Dis policy dey explain wetin personal data Melo.Video (melo.video) dey collect, why, who e dey share am with, how long dem dey keep am and wetin rights you get. We write am so people go fit read am well, no be just skim am: every paragraph dey describe something wey di Service actually dey do.
Controller: Andrei Gudima, one person wey base for Moldova (postal address available on request). Contact for anything wey concern dis policy: [email protected].
The English version na di binding text; dis translation na for convenience.
1. Wetin We Dey Collect
| Data | Wetin e be | Where e dey come from |
|---|---|---|
| Account data | Email address, hashed password (never di password itself), interface language, di date wey you accept di Terms, whether and when dem confam your email, your role, when you last use di Service while you sign in, and — if you come from one of our own ads — di campaign, ad group, keyword and Google or Microsoft click id wey dey inside di link wey you click. Display name dey come from your email address. | You, when you sign up |
| Sign-in identities | If you sign in with Google or Facebook: di provider identifier for you and di email address wey dem hand over. We no dey receive your password, contacts or posts. | Google or Facebook, when you choose dat button |
| Your content | Audio tracks, images, video clips, text and editor settings wey you upload or create, including any description wey you type to make auto montage; subtitle text wey dem generate from your audio and your own edits to am; di videos wey you export for our servers. | You |
| Stock media searches | Di search terms wey you type inside di stock photo and video picker. | You |
| Purchase data | When you pay for export: di order reference, amount, currency, tax, status and di email address wey you use for checkout. Our payment provider dey handle card and bank details and dem never reach us. | Paddle, our payment provider |
| Support tickets | Di type, text and any screenshot or short video wey you attach when you contact us, and our replies. | You |
| Usage events | Wetin you do for di site and inside di editor: di page wey you land on, di website wey send you there (only im address, never di full link) and di source tag wey dey dat link, if e get one, and whether di visit come from browser or automated program; if you come from one of our ads, di campaign, ad group and keyword; sign-up and sign-in; uploads; which template, settings, text blocks, aspect ratio and media you change (which setting, no be im value); di preview wey dey play; di export menu, checkout and purchases; and when you open and leave di app. Never file names, text wey you type, or di content of your uploads. | Your browser and our servers, automatically |
| Technical data | IP address, browser and device type, di pages and API endpoints wey you request, timestamps, and error details. | Your browser, automatically |
| Cookies and local storage | Session cookie, sign-in (remember-me) cookie, security (CSRF) cookie and small preferences wey your browser dey store. Analytics cookies na only with your consent. See di Cookie Policy. | Your browser |
We no dey ask for and we no dey knowingly collect special categories of data (health, religion, politics and dat kain tin). Lyrics and speech for di audio wey you upload fit contain whatever you put inside; we dey process dem only so we fit build your subtitles.
2. Why We Dey Use Am, and di Legal Basis
| Purpose | Data wey dem use | Legal basis (GDPR) |
|---|---|---|
| To create and run your account, sign you in, send verification and password-reset emails | Account data, sign-in identities | Performance of contract (art. 6(1)(b)) |
| To store your uploads, show di live preview, render and deliver your videos | Your content | Contract |
| To generate subtitles from your audio | Your content (audio) | Contract |
| To search stock photos and videos for you | Stock media searches | Contract |
| To sell and deliver exports, keep di records wey tax law require | Purchase data | Contract; legal obligation (art. 6(1)(c)) |
| To measure which of our own ad campaigns dey bring sign-ups | Account data (di ad click) | Legitimate interest (art. 6(1)(f)) — di values dey read from di link wey you land on and dem keep am with your account; nothing dey store for your browser for dis and nothing dey send go Google or Microsoft |
| To understand how people dey use di editor, improve am and judge our own ad campaigns by wetin di accounts wey dem bring go on do | Usage events, account data (di ad click) | Legitimate interest (art. 6(1)(f)) — e dey store for our own servers, key to your session and your account, nothing dey store for your browser for dis and nothing dey send go anybody; you fit object (section 9) |
| To answer your support requests | Support tickets, account data | Contract; legitimate interest to keep record of wetin dem report and agree (art. 6(1)(f)) |
| To keep di Service secure: rate limiting, bot filtering, to detect and investigate abuse | Technical data | Legitimate interest (art. 6(1)(f)) |
| To find and fix errors | Technical data, error details | Legitimate interest (art. 6(1)(f)) |
| To understand how people dey use di site (analytics) | Cookies, technical data | Consent (art. 6(1)(a)) — only after you accept analytics cookies; you fit withdraw anytime for di Cookie Policy page |
| To tell you about material changes to di Terms or di Service | Account data | Legitimate interest; legal obligation |
We no dey send marketing emails. Di only emails wey we dey send na di ones wey your account or your support tickets require.
We no dey make automated decisions wey get legal or similar significant effect on you, and we no dey profile you.
3. How We Dey Process Your Content
To understand where your files dey go na di part of dis policy wey worth reading pass.
- Storage. Uploads and rendered videos dey store for private object-storage buckets for Cloudflare R2. Nobody fit reach any of am with public link: every download go pass check say di file belong to di account wey sign in, and then pass link wey go expire within two hours.
- Rendering and subtitles. When you generate video or subtitles for our servers, rendering worker for GPU server wey we rent from RunPod go download your track and di media wey e need through link wey go expire, produce di video or di transcript, upload di result go our storage and discard im working copy once di job end. Whisper (speech-recognition software) dey produce di subtitles for dat worker; we no dey send your audio go any third-party AI or transcription service.
- Lyrics proofreading. Wen dem generate lyrics automatically for a track, di lines wey dem transcribe, di track title and di language wey dem detect go go Anthropic, and im Claude model go proofread di text for transcription mistakes. We no dey send any audio give Anthropic. E no dey happen if you don already give di lyrics for di track yourself before dem transcribe am.
- Rendering for your browser. Where di Service dey offer am, video fit render fully for your own browser and save go your disk. Nothing dey upload and no copy dey exist for our side.
- Stock media. When you search stock photos and videos, e dey send your search terms go Pexels. Photo or clip wey you pick, our server go fetch am and store am inside your account like any other upload; Pexels no dey know who you be.
- Auto montage. Wen you create auto montage, e go make our server search Pexels and Pixabay for stock footage wit di theme search terms, den fetch di clips wey e use go our own storage; none of dem go know who you be. If you describe montage wit your own words, dat description go send go Anthropic, wey dia Claude model go turn am to search terms and check am against our content rules. Na only di description go send — no your name, email address or files — and dem go store am wit your montage. If e make montage, we go also keep am for your list of recent descriptions — di last ten — until you remove am.
- Magic dice. Wen you use di magic dice, wey dey design three looks for music video, di track title, numbers wey describe di audio (tempo, key and loudness curve), di lyrics if dem dey and di optional description wey you type go go Anthropic, and im Claude model go design di looks. Text description of a background picture, wey di model write and no be you, go go fal.ai (Features & Labels, Inc., United States), wey go generate di picture; den dem go send di picture wey dem generate go Anthropic Claude model make e check say e fit di layout. Photo wey you upload yourself no dey go either of di two providers.
- Preview. Di live preview dey run for your browser from di files wey dey your account.
- Nobody dey look your files. Software only dey process content. Person go access am only if you ask us (like for support ticket), to investigate report of abuse or notice of infringement, or if law demand am.
4. Who We Dey Share Data With
We no dey sell personal data and we no dey share am with advertisers. Di following providers dey process data for our behalf, under contracts wey bind dem to our instructions:
| Provider | Wetin dem dey do for us | Data wey dem touch | Location |
|---|---|---|---|
| Cloudflare, Inc. | Dey deliver di site, protect am against attacks and bots (including di Turnstile captcha for di sign-up and support forms), store uploads and rendered videos (R2) | All traffic; your content; IP address | Global network; storage for European Union and United States |
| RunPod, Inc. | Dey run di rendering and transcription worker for GPU servers | Your content, temporarily, for di duration of job | Data centres for European Union and United States |
| OVH SAS | Dey host di application server and database | All data wey section 1 talk about | European Union |
| Paddle.com Market Ltd (UK) / Paddle.com Inc. (US) | Dey sell exports as merchant of record: checkout, payment, invoices, tax | Purchase data, email address, IP address | United Kingdom, United States |
| Google LLC | Sign in with Google; e dey deliver our transactional emails through Gmail | Sign-in identity; di email address and content of mails wey we send you | United States, EU |
| Meta Platforms Ireland Ltd | Sign in with Facebook (where e dey available) | Sign-in identity | EU, United States |
| Pexels GmbH | Dey provide stock photo and video search | Search terms | Germany, United States |
| Pixabay GmbH | Dey provide stock video search | Search terms | Germany |
| Anthropic, PBC | E dey turn di montage description wey you type to search terms and e dey check am against our content rules; e dey proofread lyrics wey dem generate automatically; e dey design di looks for di magic dice and e dey check di background pictures wey dem generate | Di description wey you type; di lines of lyrics wey dem generate automatically with di track title and di language wey dem detect; for di magic dice, di track title, numbers wey describe di audio, di lyrics if dem dey, di optional description wey you type and di background picture wey dem generate | United States |
| Features & Labels, Inc. (fal.ai) | E dey generate di background picture for one magic dice look | Text description of di picture, wey our AI write, no be your own words; never your photos | United States |
| Functional Software, Inc. (Sentry) | Error monitoring for di site, di app and di rendering worker | Error details; we configure Sentry make e no attach IP addresses or personal identifiers by default | European Union and United States |
| Google (Analytics and Ads measurement) | Usage statistics and how we measure our own ad campaigns, only if you accept analytics and advertising cookies | Cookies, technical data | United States, EU |
| Microsoft Corporation (Microsoft Advertising measurement) | How we measure our own ad campaigns for Microsoft Advertising (Bing), only if you accept analytics and advertising cookies | Cookies, technical data | United States, EU |
We fit also disclose data if law demand am, to establish or defend legal claims, or to successor if di Service change hand (dem go tell you).
5. International Transfers
We dey established for Moldova, outside di European Economic Area, so for visitor wey dey EEA, once dem use di Service, e already mean say dem transfer their data come us; dat transfer dey happen under di European Commission Standard Contractual Clauses. Some of di providers wey we list above dey based outside EEA too, mostly for United States. Where dat be di case, we dey rely on di European Commission adequacy decision for di EU–US Data Privacy Framework for providers wey certify under am, and if not, on di Commission Standard Contractual Clauses, together with di providers own safeguards. You fit ask us for [email protected] for details of di safeguards wey apply to particular provider.
6. How Long We Dey Keep Data
| Data | Dem dey keep am for |
|---|---|
| Account data, sign-in identities | Till you delete your account (see section 8) |
| Uploads (tracks, images, clips), editor settings, subtitles | Until you delete dem, or your account |
| Videos wey dem render for our servers | 14 days after e finish, then dem go delete am automatically |
| Stock media search terms | Dem cache am for up to 6 hours so e no go repeat identical requests; e no dey link to you |
| Support tickets and attachments | 12 months after dem close di ticket, then dem go delete am automatically. Dem still keep am after account deletion, without your name or email address |
| Usage events of account | 12 months, then dem go delete am automatically; e go delete together with di account |
| Usage events of visit wey never sign up | 30 days, then dem go delete am automatically |
| Purchase records | For as long as tax and accounting law require am (typically 5–10 years), Paddle and us dey hold am |
| Server logs | 14 days |
| Error reports (Sentry) | 90 days |
| Error log for our own server | Every occurrence 30 days; summary of recurring error for up to 90 days after dem mark am as resolved. E dey hold di request path, browser type and, if you sign in, your account id — never your uploads, cookies or form contents |
| Preview performance reports for our own server | 90 days. Di editor dey send am only when live preview stutter for your device: which template, backdrop and effects dey di stage, di frame timings, your browser and graphics-chip type and, since you sign in, your account id — never your uploads or di content of your project |
| Database backups | 30 days, then dem go delete am automatically. Backups no contain your uploaded files or rendered videos. |
| Cookies and local storage | See di Cookie Policy |
7. Security
All traffic wey go di Service dey encrypted (HTTPS). Passwords dey store only as salted hashes. Uploads and rendered videos dey live for private buckets and dem serve am only through link wey go expire and wey check account. Access to production systems dey limited to di people wey dey operate di Service. Sign-in get rate limit per account and per IP address, and di sign-up and support forms dey use captcha to keep bots out. No system dey perfectly secure; if we hear of breach wey affect your data, we go inform you and di competent authority as law demand.
8. How to Delete Your Account
You fit delete your account anytime from di account page, after you confam your password (or your email address, for account wey no get password).
Deletion na immediate and permanent. Your projects, tracks, uploads, editor settings, subtitles, rendered videos, sign-in identities, usage events and stored files go destroy at once and nobody fit recover dem again. Wetin go remain be:
- anonymised record — di account row go remain but dem go replace your name and email address with placeholders, so di support conversations wey dey below go still get author and so di same email address fit register again;
- support tickets wey you open, including their attachments, wey we keep for our records as section 6 dey explain;
- purchase records, for as long as tax law require;
- copies for our database backups, wey dem go delete within 30 days.
9. Your Rights
Under GDPR and similar laws, you fit ask us to:
- access di personal data wey we hold about you and receive copy;
- correct data wey no correct;
- delete your data — di account page dey do dis for everything except wetin section 8 list;
- restrict or object to processing wey base on our legitimate interests;
- receive di data wey you give us for portable format — you fit download your uploads from di Service anytime;
- withdraw consent to analytics cookies anytime for di Cookie Policy page, without e affect di lawfulness of processing before you withdraw.
Write [email protected] from di email address of your account, or open support ticket inside di app. We go answer within one month. You also get right to lodge complaint with data-protection supervisory authority, especially for di EU member state wey you dey live or work; di authority for our own country na di National Centre for Personal Data Protection of di Republic of Moldova (datepersonale.md).
10. Children
Di Service no dey meant for children wey no reach 18. We no dey knowingly collect data from children; if you believe say child don create account, contact us and we go delete am.
11. Changes to Dis Policy
We go update dis policy anytime di Service change for way wey affect your data — like when new provider join. We go announce material changes by email or by notice inside di Service before dem take effect. Di date wey dey di top of dis page dey tell you when dem last update am.
12. Contact
Andrei Gudima, Moldova — postal address available on request.
Email: [email protected]