Privacy policy
How Meloa Studio (meloa.studio) processes personal data.
1. Data controller / Service provider
- Sole proprietor Overkovskyi V. A.
- Telegram: @meloa_support
- Email: hello@uplify.agency
- Website: meloa.studio
2.1. Account data
- Email address
- User identifier in the Service
- Authentication data (tokens/sessions) as technical identifiers
- Telegram identifier, if Telegram sign-in is selected
2.2. Data provided to deliver the service
- A text description of the song idea, story and wishes
- Voice recordings, temporarily for transcription; deleted after processing unless storage is enabled in settings
- Conversation excerpts pasted by the User in Song from a Conversation mode
- Generation settings: language, genre, voice, mood and structure
- Generated lyrics, brief and audio files (preview and full version)
2.3. Payment data
We do not store full bank card details. Payments are processed by WayForPay and other available payment methods. We receive only technical transaction information — status, payment identifier, amount and date/time — to account for balance top-ups and provide the service.
2.4. Technical data
- IP address, browser type, device information and event logs
- Cookies required for sign-in and secure operation
3. Sensitive data in Song from a Conversation mode
This mode is designed with additional privacy requirements because a user may paste excerpts from private conversations.
The User agrees to submit only conversations they have the right to share and is responsible for obtaining the consent of other participants.
- PII masking before model processing. Email addresses, phone numbers, bank card data and URLs are automatically masked before text is sent to an AI model.
- Raw conversation text is not stored. Only character count, detected PII counts by type, model metadata and the brief or generated lyrics remain on the server.
- Logs without raw content. Pasted conversation text is never stored in server logs.
- Private by default. Songs created from conversations are private and are not published automatically; publication requires a separate User action.
4. Purposes of processing
- Creating and maintaining an account, authentication and access security
- Delivering the service: generating the brief, lyrics, preview and full track
- Accounting for payments, purchased song packs and their use
- Technical support and communication with the User
- Preventing abuse and fraud and keeping the Service stable
- Improving the Service, diagnosing errors and technical analytics
5. Grounds for processing
We process data on the grounds of contract performance, compliance with legal requirements, legitimate interests and User consent where it is explicitly requested.
6. Sharing data with third parties
We may share data only to the extent necessary to operate the Service.
We do not sell personal data. To measure visits and conversions, the Service may share technical data and events with analytics and advertising services, including Meta, when the relevant integrations are enabled.
- Payment providers, including WayForPay
- Hosting and infrastructure providers
- Audio file storage services (S3-compatible storage)
- AI providers used for voice transcription, preparing the brief, writing lyrics and generating music through third-party suppliers
- Telegram, when Telegram sign-in or the Telegram Mini App is used
7. Storage and retention
Account data is retained while the account exists or until deletion is requested, unless there is a lawful reason for longer retention.
Transaction data may be retained for longer to meet financial and tax accounting requirements.
Previews are available for a limited time; full versions remain available while the account exists or until deletion is requested. Voice recordings are deleted after successful transcription unless storage has been enabled in settings.
8. Cookies and session security
The Service uses technical cookies for authentication and secure operation. Cookies may contain technical access tokens and use HttpOnly and Secure flags and a SameSite policy to reduce the risk of unauthorized access.
9. Data protection
- Encrypted traffic over HTTPS
- Restricted infrastructure access
- Service segmentation
- Access controls and event logs for diagnostics and security
- Deterministic masking of sensitive data before it is sent to AI models
10. User rights
- Receive information about the processing of your data
- Correct or update your data
- Request deletion of your data
- Restrict processing in cases provided by law
- Send privacy questions to hello@uplify.agency
11. Children's data
The Service is not intended for anyone under 18 years of age.
12. Policy changes
We may update this Policy from time to time. The current version is always available on the website.
13. Contacts
For privacy questions, email hello@uplify.agency or contact @meloa_support.
ContactsLast updated: 6 November 2026