Privacy Policy for Melodious AI

Effective Date: February 21, 2026

Melodious AI ("we", "us", "our") provides AI-powered music video generation at https://melodious.ai.

1. Data We Collect
- Account data: name, email, Supabase user ID.
- Billing data: Stripe customer, subscription, and invoice identifiers (we do not store full card numbers).
- Content data: uploaded audio, prompts, generated images/videos, and project metadata.
- Operational telemetry: error logs, request metadata, device/browser diagnostics.

2. Why We Process Data
- Provide and secure the product.
- Process payments and enforce plan limits/credits.
- Support users and investigate incidents.
- Improve quality, reliability, and abuse prevention.

3. Subprocessors
- Supabase: authentication, database, storage.
- Stripe: payment processing and subscription billing.
- Google AI Studio API: Gemini-powered audio understanding and lyrics extraction.
- Replicate: hosted media generation for image and video inference.
- AWS: API gateway, Lambda, AgentCore runtime, infrastructure logging/monitoring.
- Vercel: web hosting and frontend delivery.
- Crisp: customer support chat.
- Plausible + Google Tag Manager: analytics and product usage signals.
See the live subprocessor registry: https://melodious.ai/subprocessors

4. Cookies and Tracking
We request consent before loading non-essential analytics/support scripts (for example GTM, Plausible, Crisp). You can reject or accept in the cookie banner, and browser settings can also be used to block cookies.

5. Data Retention
- Account and subscription records: retained while account is active and as required for tax/accounting/legal compliance.
- Generated media/project history: retained until user deletion request, account deletion, or lifecycle policy cleanup.
- Operational logs: retained according to infrastructure log retention configuration.

6. Deletion and Access Requests
To request account/data deletion or data export, contact hello@melodious.ai from your account email with subject line:
"Data Request: Delete Account" or "Data Request: Export Data".
We will verify ownership and process requests within a reasonable timeframe.
Process page: https://melodious.ai/data-requests

7. Children's Privacy
Melodious AI is not directed to children. If we learn we collected personal data from a child, we will delete it promptly.

8. Policy Updates
We may update this policy periodically. Material changes will be posted on this page with a revised effective date.

9. Contact
Questions about privacy or data rights: hello@melodious.ai.