Last updated:
This policy explains how Melody Gift handles personal information when you browse melodygift.app, write a song brief, place an order, sign in or contact us. It covers information about you and the people you mention in your story.
1. Information you provide
We receive your delivery email, song language, recipient details, names, pronunciation notes, story, message and musical preferences when you submit them with an order. We also keep order identifiers, price, currency, payment and delivery status, and support messages you send us. Only include personal details needed to create your song; avoid identity documents, financial details and sensitive information about yourself or others.
2. Browser drafts & submitted orders
Questionnaire progress and draft answers are saved in local storage in your browser so you can resume later. When you continue to Stripe payment, we create a server-side order containing the submitted answers and email, even if you do not finish paying. Editing a draft later does not change a previously submitted order. Clearing browser storage removes the local draft, but does not delete server-side orders or payment records.
3. Email sign-in & account information
You can order as a guest. If you sign in, we store account and session records linked to your verified email, including technical session information such as IP address and browser information where available. Login codes expire after five minutes and are stored in hashed form. Paid orders matching your verified email can be associated with your account for access across devices. Keep your email account and codes secure.
4. How & why we use information
We use information to prepare and deliver your song, process and reconcile payments, provide order history, send sign-in and service emails, handle revisions and support, prevent misuse and meet legal obligations. Where data protection law requires a legal basis, we rely on steps requested before a purchase and performance of the contract, legal obligations, and legitimate interests in operating and securing the service, balanced against your rights. Where consent is required, we request it separately; you may withdraw it for future processing.
5. Payments through Stripe
Payment details are entered on Stripe Checkout. We do not receive or store your full card number or security code. We send Stripe your email and order reference, and receive transaction identifiers, amount, currency and payment status to manage your purchase. Stripe also processes data for its own security and legal purposes under its privacy policy. Do not put card information in your song brief or support messages.
Stripe — Privacy6. Cookies, local storage & technical data
We use essential cookies to maintain sign-in sessions and to verify access to a recent checkout. Sign-in sessions last up to 30 days and may renew while you use the service; the order-access cookie lasts up to seven days. Drafts remain in local storage until overwritten or cleared. Hosting and security systems may process request logs, IP addresses and device information. The current site does not include advertising pixels or third-party analytics trackers. Stripe may use its own cookies on its checkout page. Blocking cookies or storage may prevent sign-in, payment confirmation or draft recovery.
7. Who may receive information
Information needed to fulfil an order may be accessed by the people handling production and support, and by providers of hosting, database, email and payment services. We may disclose information when legally required or necessary to protect against fraud or enforce legal rights. Your song brief is not a public post. Sharing a delivered song or link yourself may reveal names, stories or other details to its recipients, who may pass it on.
8. Retention & deletion
We retain submitted orders, song briefs, delivery records and support correspondence for as long as needed to fulfil purchases, provide revisions, maintain order history and resolve disputes. Payment and accounting records may need to be kept longer to meet legal obligations. Retention depends on the record and the reason for keeping it; there is no single automatic deletion period for all order data. Contact us to request deletion or ask about a specific record. Signing out or clearing cookies does not delete your account or orders.
9. Security & international processing
We use access controls, email verification and protected payment processing to limit unauthorized access. No online service or email transmission can be guaranteed completely secure. Providers may process information in countries other than where you live, with different data protection rules. Where applicable law requires transfer safeguards, those requirements apply to such processing. Contact us for information about the providers and safeguards relevant to your data.
10. Your choices & privacy rights
Depending on applicable law, you may request access, correction, deletion, a portable copy or restriction of processing, object to processing based on legitimate interests, or withdraw consent. Email us from the address used for your order; we may need proportionate information to verify your identity. We respond within the period required by applicable law, generally one month for GDPR requests, subject to permitted extensions. Some records must be retained for legal reasons. You may also complain to your local data protection authority.
11. Children, other people & policy updates
The ordering service is intended for adults. If your story mentions a child or another person, share only what is necessary and make sure you are entitled to provide it. Contact us if you believe a child has submitted personal data without appropriate authorization. We may update this policy when the service or legal requirements change and will revise the date above. Where required, we will provide additional notice of significant changes.
12. Questions & contact
For questions about these policies, a privacy request or help with an order, email us. Include your order number if relevant, but never send card details or sign-in codes.
hello@melodygift.app