Privacy

Privacy Policy

Last updated 3 August 2026.

This policy explains what personal data we collect, why we collect it, and the rights you have over it. It covers you whether you applied to work with Adune, became a customer, or we contacted you first. We keep our data footprint deliberately small.

Who we are

The data controller is Solarum Labs AS (org. no. 938 054 835), which operates the Adune service ("Adune" is our trading name). You can reach us about anything in this policy at hi@adune.io.

What we collect and why

When you submit an application, we collect your name, email address, and the responses you provide in the form. We use this solely to evaluate your application, respond to you, and — if you're accepted — prepare your free brand audit. We don't run a CRM, build profiles, or collect anything beyond what the form asks.

Our legal basis

We process application data on the basis of Article 6(1)(b) of the GDPR — taking steps at your request prior to potentially entering into a contract. Our cookieless analytics (below) rely on our legitimate interest in understanding aggregate site usage.

Who helps us process it

We use a small number of service providers, each for one specific job, and each acting on our instructions:

• ● Tally hosts our application and onboarding forms and stores your responses (EU-based, Belgium).
• ● Plausible provides our website analytics. It is cookieless, stores no personal data, and never records your IP address (EU-based, Germany and Slovenia).
• ● Stripe handles subscription payments and holds your billing details. Our agreement is with Stripe Payments Europe Limited, in Ireland.
• ● Cloudflare hosts your private delivery gallery and your audit page, handles the email sign-in that protects them, and holds our private backup of the outreach records described below (US-based).
• ● Google and fal.ai provide the AI tools we use to produce creatives. We send them brand and product material — never your contact details (US-based).
• ● Domeneshop hosts our email, so anything you write to us sits in that mailbox (Norway).

Where your data goes. Your application and analytics data stays in the EU. Payments, file delivery and creative production involve providers based in the United States, which means some data is transferred there. Those transfers are covered by the European Commission's standard contractual clauses — the mechanism the GDPR provides for exactly this. We hold a data-processing agreement with every provider named above.

Cookies

We don't use cookies and we don't track you across sites, so there is no consent banner. Our analytics are anonymous and aggregate by design.

If we contacted you first

Sometimes we reach out to a brand before they've heard of us. If you got an email from us and never applied, this section is the one that applies to you.

• ● What we hold — your brand name, your website, and a business contact address. Where we've worked out who handles marketing at your company, that also means their name, job title and work email address. Plus our own notes on the ads you're running publicly. Nothing more.
• ● Where we got it — from publicly available sources: your own website, the ad libraries the advertising platforms publish, and public professional profiles such as LinkedIn. We didn't buy a list and we didn't get it from a data broker.
• ● Why — to tell you what we noticed about your advertising and ask whether you'd like us to look properly. That's it.
• ● Our legal basis — Article 6(1)(f), our legitimate interest in offering a relevant business service to a business we think it genuinely suits. We've weighed that against your interests and kept the data to the minimum above.
• ● We never generate anything from your material without asking. Our first email contains our own analysis only. If you'd like to see sample ads made for your brand, you tell us — we don't do it uninvited.

You can stop this at any time, and we don't get to argue. Reply with "no thanks" — or email hi@adune.io — and we'll stop contacting you and delete what we hold. Under Article 21(2) your right to object to direct marketing is absolute: there's no balancing test and we don't ask you for a reason. If we don't hear from you, we delete your record 12 months after we last got in touch.

If you become a customer

Everything above describes what happens when you apply. If you go on to subscribe, we also hold:

• ● your billing details — name, email, billing address and payment history — with Stripe. We never see or store your full card number.
• ● the brand material you send us — product images, brand assets, and your answers to the onboarding questions — which we use to produce your creatives and nothing else.
• ● the email address you sign in with to your delivery gallery, plus any feedback you leave there.

The legal basis for this is Article 6(1)(b) — we need it to provide the service you're paying for. We keep it for as long as you're a customer and for 12 months afterwards, then delete it, except where we're required to keep accounting records for longer under Norwegian law. Your rights below apply exactly the same way.

We use AI tools to produce your creatives. That means the product images and brand material you send us are processed by the AI providers named above. We never use your material to train anything, and we never share it with anyone else.

How long we keep it

We retain application data for 12 months, after which it is deleted. You can ask us to delete it sooner at any time. If you receive a free brand audit and don't go on to subscribe, we delete the audit and its files once the link expires. If we contacted you and you never replied, we delete your record 12 months after our last message — and immediately if you ask us to.

Your rights

Under the GDPR you have the right to:

• ●Access the personal data we hold about you
• ●Rectify data that is inaccurate or incomplete
• ●Erase your data ("right to be forgotten")
• ●Restrict how we process it
• ●Object to our processing
• ●Port your data to another provider

To exercise any of these, email hi@adune.io.

Complaints

If you believe we've mishandled your data, you have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).

What we don't do

We never sell your data and never share it beyond the providers named above. We don't use it to train AI models. We make no automated decisions that have a legal or similarly significant effect on you — every application is reviewed by a person.

We may update this policy as Adune grows. The "last updated" date above always reflects the current version.