Privacy Policy

1. Operator Identity

TailwagTune is a service operated by 3nLabs LLC, a Rhode Island limited liability company.

Mailing address:
3nLabs LLC
700 Narragansett Park Dr Ste 100
Pawtucket, RI 02861
Email: support@tailwagtune.com

1a. Geographic Availability

TailwagTune is directed to and intended for residents of the United States. We do not target, market, or knowingly offer the service to residents of the European Union, the European Economic Area, the United Kingdom, or other jurisdictions where the General Data Protection Regulation (GDPR) or equivalent comprehensive data protection laws apply, and the service is not designed to provide the specific rights and processes those laws require.

We reserve the right to restrict access from these regions, and we may do so without notice. Any personal information we identify as belonging to a user in these regions will be deleted upon discovery. If you are located outside the United States, please do not use TailwagTune.

2. Information We Collect

We collect the following categories of personal information:

When You Create an Account: Full name, email address, city, state, and type of pet. We collect the same details however you sign up — with an email address and password, or with Google or Facebook.

Age Verification: Before your account can be used, we ask for your date of birth in a separate age-screening step. We store the date of birth and whether the account passed the screening.

From a Third-Party Sign-In Provider: If you sign in with Google or Facebook, we receive a limited set of profile information from that provider instead of a password. See Section 4a.

During Song Creation: Owner's name, pet name, pet type, breed, appearance description, personality description, favorite activities, quirks, music genre preference, mood preference, extra notes, and an optional pet photo.

Automatically Collected: IP address, browser type and version, device information, and other persistent identifiers collected through standard web server logs.

Payment Information: If you purchase credits, payment information (credit card number, billing address) is collected and processed by our payment processor, Stripe. TailwagTune does not store your payment card details on our servers.

Card Authorization Confirmation: If our records show you are under 18, we ask before checkout whether a parent or guardian has authorized the use of their payment card. We store your answer and the date and time you gave it, so there is a record of what was asked and what was confirmed. We store the answer only — not the identity of the adult, and no card details.

Cookies & Tracking: We use first-party cookies that are necessary to operate the service — for example, keeping you signed in. If you reach us by clicking one of our advertisements, we also store a first-party cookie for 7 days recording which advertisement it was, so that a later sign-up can be credited to the right campaign. We do not place advertising or analytics scripts from other companies on our site, so no advertising platform observes your browsing here.

Advertising & Measurement: We advertise TailwagTune on third-party platforms — Meta (Facebook and Instagram), TikTok, and Google (including YouTube). To measure whether those advertisements work, our own server reports a small number of named events to the platform you arrived from — for example that an account was created, or that a purchase was completed.

Each report contains only: the name of the event, a one-time event identifier, the time, the amount paid where relevant, the advertising click identifier from the cookie described above, and your email address in a scrambled (hashed) form that the platform can match but cannot read back. Reports go only to the platform whose advertisement you actually clicked — if you found us some other way, nothing is sent to anyone. Those platforms use this to measure how our advertising performs and to attribute sign-ups to a campaign. Under California law this is treated as “sharing” personal information for cross-context behavioral advertising — Section 8a explains how to opt out.

Your browser’s user-agent string also goes to Meta and TikTok — the standard description of your browser and operating system that your browser sends to every website it visits — because those platforms discard or poorly match advertising reports that arrive without it. One further item goes to Meta only: the address of the page the event relates to, such as our credits page for a purchase. That page address is worked out from which event happened, not from watching where you go on our site; a completed sign-up always reports our sign-up page, whatever you did before or after it.

What we never send to advertising platforms: your pet’s details, your song lyrics, your generated audio, your uploaded photos, your date of birth, your name, your address, your IP address, or any record of your browsing. Nothing at all is reported for accounts we know belong to users under 18.

Analytics & Fraud Prevention: We use Cloudflare Web Analytics to measure page performance and aggregate traffic. It is cookieless, does not fingerprint visitors, and does not track you across other websites. On pages where you can purchase credits, we load Stripe’s payment library, which collects device and browsing signals used solely for payment fraud prevention, as described in Stripe’s own privacy policy. Neither of these is used for advertising.

3. How We Use Your Information

Song Generation: We use your pet details, music preferences, and optional photo to generate personalized AI-crafted lyrics and music for your pet.

Account Management: We use your name and email address to manage your account, send email verification, and communicate important service updates.

Communications: When you finish setting up your account we send you one welcome email. It links back to the site and to our social media profiles, and it carries small icon images loaded from our own website, so opening it tells our content delivery network your IP address and the time, in the same way that visiting any page here does. You can opt out of emails like it from the Settings page or from the unsubscribe link in the email itself. Opting out never stops the emails your account depends on: verification codes, password resets, and the notice that your song is ready always go out.

Service Improvement: We use anonymized, aggregated data about song creation patterns (genre preferences, song completion rates) to improve our AI models and service quality. This aggregated data cannot be used to identify individual users.

Security & Compliance: We use IP addresses and rate-limiting data to prevent abuse, detect unauthorized access, and comply with legal obligations.

4. Third-Party Data Sharing

With your separate, opt-in consent, we may share your name, email address, and pet type with other 3nLabs LLC projects for marketing and promotional purposes.We never sell your personal information for money, and we never share it with data brokers. The only information shared with advertising platforms is what is described in Section 2, under Advertising & Measurement.

This data sharing is optional. You may decline at registration and you may opt in or opt out at any time from the Settings page in your account, or by contacting support@tailwagtune.com. Opting out does not affect your ability to use TailwagTune.

Accounts belonging to users under 18 are excluded from marketing data sharing entirely. If our records show you are under 18, the consent option is unavailable to you — it cannot be enabled at registration, during account setup, or from the Settings page, and any consent recorded before your date of birth was known is cleared once we know it. Your information is never shared for marketing purposes while you are under 18. Opting out remains available to everyone at any age; only opting in is restricted.

We also share data with the following service providers who process data on our behalf:

• Amazon Web Services — Cloud
• Cloudflare — Hosting & network security
• CometAPI — AI
• Anthropic — AI
• Amazon Rekognition — AI
• Stripe — Payment
• Resend — Email delivery

These providers process data solely to deliver our service and are contractually bound to protect your information.

Business transfers: In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of substantially all of 3nLabs LLC's assets, your information may be transferred to the acquiring entity, subject to standard confidentiality protections and any applicable law. Users who have opted out of data sharing are excluded from this transfer.

4a. Third-Party Sign-In (Google and Facebook)

You can create your account and sign in using Google or Facebook instead of an email address and password. This is optional — you may always register with an email address and password instead. When you use one of these options, the provider authenticates you and sends us a limited set of profile information. The exchange is encrypted and we never receive your Google or Facebook password.

What we receive and store:

• Facebook Login: we request only the email and public_profile permissions. From these we receive and store your email address, your first and last name, and your Facebook user ID. We do not request or receive your friends list, your posts, your photos, your likes, or any other Facebook content.
• Google Sign-In: we request only basic sign-in scopes. From these we receive and store your email address, your name, and your Google account identifier.

What we use it for. Information received from Google or Facebook is used to create your TailwagTune account, to sign you in, and to contact you about your account and the songs you create. It is never sold or licensed to anyone. The only other use is the optional marketing data sharing described in Section 4 — which happens solely if you separately and affirmatively opt in, is off unless you choose it, and can be switched off again at any time from the Settings page.

What advertising reports contain from your sign-in. The conversion reports described in Section 2 include your email address in a scrambled (hashed) form, and that is the only detail from your account they contain. If you signed in with Google or Facebook, that is the email address they gave us. Your name, your Google or Facebook account identifier, and everything else about your account are never included, and signing in with Facebook does not give any advertising platform access to your TailwagTune activity.

What we never do. We do not post to your Facebook or Google account, we do not read your timeline or contacts, and we do not access anything beyond the permissions listed above. We do not ask for additional permissions later.

How to disconnect and delete. You can revoke TailwagTune's access at any time — from Settings → Apps and Websites in your Facebook account, or from your Google account's third-party access settings. Revoking access in Facebook and requesting deletion sends us an automated, cryptographically signed deletion request through Facebook's Data Deletion Request Callback, which starts the same deletion process described in Section 6a and completes within 30 days. You can also delete your account yourself at any time from Settings → Delete Account, or email support@tailwagtune.com.

TailwagTune is not affiliated with, endorsed by, or sponsored by Meta Platforms, Inc. or Google LLC. Your use of those services remains governed by their own terms and privacy policies.

5. Children's Privacy (COPPA Compliance)

TailwagTune is not directed to children under 13. Our service is designed for pet owners of all ages, but account creation and operation requires users to be 13 years of age or older.

Age Verification: After you sign in for the first time, and before your account can be used, we ask for your date of birth in a separate, neutral age-screening step. Users who indicate they are under 13 are blocked from the service and their account is closed. Any information collected while signing up is deleted, and only an anonymized record of that deletion is kept, as described in Section 6.

Parental Use: Children under 13 may enjoy TailwagTune only when a parent or guardian creates and operates the account on their behalf. In this case, the parent or guardian is the account holder, and all personal information collected belongs to the parent or guardian.

Parental Rights: If you are a parent or guardian and believe your child under 13 may have provided personal information to TailwagTune without your knowledge, please contact us immediately at support@tailwagtune.com. We will promptly review the account and delete any personal information collected from the child.

Discovery & Deletion: If we discover that personal information has been collected from a child under 13 without verifiable parental consent, the account's data is deleted, and the account suspended.

Users Aged 13 to 17: Users between 13 and 17 may create an account and make their first song at no charge. They may purchase credits only while accompanied by a parent or legal guardian who is 18 or older, and only with that adult's authorization to use their payment card. Before checkout we ask the user to confirm that authorization and we record the answer, as described in Section 2. Payment cards must belong to a person 18 or older.

No Marketing Data Sharing Under 18: Users under 18 are excluded from the optional marketing data sharing described in Section 4. The consent option is unavailable on their accounts at every point — registration, account setup, and Settings — and any consent recorded before we knew the user's date of birth is cleared as soon as it is verified. We hold only what we need to operate the service and create their songs.

6. Data Retention Policy

We retain personal information only as long as necessary for the purposes described in this policy:

Active Accounts: Account data (name, email, DOB, city, state, pet type, and the IP address you signed up from) is retained for the life of the account.

Legal Process & Subpoena Compliance: Records associated with authenticated accounts are retained while the account remains active so that we can respond to lawful subpoenas, court orders, and similar legal process. Opting out of data sharing changes how your data may be used for marketing or transferred in a business sale, but does not delete your account. Only full account deletion (Section 6a) purges your records from our active systems.

Songs & Audio: Song records, generated lyrics, and audio files are retained for the life of the account.

After Account Deletion: Upon account deletion, all personal data - including account information, song records, audio files, and uploaded photos - is purged within 30 days.

Photo Uploads: Uploaded pet photos are retained for the life of the account and purged within 30 days of account deletion.

Rate Limiting Records: IP-based rate limiting records are automatically deleted after their time window expires (typically within 24 hours).

Advertising Attribution Cookie: If you arrive from one of our advertisements, the first-party cookie described in Section 2 expires on its own after 7 days. If you create an account in that time, the advertisement identifier is stored on your account record and is retained for the life of the account, so a later purchase can be credited to the right campaign. If you opt out of advertising sharing (Section 8a), that identifier is deleted immediately and is not recoverable, even if you later opt back in.

Underage Account Data: Personal information from users discovered to be under 13 is deleted immediately upon discovery. Only an anonymized record of the deletion action is retained for compliance audit purposes.

6a. Account Deletion

You can permanently delete your TailwagTune account at any time, directly from the app: sign in, open Settings, and select Delete Account. You will be asked to type the word DELETE to confirm; email/password users must also re-enter their password. Federated (Google, Facebook) accounts skip the password step but still require the typed confirmation.

What happens after you confirm: your account is immediately scheduled for deletion. Your name, email address, mailing details, date of birth, and registration IP are scrubbed from our active records right away. All remaining personal data — including song records, generated lyrics, audio files, and any uploaded pet photos — is purged within 30 days by an automated cleanup job. After purge, no personal information about you remains in our systems.

Facebook users: if you instead revoke TailwagTune's access from Facebook's app settings, Meta sends us an automated deletion request via Facebook's Deletion Endpoint. That triggers the same 30-day deletion process described above.

Additional requests, exports, or questions: for anything you can't do yourself from the Settings page (for example, requesting a copy of your data before deletion, or asking about the status of an in-progress deletion), email support@tailwagtune.com. We respond to verified requests within 30 days.

7. Data Security

We implement the following security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
• Data stored in our databases and file storage is encrypted at rest (AES-256)
• Authentication tokens are validated cryptographically on every API request
• All user-submitted text input passes through a multi-layer sanitization pipeline to prevent injection attacks
• Photo uploads are validated for file type integrity and stripped of EXIF metadata
• Access to production systems is restricted to authorized personnel
• IP-based rate limiting protects against automated abuse

No system is 100% secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

8. Your Rights

You have the following rights regarding your personal information:

• Access: ask us for a copy of the personal information we hold about you. Your name, email address, pet type, sign-up date and sign-in method are visible any time on the Settings page; your songs and their lyrics are on the My Songs page. For anything beyond that, email us and we will send you what we hold.
• Correct: update inaccurate information. You can change your email and password directly from the Settings page; for other fields, contact us.
• Delete: permanently delete your account and all associated personal information from Settings → Delete Account. Deletion is processed within 30 days. See Section 6a for full details.
• Opt out of marketing data sharing: toggle data sharing on or off at any time from the Settings page (users under 18 cannot opt in at all — see Section 4 — but may opt out at any time). Opting out takes effect immediately and never affects your ability to use TailwagTune.
• Opt out of marketing email: turn marketing email off from the Settings page, or use the unsubscribe link in any marketing message we send. This never stops the emails your account depends on — verification codes, password resets, and the notice that your song is ready are not marketing and always go out.
• Request a copy of your data: email us and we will send you the personal information we hold about you.

To exercise any right that is not directly available in the Settings page, contact us at support@tailwagtune.com. We will respond to verified requests within 30 days.

8a. California Residents

California residents have specific rights under the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act (CCPA, where applicable), and California's "Shine the Light" law (Cal. Civ. Code §1798.83):

• Do Not Sell or Share My Personal Information: TailwagTune does not sell your personal information for money. We do, however, share personal information for cross-context behavioral advertising when the conversion reports described in Section 2 are active, which California treats as “sharing” whether or not we are paid. To opt out, use the Do Not Sell or Share My Personal Information link in the footer of every page — no account is needed and it takes effect immediately. You can also send a Global Privacy Control signal from your browser, which we treat as a valid opt-out request, or email support@tailwagtune.com with the subject line “Do Not Share”. Opting out also deletes our record of which advertisement brought you here. Note that the Data Sharing toggle on the Settings page controls something different: the sharing with other 3nLabs projects described in Section 4. It does not switch off advertising conversion reports.
• Consumers under 18: the CCPA requires affirmative opt-in before selling or sharing the personal information of consumers under 16. TailwagTune goes further: we do not share the personal information of any user under 18 for marketing purposes. The consent option described in Section 4 is unavailable on those accounts, and no conversion report is ever sent for an account we know belongs to a user under 18 — our server checks the verified date of birth before sending anything, and refuses if the age is unknown or unreadable. No opt-in is possible, so none is solicited.
• Shine the Light requests: once per calendar year, California residents may request a list of the categories of personal information we shared with third parties for direct marketing purposes during the prior calendar year, and the names and addresses of those third parties. To make a Shine the Light request, email support@tailwagtune.com with the subject line "Shine the Light Request".
• Do Not Track and Global Privacy Control: your browser may send a “Do Not Track” (DNT) signal. There is no industry-standard method for honoring DNT and TailwagTune does not respond to it. We do honor the Global Privacy Control (GPC) signal, which we treat as a request to opt out of sharing your personal information for cross-context behavioral advertising.

9. Photo Upload Screening

Uploaded photos are screened by an automated content-safety service before they can be used to generate a song. The screening checks for human faces and disallowed content, to keep TailwagTune focused on pets and to prevent prohibited material from being processed.

No biometric data, facial-recognition templates, or face embeddings are stored.

If a photo does not pass screening, it is deleted from our storage and you will be asked to upload a different photo before continuing. You will see a short explanation of why the photo was rejected (for example, that a person was detected, or that the image contained disallowed content).

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (sent to the address associated with your account) and by posting a prominent notice on our website at least 30 days before the changes take effect.

Your continued use of TailwagTune after the effective date of any changes constitutes your acceptance of the updated policy.