This policy explains what {COMPANY_LEGAL_NAME} ("MelodyBin," "we") collects, why, and what control you have. It covers account holders ("Users") and people who open shared tracks ("Listeners").
1. What we collect
From Users
- Account information: name, email, and password (stored only as a secure hash).
- Your Content: the audio files and track details you upload.
- Billing: Stripe processes payments. We get your plan, payment status, and the last 4 digits and brand of your card, but never your full card number.
- Agreement records: when you accepted the Terms, which version, which action it was for (sign up, upgrade, or upload), and your IP address at that moment.
- Usage and device data: IP address, browser, pages used, and error logs.
From people who join the waitlist
- Your email address and when you signed up. We use it only to tell you when MelodyBin launches and about early access. Every email has an unsubscribe link, and we delete your address if you unsubscribe or ask us to.
From Listeners who unlock a gated track
- The name and email you enter.
- Approximate location (city or region, estimated from your IP address).
- What you played, when, and how far you listened.
- Wrong-password attempts.
2. How we use it
To run and secure the Service, store and stream tracks, process payments, enforce plan limits, prevent abuse, send account and service emails (including deletion warnings), respond to copyright complaints and legal requests, and keep records of agreements.
3. Who sees it
- Track owners see the name, email, approximate location, and listening activity of Listeners who unlock their tracks. That's the purpose of the gate.
- Service providers that work for us under contract: Cloudflare (hosting and storage), Stripe (payments), {EMAIL_PROVIDER} (email), and {SERVER_HOST}.
- Legal: when the law requires it, or to protect rights and safety, including when we respond to DMCA notices.
- A buyer of the business: if MelodyBin is sold or merged.
We do not sell personal information, share it for targeted advertising, or use Listener emails for our own marketing.
4. How long we keep it
- Account data: while your account is open, and up to 90 days after you delete it.
- Uploaded files: until you delete them, or until the deletion schedule in the Terms after a plan ends. Backup copies may last up to {BACKUP_DAYS} more days.
- Waitlist emails: until launch plus 12 months, or until you unsubscribe.
- Listen logs: 12 months.
- Agreement records and copyright-complaint records: up to 4 years after the account closes, as evidence in case of disputes.
- Billing records: as long as tax law requires.
5. Your choices and rights
You can view and edit your account, download your files, and delete your account in Settings. You can also email {PRIVACY_EMAIL} to see, correct, or delete your personal information. Listeners can ask us to remove their listening records the same way. Depending on where you live (for example, California, the EU, or the UK), you may have further rights, such as data portability, objecting to processing, or complaining to a regulator. We'll honor those rights as the law requires.
6. Children
MelodyBin isn't meant for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, contact us and we'll delete it.
7. Security
We use encryption in transit (HTTPS), hashed passwords, access controls, and nightly backups. No system is perfect. If a breach affects your information, we'll notify you as the law requires.
8. International users
We store data in the United States and wherever Cloudflare keeps its storage. By using MelodyBin, you understand that your information may be processed outside your country.
9. Changes
If we change this policy in a meaningful way, we'll tell you by email or in the app before the change takes effect.
10. Contact
{COMPANY_LEGAL_NAME} · {MAILING_ADDRESS} · {PRIVACY_EMAIL}