Information We Collect
Account information
When you create or access an account, Melo may collect your email address, authentication identifiers, session information, login timestamps, and a name or profile image provided through Google sign-in. Melo does not receive your Google or email-account password.
Music Identity information
Melo may collect the reference song and artists you provide, broad roles, specific contributions, instruments, music-life context, city, country or region, timezone, and local or remote collaboration preference.
A completed Music Identity is public by default after you choose to save it. You can hide it from discovery later. Invitation availability is controlled separately.
AI-generated profile information
Melo sends selected Music Identity answers to the OpenAI API to organize a concise music profile. Melo stores both your explicit answers and the generated text. The generated description may be subjective or inaccurate and is not an assessment of talent, identity, or worth.
Artist search
When you type in the optional artist search, Melo sends the search text to Apple’s iTunes Search API to find names. This request does not include your account identifier or other onboarding answers. You can also add an artist name manually.
Direct messages and safety reports
Melo stores messages you send, the sender and recipient, and timestamps in Supabase. Messages are available to conversation participants, not public visitors. They are not end-to-end encrypted. Authorized operators may access them to investigate reports, provide support, or meet legal obligations. Do not send sensitive personal information. Deleting an account removes its associated messages, including the other participant’s copy.
Project information
If you create a Project, Melo may store its name, type, description, reference, requested roles and contributions, desired outcome, collaboration format, expected pace, and an optional momentum barrier.
Recommendation information
Melo may compare explicit profile and Project details to order Your Picks and produce evidence-based reasons. Numeric ranking values are internal and are not shown in public profiles or user-facing responses. Explore All is not ordered by this ranking.
Technical and usage information
Cloudflare, Supabase, and Melo may process IP address, browser and device information, approximate network location, pages viewed, product actions, authentication events, generation timing, errors, security logs, and anonymous session identifiers.
Private-test feedback
If you choose to rate your AI Music Profile or a recommendation, Melo may store your response, the related profile or recommendation version, and an optional comment. General analytics events do not contain the full AI profile or your written comment.
Email updates
If you enter your email in the Stay in the loop form, or actively select the email-updates checkbox while signing in, Melo stores your email address and the source of your consent so it can send occasional product, community, and promotional updates. Creating an account alone does not subscribe you.
How We Use Information
- Create and maintain accounts and sessions
- Generate, save, display, and publish Music Identity profiles
- Provide Explore All, filters, and evidence-based Your Picks
- Store Projects and deliver direct messages between musicians
- Measure onboarding, publishing, discovery, and Project use
- Prevent abuse, debug errors, and maintain security
- Respond to support, privacy, and legal requests
- Send product, community, and promotional emails when you have opted in
Automated Processing
OpenAI organizes selected answers into generated profile text. Melo’s recommendation logic may rank musicians using explicit identity or Project fields and create supporting reasons.
These systems do not objectively determine compatibility, safety, reliability, skill, or whether a collaboration will succeed. Review profiles, communicate directly, and use your own judgment.
Storage and Retention
Account data, saved Music Identities, public settings, generated profile text, Projects, reports, and blocks are stored in Supabase until you delete your account, deletion is otherwise requested, or the information is no longer reasonably needed.
Cloudflare D1 is limited to anonymous AI rate limiting, lightweight analytics, private-test product feedback, abuse protection, and consented newsletter subscriptions. It is not a second source of truth for Music Identity or Projects.
Backups, security records, or de-identified information may remain for a limited time after deletion.
Access, Correction, Visibility, and Deletion
You can edit your Music Identity, hide or republish it, manage blocked profiles, and permanently delete your account from your profile settings. You may stop optional product and promotional emails at any time using an unsubscribe link when available or by emailing museofmelo@gmail.com. To request access, correction, or help deleting saved data, use the same address.
Melo may verify control of the account email before completing a request.
Security
Melo uses encrypted network connections, authentication controls, server-side credentials, database access policies, rate limiting, and monitoring. No internet service can guarantee absolute security.
Age and International Use
Melo is intended for people who are at least 18 years old and does not knowingly collect personal information from children.
Melo is operated from the United States. Information may be processed in the United States or other locations where service providers operate.
Changes and Contact
Melo may update this policy as the product or law changes. Material updates will change the date shown above and may receive additional notice. Questions and requests can be sent to museofmelo@gmail.com.