Privacy notice
Last updated 18 September 2026.
Controller
Lintigo Damian Siembor, ul. Korczunkowa 4B, 05-503 Głosków, Poland, VAT ID PL1231217409, hello@finetuna.io. For personal data inside datasets you upload we act as your processor; that relationship is in section 6 of the terms.
What we store and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| E-mail address | Sign-in links, job notifications | Contract (Art. 6(1)(b)) | Until you delete the account |
| Job configuration and metrics | Running and supporting the job, refunds | Contract | Until you delete the account |
| Dataset, checkpoints, output files | Training and delivery | Contract | 14 days after delivery, then deleted |
| Invoice and payment data | Payment, tax records | Legal obligation (Art. 6(1)(c)) | 5 years after the tax year, at Stripe and in our books |
| Server logs (IP, request path, time) | Security, abuse prevention | Legitimate interest (Art. 6(1)(f)) | Up to 30 days at Cloudflare |
No analytics or advertising scripts. One cookie, the session, needed for sign-in.
Who else sees the data
- Cloudflare (Ireland/US): hosting, database, file storage with the EU jurisdiction setting, e-mail forwarding for hello@finetuna.io.
- RunPod Inc. (US): the GPU that runs your job, for the duration of the run. Secure tier: RunPod datacenters in the EU or US. On Secure, tick "Keep the GPU in the EU" to keep the GPU in the Union. Community tier: machines of individual hosts on RunPod's marketplace, which is why personal data is not allowed there.
- Stripe (Ireland/US): payments. We never see your card number.
- Resend (US): sending our e-mails to you.
- Hugging Face (US): we download the base model from there; none of your data goes to them.
Transfers to the US rely on the EU-US Data Privacy Framework where the provider is certified and on Standard Contractual Clauses otherwise.
What we do not do
We do not read your dataset beyond automated format checks, do not train any other model on it, do not sell or share it, and do not keep it past the 14 days.
Your rights
Access, correction, deletion, restriction, portability and objection (GDPR Art. 15 to 21). Write to hello@finetuna.io; we answer within 30 days and delete an account on request without questions. You can also complain to the Polish supervisory authority (UODO, uodo.gov.pl).