Loading...
Loading...
Last updated on August 7, 2025
This privacy policy complies with the EU General Data Protection Regulation (GDPR) and German data protection laws. We are committed to protecting your privacy and ensuring transparent data processing practices.
This privacy policy explains how TuneTrain.ai (“we”, “us”, or “our”), operated by SunsetPicnic UG (haftungsbeschränkt), collects, uses, and protects your personal data when you use our AI-powered language model fine-tuning service.
SunsetPicnic UG (haftungsbeschränkt)
TuneTrain.ai Platform
c/o Pawel Sawicki
Plantage 17
13597 Berlin, Germany
Email: support@tunetrain.ai
Phone: +49 176 73034496
Data Protection Contact: privacy@tunetrain.ai
We collect and process the following categories of personal data:
Account Data: Email address, username, account preferences
Payment Data: Billing information, payment method details (processed securely via Stripe)
Usage Data: Service usage patterns, feature interactions, training history, model performance metrics
Technical Data: IP address, browser type, device information, session data
Training Data: Datasets uploaded for model fine-tuning (processed according to your instructions)
Communication Data: Support requests, feedback, correspondence
Your training datasets are processed solely for the purpose of fine-tuning language models. We do not use your proprietary training data to improve our platform or train other models without your explicit consent. Training data is processed in secure, isolated environments.
We process your personal data based on the following legal grounds under GDPR:
Contract Performance (Art. 6(1)(b) GDPR): To provide our AI model fine-tuning services
Legitimate Interest (Art. 6(1)(f) GDPR): For service improvement, fraud prevention, and analytics
Consent (Art. 6(1)(a) GDPR): For marketing communications and optional features
Legal Obligation (Art. 6(1)(c) GDPR): For tax and accounting requirements
We work with trusted third-party providers who assist in delivering our services:
Stripe: Payment processing (PCI DSS compliant)
Clerk: Authentication and user management services
Cloud Infrastructure: Secure compute and storage for model training
Vercel: Hosting and content delivery
Communication Services: Transactional email delivery
All third-party processors are bound by data processing agreements (DPAs) and are required to maintain GDPR compliance standards. Data transfers outside the EU are protected by appropriate safeguards.
As a data subject under GDPR, you have the following rights:
Right of Access (Art. 15): Request information about your personal data
Right to Rectification (Art. 16): Correct inaccurate personal data
Right to Erasure (Art. 17): Request deletion of your personal data
Right to Restrict Processing (Art. 18): Limit how we process your data
Right to Data Portability (Art. 20): Receive your data in a portable format
Right to Object (Art. 21): Object to processing based on legitimate interest
Right to Withdraw Consent: Withdraw consent for consent-based processing
To exercise these rights, contact us at privacy@tunetrain.ai. We will respond within 30 days.
Account Data: Retained for the duration of your account plus 3 years for legal obligations
Training Data: Retained only during active training and for 30 days after completion, then securely deleted
Trained Models: Stored according to your subscription plan, with options for download and deletion
Payment Data: Retained for 10 years for tax and accounting purposes
Technical Logs: Retained for 12 months for security and performance monitoring
When data is deleted, we ensure secure removal from all systems, including backups, within a reasonable timeframe not exceeding 6 months.
We implement comprehensive security measures to protect your personal data:
Encryption: Data in transit and at rest is encrypted using industry-standard protocols
Access Control: Strict access controls and authentication for all systems
Isolated Processing: Training environments are isolated and secure
Regular Audits: Security assessments and vulnerability testing
Incident Response: Procedures for data breach detection and response
Staff Training: Regular data protection training for all personnel
When we transfer personal data outside the European Economic Area (EEA), we ensure adequate protection through:
European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Binding Corporate Rules where applicable
Additional safeguards as required by GDPR
Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and, where required by law, by sending you a notification. Your continued use of our service after such changes constitutes acceptance of the updated policy.
If you have any questions about this privacy policy or wish to exercise your rights, please contact us at:
SunsetPicnic UG (haftungsbeschränkt)
TuneTrain.ai Platform
c/o Pawel Sawicki
Plantage 17
13597 Berlin, Germany
Email: privacy@tunetrain.ai
Phone: +49 176 73034496
You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not complied with GDPR requirements.