories, message) in order to create the song lyrics. We do not send the email address or payment data.
Anthropic (Claude AI) and the Lovable AI gateway - USA
Backup services for lyric creation: if Gemini is unavailable, the same order content (the recipient's name, memories, message) is sent to one of them instead. We do not send the email address or payment data. That applies to song creation. The help chat runs on the same service, and everything typed into it is sent there - including an email address left in the chat.
Suno (sunoapi.org) - music generation, USA
Receives the song title, lyrics and style description in order to generate the audio recording. The email address is not transferred.
Resend (email delivery) - USA
Receives your email address and the content of the message (the link to the song, the order number).
{vendors} (analytics)
USA. Loaded when the website is opened. Collect anonymous usage statistics and aggregated session recordings. You can delete or block cookies at any time in your browser settings.
Meta Platforms (advertising pixel) - USA and Ireland
Loaded when the website is opened. Receives information about your visit and purchase (the order amount and currency), while your e-mail address, phone number and name are passed only in pseudonymised form (SHA-256 hash).
Some of these processors are located in the USA, so data is transferred outside the EEA. Such transfers are carried out on the basis of the European Commission's standard contractual clauses (SCC) and/or certification under the EU-US Data Privacy Framework. We do not sell your data.
We also report a completed purchase to Meta from our own server (Meta Conversions API), so advertising results are counted even when a browser blocks the pixel. We pass the order amount, the currency and your e-mail address converted into an irreversible SHA-256 hash - Meta does not receive the address itself.
7. Data security
We apply the following security measures to protect your data:
- SSL/TLS encryption for all data transmissions
- Encrypted database
- Access control and authentication
- Regular security audits
- Staff training on data protection
- Backup copies
8. Your rights
Under the GDPR you have the following rights:
✓ Right of access to your data
You may request that we provide all the personal data we hold about you.
✓ Right to rectification
You may request that inaccurate or incomplete data be rectified.
✓ Right to erasure (the “right to be forgotten”)
You may request the erasure of your data where there is no legal basis for retaining it.
✓ Right to restriction of processing
You may request that processing be suspended temporarily.
✓ Right to data portability
You may receive your data in a structured format and transmit it to another service provider.
✓ Right to object
You may object to processing carried out for marketing purposes or on the basis of legitimate interest.
✓ Right to manage cookies
You can delete or block analytics and marketing cookies at any time in your browser settings.
To exercise your rights, contact us by email at info@taleintune.com
9. Cookies
The website uses strictly necessary, analytics and marketing cookies and technologies to provide the service, improve the website and measure advertising results:
Strictly necessary cookies
Required for the website to function (e.g. holding order form data during your session). These cookies cannot be disabled.
Analytics cookies
{vendors} help us understand how visitors use the website and improve it. Loaded when the website is opened.
Advertising cookies
The Meta pixel helps us assess advertising results and show our ads to the people they are relevant to. Loaded when the website is opened.
You can manage or delete cookies at any time in your browser settings.
10. Data of minors
Our service is not intended for persons under 16 years of age. We do not knowingly collect the personal data of minors. If we become aware that we have received the data of a minor, we will delete it without delay.
11. Changes to the privacy policy
We may update this privacy policy. We will notify you of material changes by email or on the website. We recommend that you review this document periodically.
12. Complaints and contacts
If you have questions about this privacy policy or wish to exercise your rights:
Contact us:
- Email: info@taleintune.com
- Telephone: +37061579513
You also have the right to lodge a complaint with the State Data Protection Inspectorate:
State Data Protection Inspectorate
- Address: L. Sapiegos g. 17, 10312 Vilnius
- Email: ada@ada.lt
- Telephone: +370 5 271 2804
- Website: vdai.lrv.lt
This privacy policy has been drawn up in accordance with the requirements of the General Data Protection Regulation (GDPR) and of the Law on Legal Protection of Personal Data of the Republic of Lithuania.