Privacy Policy
Last updated: 2026-06-17
This Privacy Policy explains what personal data Melunox ("we", "us") collects, how and why we use it, who we share it with, and the choices and rights you have. It applies to the Melunox website, applications, and services.
1. Who we are
Melunox is the controller of personal data processed through the Service. For privacy questions or to exercise your rights, contact [email protected]. [Before launch, name the operating legal entity and its registered address here.]
2. Data we collect
Account data: email, password (stored only as a salted hash), display name, and the authentication provider you use.
Content data: the prompts, lyrics, uploads, settings, and generated works you create, plus collaboration metadata.
Usage and device data: log data, IP address, device and browser type, and your interactions with the Service—used for security, debugging, and aggregate product analytics.
Payment data: when you buy, our payment processor or app store handles your card details; we receive transaction metadata (plan, amount, status), not full card numbers.
Cookies and similar technologies: see Section 9.
3. How we use your data
To provide and operate the Service, including generating the content you request and enabling collaboration.
To keep the Service safe: authentication, fraud prevention, abuse and content moderation, and enforcing our Terms.
To process payments and manage subscriptions and credits; to support you and send service notices; to understand and improve how the Service is used (in aggregate); and to comply with legal obligations.
4. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you (to provide the Service); our legitimate interests (security, abuse prevention, product improvement), balanced against your rights; your consent (e.g. for non-essential cookies, where required); and compliance with legal obligations.
5. What we never do
We never use your content to train, fine-tune, or improve AI models.
We never sell your personal data.
We do not share your private content with other users unless you choose to collaborate or publish.
6. Sharing and processors
We share data only with service providers who process it on our behalf under contract, and only as needed: AI model providers (to generate the output you request), payment processors and app stores (to take payment), hosting and content-delivery providers (to run and serve the Service), and analytics and error-monitoring providers (to keep it reliable).
We also disclose data where required by law or to protect rights and safety. We do not sell your data.
7. International transfers; retention; security
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) for cross-border transfers.
We keep personal data while your account is active and as needed to provide the Service, then delete or anonymize it within a reasonable period, except where longer retention is required by law or for legitimate purposes such as security, dispute resolution, and backups.
We use technical and organizational measures—encryption in transit, hashed credentials, access controls—to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. EEA/UK residents have rights under the GDPR; California residents have rights under the CCPA/CPRA, including to know, delete, correct, and to opt out of "sale"/"sharing" (we do not sell, or share for cross-context behavioural advertising).
You can exercise most rights from your account settings or by emailing [email protected]. You also have the right to lodge a complaint with your local data-protection authority.
9. Cookies and tracking
We use strictly necessary cookies to run the Service, and—only with your consent where required—optional cookies for analytics. You can manage your choices through the consent banner and your browser settings.
10. Children
The Service is not directed to children under 13 (or the higher minimum age in your country). We do not knowingly collect data from children below that age; if you believe we have, contact [email protected] and we will delete it.
11. Changes; contact
We may update this Policy; for material changes we will provide reasonable notice. The "last updated" date above shows the current version.
Privacy questions: [email protected].