Privacy Policy

Mello ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, how we use it, and your rights under the UK GDPR and Data Protection Act 2018. We are the data controller of your information.

Information we collect

• Account data: name, email, password (hashed), profile photo, artist/fan type.
• Payment data: handled directly by Stripe. We store transaction IDs and amounts, never your full card details.
• Content: posts, audio, images, messages, and comments you submit.
• Usage data: device, browser, IP address, pages viewed, and approximate location.
• Cookies: see our Cookie Policy.

How we use your data

• To create and manage your account.
• To process subscriptions, tips, and merch orders.
• To deliver notifications, receipts, and platform updates.
• To prevent fraud, abuse, and security incidents.
• To improve the Services and develop new features.
• To comply with legal obligations.

Legal bases

We process your data on the basis of contract (to deliver the Services you signed up for), legitimate interests (to operate, secure, and improve Mello), consent (for marketing and non-essential cookies), and legal obligation.

Sharing your data

We share data only with trusted providers needed to run Mello: Stripe (payments), Supabase (database & auth), Resend (transactional email), and Cloudflare (hosting & CDN). Artists you subscribe to or message receive your public profile and the content you share with them. We never sell your personal data.

International transfers

Some providers process data outside the UK. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.

Data retention

We keep your account data while your account is active. After deletion, we remove personal data within 30 days, except where we must retain records for legal, tax, or anti-fraud purposes (typically up to 6 years).

Your rights

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate information.
• Erasure — request deletion of your data.
• Restriction & objection — limit how we process your data.
• Portability — receive your data in a portable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any right, email hello@mellocommunity.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

We use encryption in transit, hashed passwords, row-level security on our database, and regular access reviews. No system is perfectly secure, but we take protecting your data seriously.

Children

Mello is not intended for users under 18. We do not knowingly collect personal data from anyone under 18.

Changes

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app.

Contact

Mello, 43C Navarino Road, London, England, E8 1AD, United Kingdom. hello@mellocommunity.com.