Privacy Policy

Data we process

Depending on how you use Melodank, we process:

• Account data: your name, email address, profile image, session data, and account identifiers received through Google sign-in.
• Song gift content: the recipient’s name, occasion, story, chosen song language, style and voice, approved title and lyrics, plus an optional cover image and message.
• Generated media: song candidates, 60-second previews, the version you unlock, and technical information needed to create and play the audio.
• Order and support data: prices, currencies, payment status, song credits, redemptions, refund or support correspondence, and transaction records we must retain. Stripe processes card details; Melodank does not store them.
• Technical and security data: IP address, timestamps, browser and device information, requests, error codes, authentication cookies, and signals used to prevent abuse.
• Analytics data: visits to public pages and selected product-flow steps. We do not send private stories, lyrics, names, messages, images, or audio files as analytics event content.

How we use data

We use this information to provide song creation, previews, payment, redemption, private delivery, account access, customer support, security, fraud prevention, and legally required record-keeping. We also measure public traffic and approved product events so we can understand whether the service works.

Depending on the processing, the legal basis may include taking steps before entering a contract, performing a contract, complying with legal obligations, legitimate interests in operating and protecting the service, or consent where required.

Service providers and recipients

Melodank uses Google for sign-in, Supabase for the application database, Cloudflare for hosting and private media, MiniMax for lyrics and music generation, Sightengine for content safety checks, Stripe for payments, and approved analytics services for public-site measurement.

Providers receive only the information needed for their role. Some may process data outside your country or the European Economic Area. Where required, we rely on an applicable adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

We do not sell personal data. We may disclose information when required by law or when reasonably necessary to establish, exercise, or defend legal claims.

Retention

• An anonymous draft stays in the current browser for no more than 24 hours and is removed after a successful account handoff or song submission.
• A signed-in active draft expires 24 hours after its last successful save.
• Unlocked previews and song candidates expire 72 hours after successful generation.
• A redeemed song, approved lyrics, cover, and message are stored for long-term account access while the account exists. This is not a promise of permanent or unlimited storage.
• Active access ends when a finished song is deleted. Backup copies may remain for up to 30 days.
• Orders and records needed for tax, accounting, fraud prevention, or legal claims are retained for the period required by applicable law.

Information about other people

A song story may contain information about the recipient or another person. Only submit content you are allowed to use. Inform people and obtain any permission required before uploading their photo or sensitive personal information.

Cookies and analytics

Melodank uses necessary cookies for Google sign-in, session security, and requested features. Public-site analytics record route, step, source, and result labels, not private stories, lyrics, names, messages, images, or audio files.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and you may object to certain processing. You can withdraw consent for future processing where consent is the basis. You may also complain to the relevant data protection authority. We may need to verify your identity before acting on a request.

Security and private links

We use HTTPS, access controls, ownership checks, private object storage, and short-lived media URLs. Private gift pages use unpredictable links, are excluded from the sitemap, and are marked not to be indexed. Anyone who receives a valid private link can open it. No internet service can guarantee absolute security or prevent every form of copying.

Contact and updates

Use the support contact provided during Checkout or with your payment receipt for privacy requests. Do not send card numbers or other sensitive payment information by email.

We update this policy when the service or applicable requirements change. This product policy is not individual legal advice; final review for applicable German and EU requirements remains a matter for a qualified legal professional.