Privacy Policy

This policy explains what personal data Tunsource collects, why, who we share it with, how long we keep it and the choices you have. It covers the website www.tunsource.com, our apps, and the accounts you connect to Tunsource. We wrote it in plain English; if anything is unclear, email support@tunsource.com.

Who we are

Tunsource is an AI marketing service run by Rundzee, LLC, 14900 Interurban Ave S Ste 271, Tukwila, WA 98168-4654, USA. Rundzee, LLC is the controller of your personal data (the company that decides how it is used).

For purchases made in the Philippines, Poseidon Distribution OPC, 3rd Floor, Perfectus Building, 93 E. Jacinto St., Davao City 8000, Philippines, sells the plan or campaign and also handles your payment and invoice information as a controller of that data.

Privacy contact for both companies: support@tunsource.com.

What we collect

• Account: your email address, your name if a sign-in provider shares it, and how you signed in (email link, Google or Apple).
• Profile: your country, which decides which company sells to you and which payment options you see.
• Brands and campaigns: the links, photos and text you enter, the public page we read at the link you give us, and the ads we generate for you.
• Studio and SEO: photos you upload, the images we make from them (product photos, posters, logos, restyles) and SEO packs. They are stored privately in your account.
• Audits and plans: the website addresses you audit, the public pages and tags we read from them, the competitor sites you choose, and the ads and social plans we make for you.
• Connected accounts: the data described in Connected accounts below, plus the posts you schedule and the campaigns you order through them.
• Managed campaigns: your order (platforms, goal, budget, target country, landing page, chosen creatives and notes), the campaign IDs, spend and results we record, and any refunds.
• AI usage records: for each AI request, the time, the kind of request, the model, its size and estimated cost, so we can enforce plan limits and control costs.
• Payments: plan, amount, currency, status and the payment provider's reference. Card, e-wallet and bank details are handled by the payment provider; we never see or store them.
• Support and reports: what you write to us, and what you tell us when you report an AI output.
• Technical: the country your connection comes from (to show the right prices before you set a country) and standard server logs (IP address, browser, time, page).

How we use it

We use your data only to provide and protect Tunsource:

• to run your account and deliver the features you use (audits, AI studio, planners, scheduled posts, campaigns and reports);
• to take payments, issue receipts and keep accounting and tax records;
• to enforce plan limits, prevent fraud and abuse, keep the service secure, and review reported AI output;
• to answer your questions and send you service messages (receipts, campaign updates, renewal reminders, important changes).

We do not sell your personal data, we do not share it for cross-context behavioural advertising, we do not show you third-party ads, and we do not use your content or data from your connected accounts to train AI models.

Legal bases (for people in the EU, UK and similar places): performing our contract with you (running the service and billing), our legitimate interests (security, fraud prevention, improving reliability), legal obligations (tax and accounting records) and your consent where we ask for it (for example, when you connect an account). You can withdraw consent at any time by disconnecting the account.

Connected accounts

You can choose to connect your own Google, Meta (Facebook and Instagram), TikTok, LinkedIn and Pinterest accounts. Connecting is optional. You sign in on the platform's own page and approve the permissions it lists; Tunsource never sees your password for those accounts. We use what we receive only to show you your accounts, check their setup, publish the posts you schedule, run and optimise the campaigns you order and pay for, and report results to you.

We act only on your instructions. We change something in a connected account only when you click a fix, schedule a post, order a campaign, or turn on autopilot for a campaign you paid for (see Terms). Campaign optimisation uses fixed rules (such as pausing an ad that costs much more per result than its siblings); data from connected accounts is not sent to AI models.

Security and encryption

Access and refresh tokens for connected accounts are encrypted at rest with AES-256-GCM, stored only on our servers, never sent to your browser, never written to logs and never shared with AI providers. All traffic uses HTTPS. Only you can see your connections and their data in Tunsource; our database enforces this per account, and staff access is limited to what is needed for support and security.

Retention

• Tokens, the list of connected pages and ad accounts, and setup findings are kept only while the account is connected.
• Posts you scheduled and campaigns you ordered (with their results) stay in your Tunsource account so you can see your history, until you delete them or your account. A paid campaign's fee and payment record is kept, no longer linked to you, for as long as tax and accounting law requires.
• Data we received from LinkedIn is deleted within 10 days after you disconnect LinkedIn or ask us to delete it, and LinkedIn ad reporting is kept for no more than 12 months.

Disconnect, revoke and delete

• In Tunsource: go to Connect and choose Disconnect. We revoke our access at the platform, delete the stored tokens, the list of connected pages and ad accounts, and the setup findings at once, and cancel posts still scheduled on that account. If a campaign is running in that ad account, we ask you to confirm and then pause it first, so nothing keeps spending without being watched.
• At the platform: you can remove Tunsource at any time using the links above. Our access stops immediately; you can then disconnect in Tunsource or email us to delete what remains.
• Facebook and Instagram: if you remove Tunsource in your Facebook settings, Meta tells us and we wipe the tokens straight away. If you ask Meta to delete your data, Meta sends the request to our data deletion endpoint, https://www.tunsource.com/api/connect/meta/data-deletion, and we delete the Facebook and Instagram connection data linked to you. You receive a confirmation code and a status page at https://www.tunsource.com/api/connect/meta/data-deletion?code=<your code>.
• By email: write to support@tunsource.com from the email on your Tunsource account and say which data you want deleted (one connected account or everything). We confirm and complete the deletion within 30 days (10 days for LinkedIn data).
• Deleting your Tunsource account (from your account page) deletes all your connections and their tokens along with the rest of your account data.

Google user data

Tunsource's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In particular, for data we receive from Google APIs (including Google sign-in, Google Ads and Google Analytics):

• we use it only to provide and improve the user-facing features described above that you can see in Tunsource;
• we transfer it to others only when needed to provide those features, to comply with the law, or as part of a merger or sale of the business with notice to you;
• we do not use it for advertising, including retargeting, personalised or interest-based ads, and we do not sell it;
• we do not use it to develop, improve or train generalised AI or machine-learning models;
• no person reads it unless you give us permission (for example in a support request), it is needed for security or abuse investigations, or the law requires it.

Meta Platform Data

We process data from Meta in line with the Meta Platform Terms and Developer Policies. We use it only for the purposes above, we do not sell, license or purchase it, we do not share it with data brokers or ad networks, we do not use it to decide anyone's eligibility for credit, housing, employment or insurance, and we do not use it to build profiles of people for anything other than running your own pages and campaigns. If Meta asks, we will show how we use it, and we delete it when you disconnect, when you ask, or when it is no longer needed.

TikTok, LinkedIn and Pinterest data

We use data from these platforms only as their developer terms allow and only for your own account: we do not sell it, combine it with other data to build profiles or lead lists, export other members' data, or use it to train AI models.

Managed campaigns: what we share with Meta and Google

When we run a managed campaign for you, we act as your agency and upload to Meta and/or Google what the ads need: the creatives you picked (images, headlines and ad text), your landing page address, your business or brand name, and the targeting (countries, places, ages, interests or keywords). We do not upload your customer lists, your email address or other personal data about you or your customers. Google may ask for your legal or trade name for its advertiser verification. Meta and Google then show the ads and process data about the people who see them under their own privacy policies.

AI processing

To write copy, make and edit images, create SEO content and check requests for safety, we send the text, links and photos you give us to Google's Gemini models on Google Cloud (Vertex AI) and, on some paid plans, to Anthropic. These providers process the data only to return a result to us and, under their business terms, do not use it to train their models. We never send passwords, payment details or connected-account tokens to AI providers. AI output can be wrong; see our AI content policy.

Cookies, analytics and browser storage

We use cookies only to keep you signed in and to protect sign-in and account-connection steps from forgery. We do not use advertising cookies, analytics trackers or tracking pixels on Tunsource. Campaigns you make without saving them, a few tool settings and a photo you pass from one tool to another are kept in your browser's storage on that device. If you install the web app, it caches only static files (scripts, styles, icons), never your pages or data.

Who processes your data for us

These companies use the data only to provide their service to us. We also disclose data if the law requires it, to protect people or our rights, or to a buyer of our business, who must keep this policy's promises.

International transfers

We are based in the United States and our main providers store data in the United States. If you are outside the US, your data is transferred there. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses offered by our providers.

How long we keep data

Your account data stays until you delete it. When you delete your account, your profile, brands, campaigns, photos, studio images, SEO packs, connected accounts, scheduled posts and usage history (campaigns, images and audits used) are removed. While a paid managed campaign is still running, the account can't be deleted until it ends or we stop and refund it. Payment and invoice records are kept, no longer linked to your account, for as long as tax and accounting law requires (generally up to 10 years). Server logs are kept for a short time for security. Connected-account data follows the retention rules above.

Your rights

You can see and edit your profile, brands and campaigns at any time, disconnect accounts on the Connect page, and delete your account from your account page or our delete-account page. You can also ask us, at support@tunsource.com, for a copy of your data, or to correct, delete or restrict it, or to object to how we use it. We answer within 30 days and may need to confirm it is you. We will not treat you differently for using these rights.

• Philippines: you have the rights of a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), including the rights to be informed, to access, to object, to erasure or blocking, to rectification, to data portability and to claim damages. You may complain to the National Privacy Commission (privacy.gov.ph).
• European Economic Area, United Kingdom and Switzerland: you have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR (and UK GDPR), and the right to complain to your local data protection authority.
• California and other US states: you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes that require a right to limit. You can use these rights yourself or through an authorised agent.

Children

Tunsource is a business tool for adults and is not meant for anyone under 18. We do not knowingly collect data from children.

Changes

We update this page when what we collect or how we use it changes. The date at the top shows the latest version, and we email you about important changes before they apply.

Contact

Rundzee, LLC, 14900 Interurban Ave S Ste 271, Tukwila, WA 98168-4654, USA · Poseidon Distribution OPC, 3rd Floor, Perfectus Building, 93 E. Jacinto St., Davao City 8000, Philippines · support@tunsource.com