Privacy Policy
Last updated: [EFFECTIVE_DATE]
1. Introduction
[COMPANY_NAME] ("Melda," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website at [WEBSITE_URL] and related applications.
Please read this Privacy Policy carefully. By using our services, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you create an account, we collect your email address, name, and password (stored in hashed form).
- User Content: Content you upload, capture, or create using our services, including text, transcripts, screenshots, and metadata.
- Settings and Preferences: Your configuration choices, including theme preferences, enabled platforms, and content organization.
- Communications: Information you provide when you contact us for support or feedback.
2.2 Information Collected Automatically
- Usage Data: Information about how you use our services, including features used, search queries, and content interactions.
- Device Information: Browser type, operating system, device identifiers, and IP address.
- Log Data: Server logs that record your interactions with our services.
2.3 Information from Third Parties
When you connect third-party accounts, we may collect:
- YouTube: Video metadata, transcripts, and performance metrics (views, likes, comments) for your connected channel.
- TikTok: Video metadata and engagement metrics for your connected account.
- Instagram: Post metadata and engagement metrics for your connected account.
- RSS Feeds: Content from newsletters, blogs, and podcasts you subscribe to.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services
- Process and store your content
- Generate AI-powered content based on your inputs
- Create semantic embeddings for content search and retrieval
- Display performance metrics and analytics
- Respond to your inquiries and provide customer support
- Send service-related communications
- Detect and prevent fraud, abuse, and security issues
- Comply with legal obligations
4. AI Processing
4.1 How AI Uses Your Data
Our services use AI to enhance your content creation workflow:
- Content Generation: Your content and "Gold Standards" are used as context when generating new content through our AI features.
- Semantic Search: We create vector embeddings of your content to enable meaning-based search functionality.
- Content Analysis: AI analyzes content patterns, hooks, and structure to inform generation.
4.2 Third-Party AI Providers
We use the following third-party AI services to process your content:
- OpenAI: For content generation, embeddings, and vision-based analysis. Subject to OpenAI's Privacy Policy.
- Anthropic: For content generation. Subject to Anthropic's Privacy Policy.
4.3 Data Retention in AI Systems
Important: We do not use your content to train general-purpose AI models. Your data is processed only to serve your specific requests and is not shared with other users or used to improve AI models for others.
5. Information Sharing
5.1 We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5.2 Service Providers
We may share your information with trusted service providers who assist us in:
- Cloud hosting and infrastructure (e.g., database services)
- AI processing (OpenAI, Anthropic)
- Analytics and error tracking
- Payment processing (if applicable)
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
5.3 Legal Requirements
We may disclose your information if required by law, such as to:
- Comply with legal process or government requests
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
- Respond to an emergency involving potential harm
5.4 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
6. Third-Party Platform Data
6.1 YouTube
When you connect your YouTube account, we access data through the YouTube API Services. Your use is subject to YouTube's Terms of Service and Google's Privacy Policy.
6.2 TikTok
When you connect your TikTok account, your use is subject to TikTok's Terms of Service.
6.3 Instagram / Meta
When you connect your Instagram account, your use is subject to Meta's Terms of Service.
7. Data Retention
- Active Accounts: We retain your data for as long as your account is active.
- Deleted Content: When you delete content, it is removed from our active systems within 30 days.
- Closed Accounts: After you close your account, we delete your data within 30 days, except for data we are required to retain for legal or compliance purposes.
- Backups: Backup copies may be retained for up to 90 days for disaster recovery purposes.
8. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your personal data.
- Export: Request a copy of your data in a portable format.
- Opt-Out: Opt out of certain data processing activities.
8.1 GDPR Rights (EEA Users)
If you are in the European Economic Area, you have additional rights under GDPR, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.
8.2 CCPA Rights (California Residents)
If you are a California resident, you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (which we do not do). You also have the right not to be discriminated against for exercising these rights.
To exercise any of these rights, please contact us at [CONTACT_EMAIL].
9. Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing (bcrypt)
- Regular security assessments and updates
- Access controls and authentication requirements
- Monitoring for suspicious activity
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at [CONTACT_EMAIL].
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Email: [CONTACT_EMAIL]
Website: [WEBSITE_URL]