MelodyGift — Turn Memories Into Studio-Grade Personalized Music Gifts

01

Overview & Data Controller

This Privacy Policy describes how Melody Gift Ltd. ("MelodyGift", "we", "us", or "our"), a company registered under the laws of Bulgaria (European Union), collects, uses, stores, and protects your personal information when you visit or interact with our website at melody.gift and associated web applications ("Services").

For the purposes of the European Union General Data Protection Regulation (GDPR - Regulation (EU) 2016/679), Melody Gift Ltd. acts as the Data Controller responsible for processing your personal data.

Data Controller Details:
Melody Gift Ltd.
Jurisdiction: Bulgaria, European Union
Primary Email Contact: support@melody.gift

02

Information We Collect

We collect information directly from you when you submit details into our music studio wizard, register an account, or place an order:

Account Details: Email address, full name, and password credentials (encrypted).
Creative & Memory Prompts: Recipient names, occasions (birthdays, anniversaries, weddings), personal stories, inside jokes, and custom lyric notes.
Digital Media Uploads: Photos uploaded to create personalized digital slideshow gift pages.
Transaction & Payment Data: Payment processed securely via Stripe. We do not store full credit card numbers or raw bank credentials on our servers. We store payment tokens, transaction IDs, and billing status.
Analytics & Usage Telemetry: Anonymized usage data collected via Google Analytics (page views, session duration, device type, traffic channels) to evaluate platform performance.
Technical & Audio Stream Logs: IP address, browser type, operating system, referrer URL, and interaction logs for audio playback streams.

03

Legal Basis & Purposes for Processing

Under GDPR Article 6, we process your personal data under the following legal bases:

1. Performance of Contract

To compose AI lyrics, generate audio files, host private recipient gift URLs, and fulfill your $19 custom song order.

2. Explicit Consent

When you voluntarily accept analytics cookies (Google Analytics) or upload recipient photos for digital keepsakes.

3. Legitimate Interests

To maintain service security, prevent fraud, debug audio stream latency, and optimize our AI song studio experience.

4. Legal Obligation

To comply with tax, invoicing, and statutory financial recordkeeping laws in Bulgaria and the EU.

04

Your EU GDPR Data Rights

If you reside within the European Union or European Economic Area, you enjoy comprehensive rights regarding your personal data under GDPR Articles 15 to 22:

✓

Right of Access (Art. 15): You have the right to request a full copy of the personal data we hold about you.

✓

Right to Erasure / "Right to be Forgotten" (Art. 17): You can request permanent deletion of your account, story prompts, uploaded photos, and generated gift URLs.

✓

Right to Rectification (Art. 16): You may correct inaccurate personal info or update recipient names.

✓

Right to Data Portability (Art. 20): Receive your personal data and generated audio masters in a structured, machine-readable format.

✓

Right to Lodge a Complaint: You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local EU supervisory authority.

05

Third-Party Data Sharing & Processors

We never sell, rent, or trade your personal information or memories to third-party data brokers or advertisers. We share limited data strictly with trusted service providers who assist us in delivering our Services:

Partner / Provider	Purpose	Data Handled
Stripe Payments	Payment processing & fraud prevention	Billing details, email, card tokens
Google Analytics (Google LLC)	Web analytics & site performance optimization	Anonymized IP address, cookie identifier, session stats
AI Music Synthesis Engine	Composition of audio & lyrics	Anonymized story text & music tags
Cloudflare / AWS EU Storage	Encrypted hosting & audio streaming	Audio MP3s, uploaded slideshow photos

06

Data Storage, Retention & Security

All personal data is encrypted in transit using TLS 1.3 encryption and stored at rest using AES-256 standards in EU-located secure data centers.

We retain user account data and private song URLs for as long as your account remains active. Free audio preview sessions that are not converted to paid purchases are automatically purged after 30 days.

07

Cookies & Analytics Policy

MelodyGift uses cookies and browser local storage to provide a seamless studio experience. We categorize our cookies as follows:

1. Essential Cookies (Strictly Necessary)

Required for authentication, preserving temporary song preview selections, and securing checkout sessions. These cannot be disabled.

2. Analytics Cookies (Google Analytics 4)

Helps us understand how visitors interact with our turntable studio, measure page load performance, and optimize our music generation flow. Activated only with your consent.

Managing Your Cookie Consent

Your consent preference is stored locally in your browser's local storage (melodygift_cookie_consent). You can reset your cookie choices anytime:

08

Data Privacy Contact

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please reach out directly to our Data Protection team:

Melody Gift Ltd. Data Privacy Office

Email: support@melody.gift

Jurisdiction: Bulgaria, European Union