Privacy

Privacy notice

Last updated 1 October 2026

This notice explains what personal data Digitunes collects when you use our website, join our waitlist, talk to our sales team, or use our software products (Flow, Signal and Desk), what we do with it, and the choices you have. We’ve kept it in plain language. If anything is unclear, email info@digitunes.co.

1. Where Digitunes is today

Our products are in early access. Right now the only personal data we collect is what you type into the waitlist or talk-to-sales form, plus the technical data any web server needs to deliver a page. The parts of this notice about accounts, billing and product use apply once you create a Digitunes account. We’ll update this notice before we collect any new kind of data, and tell you if a change affects you.

2. Who we are

The website digitunes.co and the Digitunes products are operated by Digitunes Media, Jogeshwari West, Mumbai, Maharashtra, India (“Digitunes”, “we”, “us”).

For the personal data described in this notice, we decide why and how it is used. In legal terms we are the data fiduciary under India’s Digital Personal Data Protection Act, 2023, and the controller under the GDPR. The one exception is data our customers put into our products, explained in section 5.

3. What we collect

Information you give us

• Waitlist and sales enquiries: your email address, and if you choose, your name, company, the product you’re interested in, and the time you submitted the form.
• Account details: your name, email address, password (stored only as a one-way hash), organisation name, your role, and team members you invite.
• Billing details: billing contact, billing address, tax registration number (such as a GSTIN or VAT number), plan, invoices and payment history. Card and bank details are entered directly with our payment provider. We don’t see or store full card numbers; we may receive limited details such as the card brand, last four digits and expiry date.
• Support and communications: messages you send us, call notes, and your preferences about product and marketing emails.

Information collected automatically

• Server and security logs: IP address, browser and device type, pages and API endpoints requested, date and time, and error details. Our hosting provider also uses your IP address to deliver pages and to limit repeated form submissions.
• Product usage (once you have an account): which features you use, sign-in history, active sessions, and usage counts that we meter for billing, such as seats, workflow runs, tracked events or conversations.

Information from others

• Your organisation’s admin may add you to a team, which gives us your name and work email.
• Our payment provider tells us whether a payment succeeded, failed or was refunded.

We don’t ask for sensitive categories of data, and we ask you not to send them to us.

4. How we use it and why

Where we rely on your consent, withdrawing it is as easy as giving it: use the unsubscribe link or email info@digitunes.co. Withdrawing consent doesn’t affect anything we did before you withdrew it. We don’t sell your personal data. We don’t use it for advertising, and we don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. Data you put into our products

When a customer uses Flow, Signal or Desk, they may put personal data about their own staff, customers or users into the product — for example, the tickets in Desk or the events sent to Signal. We process that “customer content” only on the customer’s instructions and to provide the service, under our customer agreement and data processing terms. In that role we are a processor, and the customer’s own privacy notice explains how they use the data. If your data is in a Digitunes customer’s account and you want to exercise your rights, please contact that customer; we’ll help them respond.

6. Cookies

Our public website doesn’t set cookies and doesn’t load analytics, advertising or social-media trackers. Fonts and styles come from our own servers, not third parties.

When you sign in to a Digitunes account, we use strictly necessary cookies to keep you signed in, protect against forged requests, and remember security choices. They can’t be switched off without breaking sign-in. If we ever add analytics or other optional cookies, we’ll update this notice first and ask for your consent where the law requires it.

7. Who we share it with

We share personal data only with people who need it to run Digitunes, under contracts that require them to protect it and use it only for us:

• Hosting and storage: bunny.net (BunnyWay d.o.o., Slovenia, EU) runs our website, application servers, content delivery network and file storage.
• Payments: the payment provider shown at checkout processes your payment details under its own privacy notice and card-industry security standards.
• Email and support tools: providers that send our transactional emails and help us answer support requests.
• Professional advisers such as accountants, auditors and lawyers, where needed.
• Your organisation: if you use Digitunes through a company account, its owners and admins can see your account details and activity in that account.
• Authorities: when the law requires it, or to protect people’s safety or our legal rights.
• A buyer or successor: if Digitunes is merged, acquired or sells its assets, your data may transfer as part of that deal, and this notice will continue to apply to it.

Email info@digitunes.co for the current list of service providers that process personal data for us.

8. International transfers

Our providers may process data outside the country where you live, including in the European Union and India. When we transfer personal data, we do so as the law allows: for data from the EU or UK, using safeguards such as the European Commission’s Standard Contractual Clauses; for data covered by India’s DPDP Act, in line with any conditions or restrictions the Government of India sets for transfers.

9. How long we keep it

• Waitlist and enquiries: until the product you chose launches and we’ve told you, or until you ask us to delete it, whichever comes first.
• Account data: while your account is active. After an account is closed, we delete or anonymise it within 90 days, except what we must keep for the reasons below.
• Invoices and billing records: for as long as tax and accounting laws require (in India, generally at least 72 months under GST law).
• Security and server logs: for one year, then deleted, unless we need them to investigate a specific incident.
• Customer content: as the customer instructs, and deleted after their subscription ends in line with our customer agreement.

Where the law requires it, we’ll tell you before we erase data because you haven’t used your account for a long time.

10. How we protect it

We use encryption in transit (HTTPS) for all traffic, access controls so that staff and systems see only the data they need, one-way hashing for passwords, multifactor authentication for staff access to production systems, audit logs of administrative actions, and regular backups. No system is perfectly secure. If a breach affects your personal data, we’ll tell you and the relevant authorities as the law requires, including what happened, what it means for you, and what we’re doing about it.

11. Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you and how we use it, and give you a copy;
• correct, complete or update it;
• delete it, where we don’t need to keep it for a legal reason;
• withdraw your consent, or object to or restrict certain uses;
• move data you gave us to another service in a common machine-readable format;
• nominate someone to exercise your rights if you die or become incapacitated (a right under India’s DPDP Act).

Email info@digitunes.co from the address linked to your data. We may need to confirm it’s really you before acting. We’ll reply as soon as we can and within the time the law allows: one month under the GDPR, and no later than 90 days for grievances under India’s DPDP Rules. We won’t charge you, unless a request is clearly unfounded or excessive and the law allows a fee.

12. Children

Digitunes is a business service for adults. It isn’t intended for anyone under 18, and we don’t knowingly collect their personal data. If you think a child has given us personal data, email info@digitunes.co and we’ll delete it.

13. Changes to this notice

We’ll update this notice when our services or the law change, and change the date at the top. If a change materially affects how we use your data, we’ll tell you by email or in the product before it takes effect, and ask for fresh consent where the law requires it.

14. Contact and complaints

For any privacy question, request or complaint, email info@digitunes.co. You can also write to us at Digitunes Media, Jogeshwari West, Mumbai, Maharashtra, India.

If you’re not satisfied with our answer, you can complain to your data protection authority. In India, that is the Data Protection Board of India. In the EU or UK, it’s the supervisory authority in the country where you live or work, or where you think the problem happened.