Privacy Notice

Last updated: June 14, 2026

Tonewell Tech is operated by Ninette Lau Velez ("we", "us"). This Privacy Notice explains what personal data we collect, why we collect it, and how we handle it. We act as the data controller for personal data collected through Tonewell Tech.

Images you edit

Tonewell Tech processes your photos locally in your browser. Images you import into the editor are not uploaded to our servers and never leave your device unless you choose to export and share them yourself.

What we collect

• Account data — email address, display name, and login credentials, used to provide your account and Pro access.
• Subscription / purchase records — plan, status, and renewal dates, used to grant Pro features.
• Support messages — anything you send us, used to respond to your inquiry.
• Usage and device telemetry — basic logs (IP address, browser, device type, pages visited, error reports), used for security, fraud prevention, and improving the Service.

Legal basis

We process this data to perform our contract with you (providing the Service), for our legitimate interests in operating and securing the Service, and to comply with legal obligations (e.g., tax records).

Who we share data with

• Paddle — our Merchant of Record, who processes payments, handles tax compliance, and issues invoices. Paddle collects billing data directly from you at checkout. See Paddle's privacy notice.
• Service providers — hosting and infrastructure providers (including our backend authentication and database provider), strictly to run the Service.
• Authorities — only where required by law.

We do not sell your personal data and we do not use it for advertising.

International transfers

Our service providers may process data outside your country. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).

Data retention

Account and subscription data is kept while your account is active and for a reasonable period afterwards (typically up to 7 years for tax-relevant records). Telemetry and logs are kept for a shorter period (typically 90 days) and then deleted or anonymized.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to processing, or to withdraw consent. EU/UK users have the right to lodge a complaint with their supervisory authority. To exercise any of these rights, contact us via tonewelltechniques.com. We aim to respond within one month.

California residents (CCPA / CPRA)

If you are a California resident, you have the right to (1) know the categories and specific pieces of personal information we collect, use, and share; (2) request deletion of your personal information; (3) correct inaccurate personal information; (4) opt out of the "sale" or "sharing" of personal information; and (5) limit the use of sensitive personal information. Tonewell Tech does not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes outside those listed under "What we collect" above. You may exercise these rights through tonewelltechniques.com. We will not discriminate against you for exercising your CCPA rights.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data against unauthorized access or disclosure.

Cookies

We use essential cookies and local storage to keep you signed in and to remember your editor preferences. We do not use advertising cookies.

Children

Tonewell Tech is not directed to children under 13. If you believe a child has provided us personal data, please contact us so we can delete it.

Contact

For privacy questions, contact us through tonewelltechniques.com.