Privacy Policy

1Introduction

TuneUp LLC ("TuneUp", "we", "our", or "us") provides a platform that allows instructors to manage lesson scheduling.

By using TuneUp and connecting your Google account, you agree to this Privacy Policy.

2Information We Collect

Account Information

When you create an account, we may collect:

• Name
• Email address

Google Calendar Data

If you choose to connect your Google account, TuneUp will request access to your Google Calendar.

We access Google Calendar data solely to provide scheduling functionality:

• Create calendar events for lessons
• Update events when rescheduled
• Delete events when canceled

TuneUp only accesses the minimum data necessary to perform these actions.

Gmail (Connect Email)

Academy admins and instructors can choose to connect their Gmail account so that emails to their students are sent from their own address. If you connect, TuneUp requests permission only to send email on your behalf (the Gmail "send" permission), plus your Google account email address so we know which address is connected.

With this access, TuneUp:

• Sends the lesson and account emails you would otherwise receive from TuneUp, such as booking confirmations, reminders, cancellations, announcements, follow-ups and gift card emails, from your address
• Stores your connected email address and an encrypted access token, used only to send those emails

TuneUp never reads, searches, lists, modifies or deletes anything in your mailbox, and does not store the contents of your mailbox. Connecting is optional, and you can disconnect at any time.

3How We Use Information

• Provide scheduling functionality
  Manage and sync your lessons seamlessly
• Create & manage calendar events
  Keep your schedule organized
• Send email from your own address
  If you connect Gmail, emails to your students go out from your address
• Improve user experience
  Enhance platform features and usability
• Maintain security & reliability
  Protect your data and ensure platform stability

4Google User Data & Limited Use Compliance

TuneUp's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

• Google user data is only used to provide user-facing features
• Google user data is not used for advertising purposes
• Google user data is not sold to third parties
• Google user data is not transferred to third parties except as necessary to provide the service
• Google user data is not read by humans, except with your consent, for security purposes, or to comply with the law
• Google user data is not used to develop, improve or train AI or machine learning models

5Data Sharing

TuneUp does not sell personal information.

We may share information only:

• With service providers necessary to operate the platform
• When required by law or to protect our rights

6Data Security

We protect personal information, and Google user data in particular, with these technical and organizational measures:

• Encryption in transit. All traffic between your browser or app and TuneUp is sent over HTTPS (TLS); unencrypted connections are redirected to HTTPS.
• Encryption at rest for Google access. The access tokens that let TuneUp send email from a connected Gmail account are encrypted with AES-256 before they are stored, and are never shown in the app or sent to the browser.
• Minimum access. TuneUp asks Google only for the permissions a feature needs (for Connect Email: sending email, and your email address). We never read, store or analyze the contents of your mailbox.
• Restricted access. Only authorized TuneUp personnel who need it to run and support the service can access production systems and data, and Google user data is not read by people except with your consent, for security purposes, or to comply with the law.
• Secure payments. Card payments are processed by Stripe, a PCI DSS certified payment provider. TuneUp never receives or stores full card numbers; for a card on file we keep only the card brand, last four digits and expiry date.
• Account security. Passwords are stored only as one-way hashes (bcrypt), never in readable form.
• Revocation and deletion. You can disconnect Gmail at any time; the stored token is then deleted and revoked with Google. You can also remove TuneUp's access from your Google Account settings, and request deletion of your data (see Data Retention).
• Monitoring and incident response. We log errors and unusual activity, keep our software and servers updated, and if a security incident affects your data we will notify you and the relevant authorities as required by law.

No method of transmission or storage is completely secure, but we work to protect your information and review these measures regularly.

7Data Retention

We retain information only as long as necessary to provide our services and comply with legal obligations.

If you disconnect Gmail in TuneUp, we delete the stored access token and ask Google to revoke it. You can also remove TuneUp's access at any time from your Google Account's security settings (Third-party apps & services).

8Third-Party Services

TuneUp integrates with Google services. Your use of Google services is also subject to Google's privacy policies.

9Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be reflected by the "Effective Date" above.

10Contact Us

TuneUp LLC
matt@tuneup.golf