Privacy Policy

1. Data Controller

The data controller responsible for this website is:

Patrick Mössner · Feldhofstrasse 2 · 8706 Meilen · Switzerland · hello@trytalumo.com

2. What data we collect

When you join the Talumo waitlist, we collect the following data:

• Your email address
• Your child's age range
• The occasion and language you selected
• Your region and purchase-intent responses
• Referral source (if you arrived via a referral link)
• Your consent timestamp

We do not collect names, birth dates, photos, addresses, or payment information. Talumo does not collect personal data directly from children — all information is provided by parents or legal guardians.

3. Legal basis

We process your data on the basis of your freely given consent (Art. 6(1)(a) GDPR / Art. 31(1) Swiss DSG), provided by ticking the checkbox in the waitlist form. You may withdraw consent at any time — see section 7.

4. How we use your data

• To notify you when Talumo launches (early access)
• To personalise song recommendations based on your responses
• To analyse aggregate market demand (anonymised)
• To count successful referrals and show you your referral progress
• To display relevant advertisements on Meta (Facebook/Instagram) — only with your explicit consent via the cookie banner

We never sell your personal data to third parties.

5. Data processors

We share your data only with the following service providers:

• Supabase Inc. (database) — EU servers (Frankfurt). supabase.com/privacy
• Resend Inc. (transactional email) — US servers, Standard Contractual Clauses. resend.com/legal/privacy-policy
• Upstash Inc. (rate limiting) — temporarily processes IP addresses to prevent abuse. US servers, Standard Contractual Clauses. upstash.com/trust
• Umami Software Inc. (analytics) — privacy-friendly, cookieless, no personal data stored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate site usage). US servers. umami.is/privacy
• Meta Platforms Ireland Ltd. (advertising & conversion tracking) — When you accept the cookie banner, the Meta Pixel sends anonymised event data (page views, sign-ups) to Meta for advertising and measurement purposes. Legal basis: Art. 6(1)(a) GDPR (consent). EU/US servers, Standard Contractual Clauses. facebook.com/privacy/policy

All processors act only on our instructions and are bound by data processing agreements.

6. Retention

We retain your data for no longer than 24 months from signup, or until you request deletion, whichever comes first.

7. Your rights

Under the GDPR and Swiss DSG you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion
• Restriction — limit processing
• Portability — receive data in machine-readable format
• Objection — object to processing
• Withdraw consent — at any time, without affecting prior processing

To exercise these rights: hello@trytalumo.com (we respond within 30 days).

8. Unsubscribe

Every email contains an unsubscribe link. You can also email hello@trytalumo.com. We stop sending emails within 48 hours.

9. Cookies & browser storage

We use the following cookies and browser storage:

talumo_ref — Referral tracking cookie. Set only if you visit via a referral link. Does not track you across other websites. Expires after 30 days.

_fbp, _fbc — Meta Pixel cookies. Set only after you accept the cookie banner. Used by Meta for ad measurement and targeting. Expire after 90 days.

NEXT_LOCALE — Remembers your language preference. Session cookie.

talumo_consent — Stores your cookie consent choice in browser local storage (not transmitted to our servers).

10. Supervisory authority

You may lodge a complaint with a data protection authority. Switzerland: EDÖB (edoeb.admin.ch). EU residents: the authority in your country of residence.

11. Contact

Privacy questions: hello@trytalumo.com