Privacy Policy

Version 1.0Effective September 15, 2026

This policy explains what Attune Systems, Inc. (“Attune”, “we”) collects, why, and what you can do about it. It covers our website at attune.to and our application at app.attune.to.

If you are a customer of a brand that uses Attune and you received a message from that brand, the brand is responsible for your data, and our Data Processing Addendum describes what we do on their behalf. Section 5 below explains the small amount of processing we do as a controller that may touch you.

1. Who we are

Attune Systems, Inc. is a Delaware corporation headquartered in Massachusetts. You can reach us at support@attune.to.

2. What we collect from brand users

When you create an account or use the app, we collect:

Account information: your name, work email, company name, and the role you hold in the account.
Billing information: your plan, invoices, and payment status. Card details go directly to Stripe; we keep a reference to your card along with its brand, last four digits, and expiry date.
Product and brand information you give us: product listings, guides, brand guidelines, and any documents you upload so Attune can understand your products.
Usage information: the IP address and browser of each signed-in session, and server logs, so we can run and secure the service.
Support correspondence: emails you send us.
Demo requests: if you ask for a demo on our website, the name, work email, company, website and message you enter. We use them to reply to you, and the request is emailed to us rather than stored in a database.

3. Cookies and analytics

The app uses a session cookie to keep you logged in and a CSRF token to protect forms. These are necessary for the service to work. If you choose a light or dark theme, that choice is stored in your browser.

Our website uses PostHog to understand how it is used. PostHog sets a first-party cookie so it can recognise a returning browser, and records the pages you visit, the actions you take, your browser and device type, and an approximate location derived from your IP address. It does not record your session, and we use this only to improve Attune. We do not use advertising trackers or cross-site tracking, and we do not sell data to advertisers. You can block or delete the PostHog cookie in your browser; the website works without it.

Our demo request form uses Google reCAPTCHA to tell people from automated submissions. Google receives your IP address and information about your interaction with the page, and may set cookies for this purpose. Google’s privacy policy and terms apply to that check.

Our website and app load their typeface from Fontshare, which receives your IP address when the font is requested.

4. How we use your information

To provide, secure, bill for, and support the service.
To send you transactional email about your account, such as login codes, billing notices, and changes to our terms.
To send you occasional product updates, which you can opt out of from any such email.
To understand how the service is used so we can improve it.
To comply with law and enforce our terms.

We do not sell your personal information and we do not share it with third parties for their own marketing.

5. Public reviews and community content

To understand a product, Attune reads publicly available reviews, forum posts, community discussions, and support material about that product. Some of this content was written by real people and may include a display name, a username, or details they chose to share.

For this processing Attune acts as a controller. Our purpose is to identify common points of confusion, praise, and difficulty with a product. We analyse this content in aggregate and use it to draft messaging about the product, not about any reviewer. We do not build profiles of reviewers, we do not contact them, we do not link reviews to a brand’s customer records, and we do not supply reviewer identities to brands.

Our legal basis, where one is required, is our legitimate interest in understanding how products are experienced after purchase, balanced against the low expectation of privacy attached to content published for the purpose of being read. If you wrote a public review and want it excluded from our analysis, contact us and we will do so.

6. Whether your customers’ data enters AI prompts

It does not. Attune uses large language models from Anthropic to analyse product content and draft messages. Prompts sent to those models are about products: listings, guides, brand voice, and public reviews and discussion of the product. They do not contain your customers’ names, email addresses, phone numbers, or order records. Message drafts are generated for a product and a situation, then addressed to the right customer by our own systems, or by your email or SMS provider, at send time.

The providers that run the Attune service are listed at /subprocessors, each under a contract that restricts them to acting on our instructions. We also use ordinary business tools to run the company itself, such as email, documents and spreadsheets, and payment and accounting services; those hold our own business records, including any enquiry you send us. We do not share your information with anyone for their own marketing.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to apply.

8. Where information is stored

Our systems are hosted in the United States. If you use Attune from outside the US, your information is transferred to and processed in the US.

9. How long we keep information

Account and billing information: for the life of your account and 7 years after for tax and accounting.
Product and brand information you provide: for the life of your account and 30 days after, then deleted.
Usage logs and analytics events: 90 days.
Support correspondence: 2 years.
Aggregated review analysis: for as long as the product is enrolled in Attune, then deleted with the product.

10. Security

We describe our security practices on our Security page. No system is perfectly secure, and we cannot guarantee the security of information in transit over the internet.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email support@attune.to. We will respond within 30 days, and we will not treat you differently for making a request. If you are in the EU or UK, you can also complain to your local data-protection authority.

12. Children

Attune is a business service and is not intended for anyone under 18. We do not knowingly collect information from children.

13. Changes to this policy

If we make material changes, we will email account admins and update the effective date above. The current version is always at attune.to/privacy.

14. Contact

Attune Systems, Inc.
support@attune.to