Privacy Policy

Table of Contents

Introduction

At 365TUNE (a product of Metawise Consulting LLC, hereafter “365TUNE”, “Metawise”, “we”, “us”, or “our”) we are committed to protecting your privacy and to handling your personal information in a safe, responsible, and transparent manner. This Privacy Policy describes our practices regarding the collection, use, disclosure, transfer, and storage of your information when you use our services, visit our website, or otherwise interact with us.

This Privacy Policy applies to all products and services offered by 365TUNE, including our website, applications, cloud services, technical support, and professional services relating to Microsoft 365 monitoring, management, and optimization.

This Privacy Policy governs our own processing of personal information as a controller. Where we process personal data on behalf of a customer in providing the 365TUNE platform, we act as a processor, and that processing is governed by the Data Processing Agreement between us and that customer, together with the customer’s own privacy notice.

We encourage you to read this Privacy Policy carefully. By accessing or using our services, you acknowledge that you have read and understood it.

Information We Collect

The 365TUNE services are designed for businesses and are not intended for personal or household use. Accordingly, we treat all personal data covered by this Privacy Policy, including information about visitors to our sites, as information about individuals representing and acting on behalf of their employer. You are not legally required to provide us with personal data. If you do not wish to provide it, or to have it processed by us or our sub-processors, please do not provide it, do not leave information on our website, and refrain from using our services.

We process personal data that you provide voluntarily, that we collect in performing services for your organization, and that we acquire from your organization or from third parties.

Personal Information

Personal information means any information that identifies you or could reasonably be used to identify you. We may collect the following categories.

Account Information

  • Full name
  • Email address
  • Username and password
  • Job title
  • Company or organization name
  • Department
  • Profile picture, if provided
  • Account preferences and settings

Contact Information

  • Email address
  • Phone number
  • Mailing address
  • Country of residence
  • Business address

Billing Information

  • Payment card information (card type, last four digits, expiration date)
  • Billing address
  • Purchase history
  • Subscription details
  • Tax identification numbers, if applicable

Communication Information

  • Customer support inquiries and correspondence
  • Feedback and survey responses
  • Marketing preferences
  • Webinar registrations
  • Event attendance information
  • Communications with our team members

Usage Data

When you use our services, we automatically collect certain information about your interactions with our website, applications, and services.

Log Data

  • Internet Protocol (IP) address
  • Browser type and version
  • Operating system
  • Device information (type, model, unique identifiers)
  • Pages visited and features used
  • Time and date of your visit, and time spent on pages
  • Click-through patterns and referring URLs
  • Search terms used to reach our website

Application Data

  • Installation and configuration details
  • Feature usage patterns
  • Performance metrics
  • Error reports and crash analytics
  • Diagnostic information
  • Device information and system environment
  • Log files
  • User interface interactions

Cookies and Similar Technologies

We use cookies, web beacons, pixel tags, and similar technologies to collect information about your interactions with our website and services. For more information, please see our Cookie Policy.

Microsoft 365 Data

When you use 365TUNE with your Microsoft 365 environment, we may access and process the following types of data.

Tenant Configuration Data

  • Tenant settings and configurations
  • User accounts and groups
  • Permission settings
  • Site collections and site structure
  • SharePoint, Exchange Online, Microsoft Teams, and OneDrive configurations
  • Other Microsoft 365 service configurations

Microsoft 365 Usage Data

  • Usage statistics and metrics
  • User activity reports
  • Service utilization patterns
  • Resource consumption metrics
  • Performance indicators
  • Audit logs
  • Administrative actions

Content Metadata

  • File and document metadata (name, size, type, creation date)
  • User access patterns
  • Sharing settings
  • Content structure information
  • Version information

We process configuration, metadata, and activity records from your Microsoft 365 environment. We do not store the contents of your files, emails, chats, or documents, unless a specific feature that you have enabled and consented to requires it.

How We Collect Data

Direct Collection

  • Information you provide when creating an account or registering for our services
  • Information you submit through forms on our website
  • Information provided during customer support interactions
  • Information shared when participating in surveys, contests, or promotions
  • Information shared during webinars, training sessions, or events
  • Information provided when requesting marketing materials

Automated Collection

  • Through cookies and similar technologies
  • Through your use of our website and applications
  • Through server log files
  • Through analytics tools and services

Third-Party Sources

  • Business partners and resellers
  • Third-party service providers
  • Social media platforms, if you interact with us there
  • Commercial business-data providers
  • Public databases and publicly available information
  • Microsoft 365 tenant information, when authorized by you

How We Use Your Information

Providing and Managing Services

  • Creating and maintaining your account
  • Authenticating and verifying your identity
  • Providing access to our products and services
  • Processing and fulfilling orders and transactions
  • Managing subscriptions and licenses
  • Delivering requested features and functionality
  • Providing technical support and customer service
  • Responding to inquiries, requests, and feedback
  • Facilitating communication between users and our team

Improvement and Development

  • Analyzing usage patterns and trends
  • Personalizing and improving user experience
  • Developing new features, products, and services
  • Testing and debugging software
  • Conducting research and data analysis
  • Monitoring and enhancing performance and reliability
  • Diagnosing and resolving technical issues

Communication and Marketing

  • Sending administrative notifications and service updates
  • Providing information about new features and products
  • Sending newsletters and marketing communications
  • Conducting surveys and collecting feedback
  • Inviting you to events, webinars, or promotional activities
  • Measuring the effectiveness of our marketing efforts
  • Tailoring our communication to your preferences and interests

Security and Compliance

  • Protecting against unauthorized access
  • Detecting and preventing fraud, abuse, and security incidents
  • Verifying compliance with our terms of service
  • Monitoring and enforcing usage limitations and restrictions
  • Auditing user activities for security purposes
  • Complying with legal obligations
  • Establishing, exercising, or defending legal claims

Artificial Intelligence and Machine Learning

We do not use customer data to train artificial intelligence or machine learning models. This includes personal data, Microsoft 365 tenant configuration, usage and audit data, metadata, and the findings, scores, and reports our platform generates from them. We do not use this data to train, fine-tune, retrain, or otherwise develop or improve any model, whether our own or that of a third party.

Some platform features use third-party artificial intelligence services. Where they do, we contract with those providers on commercial terms that prohibit them from using transmitted data to train or improve their models, and that limit retention of that data to a short, defined period. The current provider and its retention period are listed at trust.365tune.com. These features are not enabled without your configuration or consent.

We may use aggregated and irreversibly anonymized statistics derived from operation of the platform to secure, support, and improve our services and for benchmarking. Such statistics do not identify, and cannot reasonably be used to identify, any customer, individual, or Microsoft 365 tenant, and we do not use them to train generative artificial intelligence or large language models.

Legal Basis for Processing

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, we process your personal information on one or more of the following bases.

Contract Performance

Processing is necessary to perform our contract with you, such as providing our services under our Terms of Service.

Legitimate Interests

Processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your interests or fundamental rights and freedoms. Our legitimate interests include improving and optimizing our services, ensuring the security of our systems, promoting and marketing our services, managing our business operations, and analyzing user behaviour to enhance user experience.

Consent

Processing is based on your specific consent. Where we rely on consent, you may withdraw it at any time.

Legal Obligation

Processing is necessary to comply with a legal obligation to which we are subject.

Vital Interests

Processing is necessary to protect your vital interests or those of another person.

Data Sharing and Disclosure

Service Providers

We share information with third-party vendors, consultants, and other service providers who perform services on our behalf, such as cloud hosting and infrastructure providers, payment processors, customer support services, email and communication providers, analytics providers, professional advisors, and security and monitoring services.

These service providers are authorized to use your information only as necessary to provide services to us, and are required to maintain its confidentiality and security. They are contractually prohibited from using it for their own purposes or for cross-context behavioural advertising.

A current list of the sub-processors we engage, together with their purpose and location, is published at trust.365tune.com. Customers may subscribe there to be notified of changes. We give at least thirty days notice before adding or replacing a sub-processor that processes customer data, and customers may object on reasonable data protection grounds.

Business Partners

We may share information with business partners, resellers, distributors, or other third parties involved in the distribution, promotion, or sale of our products and services. This sharing is limited to the information necessary for them to fulfill their role in our business relationship.

Corporate Transactions

If 365TUNE is involved in a merger, acquisition, reorganization, bankruptcy, receivership, sale of assets, or transition of service to another provider, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities. We may also disclose it where we believe in good faith that disclosure is necessary to comply with legal obligations, protect and defend our rights or property, prevent or investigate possible wrongdoing in connection with our services, protect the personal safety of users or the public, or protect against legal liability.

With Your Consent

We may share your information with third parties where you have given us your consent to do so.

Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you, for purposes including data analytics, research, and improving our services. We do not attempt to re-identify such information and we require recipients to observe the same restriction.

Data Security

We implement appropriate technical, organizational, and physical safeguards designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.

Technical Safeguards

  • Encryption of sensitive information in transit and at rest
  • Secure access controls and authentication mechanisms
  • Firewalls and intrusion detection systems
  • Regular security assessments and penetration testing
  • Secure development practices
  • Vulnerability management and patching
  • Monitoring for suspicious activity

Organizational Safeguards

  • Employee training on data security and privacy
  • Access controls based on the principle of least privilege
  • Confidentiality agreements with employees and contractors
  • Security policies and procedures
  • Incident response plans
  • Vendor security assessments
  • Regular security awareness programmes

Physical Safeguards

  • Secure data centres with controlled access
  • Physical access controls to our facilities
  • Environmental controls
  • Surveillance systems
  • Secure disposal of physical media

Certification

Our information security management system is certified to ISO/IEC 27001:2022. Details of our certification scope, security controls, and current compliance status are published at trust.365tune.com, where a copy of our certificate is available on request.

While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use include the following.

Service Provision

We retain your information for as long as your account is active or as needed to provide our services.

Legal Obligations

We retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Business Operations

We retain information as needed for legitimate business purposes, such as maintaining business records, analyzing trends, and improving our services.

Customer Microsoft 365 Data

When a customer relationship ends, including at the end of a trial or evaluation, we delete the customer data we hold from our production systems within thirty days, and from backup and disaster recovery systems within ninety days. We will confirm deletion in writing on request. We do not retain copies for archival or reference purposes. Where law requires us to retain specific records, we isolate them from further processing and delete them when the retention requirement expires.

When personal information is no longer needed, we securely delete or anonymize it. Where that is not immediately possible, we securely store it and isolate it from further use until deletion is possible.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information.

Access and Information

You have the right to request information about whether we process your personal information and to access that information.

Correction

You have the right to request that we correct inaccurate or incomplete personal information about you.

Deletion

You have the right to request that we delete your personal information in certain circumstances, such as where it is no longer necessary for the purposes for which it was collected.

Restriction of Processing

You have the right to request that we restrict processing in certain circumstances, such as where you contest the accuracy of the information.

Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit it to another controller.

Objection

You have an absolute right to object to the processing of your personal information for direct marketing purposes. If you object, we will stop processing your information for that purpose immediately and without exception.

You also have the right to object to processing based on our legitimate interests on grounds relating to your particular situation. In that case we will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or that the processing is required to establish, exercise, or defend legal claims.

Withdraw Consent

Where we rely on your consent, you have the right to withdraw it at any time.

Automated Decision-Making

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information infringes data protection law. If you are in the European Union, you may complain to your local data protection authority.

To exercise these rights, please contact us using the information in the “Contact Us” section below. We will respond in accordance with applicable law and may need to verify your identity before fulfilling your request.

Marketing Communications

You can opt out of receiving marketing communications from us by following the unsubscribe instructions in each marketing email, changing your communication preferences in your account settings, or contacting us directly. Even if you opt out of marketing communications, you may still receive administrative messages about your account or our services.

Business Contact Information

In business-to-business relationships, we collect and process business contact information of individuals who represent our current or prospective customers, vendors, partners, or other business contacts. This may include name, job title, business email address, business phone number, company name, and similar information.

We process this information for legitimate business purposes, including managing our business relationships, providing information about our products and services, processing orders and fulfilling contractual obligations, communicating about business matters, and marketing our products and services to businesses.

Where we obtain business contact information from a source other than you, that source is typically a commercial business-data provider, a publicly accessible professional profile or company website, a business partner or reseller, or a referral. We process this information on the basis of our legitimate interests in promoting our products to businesses, and we assess that interest against your rights before doing so.

When we first contact you, we will identify the source of your details and how to object. You may object to direct marketing at any time, and we will stop without needing to balance any competing interest. We maintain a suppression record so that an objection is honoured across all our sending domains and campaigns.

We retain prospect contact data only for as long as it remains relevant to a potential business relationship, and we review and remove stale records periodically.

International Data Transfers

365TUNE operates internationally, and your information may be transferred to, stored in, and processed in countries other than your country of residence. Those countries may have different data protection laws.

Transfer Mechanisms

Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to a country that has not received an adequacy decision, we rely on one or more of the following.

  • The Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914, together with a transfer impact assessment and any supplementary measures identified by it
  • The UK International Data Transfer Addendum to those clauses, for transfers subject to the UK GDPR
  • The Swiss adaptations of those clauses, for transfers subject to Swiss law
  • Your explicit consent, or another derogation under Article 49 GDPR, where applicable

Customer personal data is hosted in the United States. Our Data Processing Agreement, which governs processing carried out on behalf of our customers, incorporates the Standard Contractual Clauses and specifies the module that applies.

Data Protection Agreements

We implement appropriate contractual and technical safeguards with our third-party service providers and partners to ensure that your personal information is processed in accordance with applicable data protection law.

Children’s Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from individuals under 16. If we become aware that we have collected such information, we will take steps to delete it as soon as reasonably practicable. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us.

Third-Party Services and Links

Our services may contain links to third-party websites, products, or services that are not owned or controlled by 365TUNE. This Privacy Policy does not apply to those services, and we encourage you to review their privacy policies.

Integration with Microsoft 365

Our services integrate with Microsoft 365 and use Microsoft APIs and services. Your use of Microsoft 365 is governed by Microsoft’s own terms and privacy policies, which we recommend you review.

Third-Party Cookies and Tracking

Our website and services use cookies, web beacons, and similar technologies provided by analytics partners. These partners process usage data solely on our behalf and are contractually prohibited from using it for their own purposes or for cross-context behavioural advertising. For more information about these practices and your choices, please see our Cookie Policy.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.

Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, the categories of third parties with whom we share it, and the categories disclosed for a business purpose.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.

Right to Opt Out of Sale or Sharing

You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as those terms are defined by the CCPA and CPRA, and we do not engage in cross-context behavioural advertising.

Right to Non-Discrimination

You have the right not to be discriminated against for exercising your privacy rights.

Right to Limit Use of Sensitive Personal Information

You have the right to limit the use and disclosure of sensitive personal information to certain specified purposes.

Right to Correct

You have the right to request correction of inaccurate personal information.

To exercise these rights, please contact us using the information in the “Contact Us” section below. We will verify your identity before fulfilling your request.

Nevada Privacy Rights

Nevada residents have the right to opt out of the sale of their personal information. We do not sell personal information as defined by Nevada law. If you are a Nevada resident and wish to make such a request, please contact us using the information below.

Cookie Policy

Our Cookie Policy, which is incorporated into this Privacy Policy, provides detailed information about how we use cookies and similar technologies, the types of cookies we use, and your choices regarding them.

Data Protection Officer and EU Representative

We have appointed a Data Protection Officer responsible for overseeing our privacy practices and ensuring compliance with data protection law. You can contact our Data Protection Officer at dpo@365tune.com.

For individuals in the European Union, we have appointed a representative for data protection matters, who can be contacted at eu-representative@365tune.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. When we make changes, we will update the “Last updated” date at the top of this Privacy Policy and, in some cases, provide additional notice, such as a statement on our website or a notification to you. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us.

Privacy Team

Email: privacy@365tune.com

Metawise Consulting LLC

5900 Balcones Drive #8939, Austin, Texas 78731

Acknowledgment

By using our services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described in it.

Get in touch

365TUNE is now beta. Join the waitlist to experience the full potential of the platform with a free beta access. Get a six months-no-commitment subscription with full access.

Apply Now. We’ll get back to you as soon as possible.

Visit us

Come say hello at our headquarter.
5900 Balcones Drive #8939

Austin, TX, 78731

Mail us

Our friendly team is here to help.
hello@365tune.com

Stay ahead with exclusive
Microsoft 365 Insights

Join a community of professionals transforming their business.
No spam guaranteed!