Privacy policy
Mintelab runs Tuna. This page explains what personal data we handle and why. For this data we act as the controller, and for the data your devices send about your own business we act as your processor.
What we collect
- Account data: your name, email address, organization details you enter (company name, address, telephone, tax ID), a password hash, and passkeys if you add them.
- Usage and security data: sign-in times, which organization you act in, an audit log of actions in your organization, and technical logs such as IP address and browser.
- Device data: device names, hardware and software versions, status, resource figures such as CPU, memory and storage, network speed, and the settings and environment variables you choose to set. We do not read what your devices relay through their public addresses.
- Billing data: invoices and subscription state. Card details are handled by our payment provider and never reach our servers.
Why we use it
To provide and secure the service, to send you messages you need (confirmation, password reset, invitations, alerts you turn on), to bill you, to prevent abuse, and to meet legal duties. We do not sell personal data and we do not use it for advertising.
Who helps us
We use a small number of providers to run Tuna: cloud hosting and storage (Railway), email delivery (Resend) and payments (Stripe). They process data only on our instructions. Some of them are outside the European Economic Area and then rely on approved safeguards such as standard contractual clauses.
How long we keep it
Account data is kept while your organization exists. Audit and security logs are kept for a limited period. When an organization is deleted its data is removed within a reasonable time, except what we must keep for accounting or legal reasons.
Your rights
You can ask to access, correct, export or delete your personal data, to restrict or object to its use, and to complain to your data protection authority. Write to hello@mintelab.com and we will answer within one month.
Cookies
We use one essential cookie to keep you signed in and local storage in your browser for preferences such as the theme. We do not use advertising or tracking cookies.
Security
Passwords are stored as salted hashes, traffic is encrypted, releases are signed and devices verify signatures before running anything. No system is perfectly secure, so tell us at once if you notice a problem.
Changes
We will post changes here and update the date above.