Privacy Policy

1. Who we are

Tonada OÜ ("Tonada", "we", "us", or "our") is a company registered in Estonia, registry code 16941797. We are the data controller for the personal data processed through our website (tonada.com) and related services.

Contact: privacy@tonada.com

2. What data we collect

We may collect the following categories of personal data:

• Contact information: name, email address, company name, and phone number when you fill out a form, request a demo, or contact us.
• Account data: email, name, and authentication credentials when you create a Tonada account.
• Usage data: pages visited, features used, session duration, device type, browser type, IP address, and approximate location derived from IP.
• Communication data: messages you send us via our live chat (powered by Crisp), email, or other contact channels.
• Cookies and tracking: we use Google Analytics and essential cookies to understand how visitors interact with our website.

3. How we use your data

We process your personal data for the following purposes:

• To provide and operate our services, including generating and delivering your exclusive music catalog.
• To respond to your inquiries and provide customer support.
• To send you service-related communications (e.g., account updates, security alerts).
• To improve our website, products, and user experience through analytics.
• To comply with legal obligations and enforce our terms.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

We process your data based on:

• Contract performance: to provide the services you have requested (e.g., authentication, delivering your music catalog).
• Consent: for all non-essential cookies and tracking (Google Analytics, Crisp live chat) and for marketing communications. You can withdraw consent at any time via the "Cookie settings" link in the footer.
• Legitimate interest: for limited purposes such as security, fraud prevention and responding to inquiries you send us directly.
• Legal obligation: to comply with applicable laws and regulations.

5. Third-party services

We use the following third-party services that may process your data:

• Google Analytics (Google LLC) for website analytics. Data may be transferred to the United States under Google's data processing terms.
• Crisp (Crisp IM SAS, France) for live chat support.
• Cal.com for scheduling meetings and demos.
• Vercel (Vercel Inc.) for website hosting.

Each third-party provider operates under their own privacy policy. We ensure that appropriate safeguards are in place for any international data transfers.

6. Data retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Account data is retained for the duration of your account and for a reasonable period thereafter. Analytics data is retained in aggregated form.

7. Your rights

Under the GDPR and applicable data protection laws, you have the right to:

• Access your personal data and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your personal data ("right to be forgotten").
• Restrict or object to processing of your data.
• Data portability: receive your data in a structured, machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@tonada.com. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies under the EU ePrivacy Directive and the GDPR. This policy describes the cookies used on tonada.com. Non-essential cookies (analytics and live chat) are only set after you have given consent via our cookie banner. You can change or withdraw your consent at any time from the "Cookie settings" link in the footer.

Google Analytics may transfer data to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which provides an adequate level of protection for such transfers.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "last updated" date.

11. Contact

If you have questions about this privacy policy or our data practices, contact us at:

Tonada OÜ
Email: privacy@tonada.com

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority.