Privacy notice

The data controller is Adrian J Sanchez O, with address at Yaqui 302, Vista City, 67150, Mexico. MELODING is the brand under which the site meloding.net operates.

For any privacy matter you can write to [email protected]. We read that inbox ourselves.

Your email address. We ask for it so we can tell you when your song is ready and send it to you.

A fingerprint of your IP address. We do not store your IP: we store a salted hash, an irreversible string that cannot be turned back into your address. We use it only to curb abuse and rate-limit requests.

The story you tell us in the chat, the summary generated from it, the lyrics, and your song audio file.

Your order details: what you bought, in which currency, the payment status, and the identifier returned by the payment provider.

The country and language you choose, so we can show you the right catalogue and the right text.

If you reached the site through a campaign link carrying utm tags, we store those tags so we know which channel brought you. If your link had no such tags, none of this is stored.

To create your song and deliver it. That is the main purpose, and without this data we cannot do it.

To charge for your order and to handle a question or a refund.

To prevent abuse of the service and protect our infrastructure.

To reply to you if you contact us.

We do not use your data for advertising, we do not sell it, and we do not hand it to third parties for commercial purposes.

Performance of a contract: creating and delivering the song you ordered, and charging for it.

Our legitimate interest: preventing fraud and abuse, and keeping the service running.

Compliance with legal obligations, such as tax or accounting duties tied to a purchase.

Your consent, when you give us data that is not necessary for the service.

We work with providers acting as processors. Each one receives only what it needs:

Cloudflare: signals from your browser for the anti-abuse challenge, plus the network and domain service for the site.

Supabase: the database and storage that hold your conversation, your lyrics, your song, and your order.

Mureka: the style text and the lyrics, in order to generate the audio.

Google, through Gemini: the summary of your story, in order to write the lyrics.

Stripe: the payment. Your card details go straight to Stripe and never pass through MELODING servers.

Resend: your email address, so we can send you notices and your song.

Sentry: technical error traces, so we can spot and fix failures.

The providers listed above are based outside Mexico and process data on their own infrastructure, mainly in the United States and Europe. When you use MELODING, your data is transferred to them for the sole purpose of providing the service described in this notice.

If you are in Mexico, you have ARCO rights: access to your data, rectification if it is inaccurate, cancellation, and objection to its processing. You may also withdraw your consent.

If you are in the European Union or the United Kingdom, you additionally have the right to erasure, to data portability, to restriction of processing, and to lodge a complaint with your data protection authority.

To exercise any of them, write to [email protected] telling us which right you want to exercise and the email address you used for your order. We will reply to that same address.

We keep your conversation, your lyrics, your song, and your order record for as long as your song exists in the service. There is no automatic deletion based on age.

If you want your data deleted sooner, ask us at [email protected] and we will do it. Note that deleting your song is irreversible, and that we may need to keep a minimal record of a purchase to meet tax obligations.

Your IP address is stored as a salted hash, never in the clear.

Your card details never touch our servers: Stripe processes them directly.

The site fonts are hosted on our own server, so visiting us does not make your browser request fonts from a third party.

No system is infallible. If we detect an incident affecting your data, we will tell you.

The service is not directed at minors and we do not knowingly collect data from them. If you believe a minor has given us their data, write to us and we will delete it.

If we change this notice, we will update the date in the header and publish the new version on this page. If the change is significant, we will say so clearly.