Privacy Policy

1. Who We Are

HipTech OÜ is the controller of the personal data described in this Privacy Policy, unless otherwise stated.

HipTech OÜ · Reg. 16671417 · VAT EE102661826 · Kadaka 72a, 12618 Tallinn, Estonia · hello@melodaki.com

2. Personal Data We Collect

The personal data we collect depends on how you use the Service.

Information you provide may include:

• your name;
• email address;
• information about the recipient of your order;
• messages, stories, greetings or other text you submit;
• photographs or other files you upload;
• musical preferences or creative instructions;
• any information you provide when contacting customer support.

Order information — when you place an order, we collect information necessary to process and deliver it, including: the selected package; order status; transaction identifiers; delivery information.

Payment information — payments are processed by independent payment service providers. We do not store your complete payment card details. We may receive limited payment-related information, such as payment status, transaction identifiers or the last digits of a payment card where necessary to process your order or respond to support requests.

Technical information — when you use the Service, we automatically receive certain technical information, including: IP address; browser type; device information; operating system; language settings; timestamps; log information necessary for security and operation of the Service. We also use cookies and similar technologies as described in our Cookie Policy.

Data about other people (your recipient). Your order is usually a gift, so you may provide personal data about another person — typically the recipient's name and details, and sometimes a photo. By providing it, you confirm you have a proper basis to do so. We process this information only as necessary to fulfil the order placed and, where applicable, on the legal bases described in Section 3. A recipient photo is stored privately (accessible only through expiring signed links) and is deleted when the order data is purged. If you are a recipient and wish to access or delete data about you, please contact us at hello@melodaki.com.

3. Why We Use Your Data

We process personal data only where we have an appropriate legal basis under applicable data protection law.

We do not use your personal data for purposes that are incompatible with those described above.

4. AI and Your Content

The information you provide is used to create the personalised digital content you request through the Service.

Your text, photographs, creative instructions and other submitted materials are processed only to the extent reasonably necessary to generate, deliver and support your order.

We do not ourselves use Your Content to train or develop our own general-purpose artificial intelligence models.

To create your order we rely on third-party providers of artificial intelligence and related technologies — for example to generate music, lyrics or artwork. These providers process the input we send them under their own terms, which may permit them to use submitted input to operate, secure and improve their own services. We send these providers only the information needed to create your order and minimise the personal data included where reasonably practicable.

We do not acquire ownership of Your Content. Its use is governed by our Terms of Use.

5. Sharing Your Data

We do not sell your personal data.

We share personal data only where necessary to operate the Service, comply with legal obligations or protect our legal rights. Depending on how you use the Service, we may share personal data with:

• payment service providers;
• hosting and cloud infrastructure providers;
• providers of artificial intelligence, machine learning and related technologies used to provide the Service;
• customer support service providers;
• professional advisers, including legal and accounting advisers;
• public authorities or law enforcement bodies where required by law.

Some of these providers process personal data outside the EEA (see Section 6).

All service providers are required to process personal data only on our instructions or for their own lawful purposes where they act as independent controllers.

6. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area ("EEA"). Where this occurs, we take appropriate measures to protect personal data as required by applicable data protection law. These measures may include the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

7. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary to:

• provide the Service;
• fulfil our contractual obligations;
• comply with legal, tax and accounting requirements;
• resolve disputes;
• establish, exercise or defend legal claims.

Where the law requires us to retain specific records for a longer period, we will retain those records for the period required by law.

In practice, we remove personal data associated with an order — including emails, names, uploaded photos and generated audio — through an automated deletion process after the order is completed, except for records we are required to keep for accounting, tax or other legal purposes, which we retain for the period required by applicable law.

When personal data is no longer required, we will securely delete or anonymise it where reasonably practicable.

8. Your Rights

Depending on your location and applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing activities;
• receive a copy of your personal data in a portable format where applicable;
• withdraw consent where processing is based on consent.

These rights are not absolute and may be limited where permitted or required by law. To exercise your rights, please contact us using the details provided below. We may ask you to verify your identity before responding to certain requests.

If you believe that your personal data has been processed unlawfully, you also have the right to lodge a complaint with the competent supervisory authority.

9. Security

We implement appropriate technical and organisational measures designed to protect personal data. However, no security measure is completely risk-free.

10. Children's Privacy

The Service is intended for adults and is not directed to children under the age of 18.

We do not knowingly collect personal data directly from children. If you believe that a child has provided personal data to us, please contact us and we will take appropriate steps to address the situation.

Where an order is intended for a child (for example, a birthday song), the adult placing the order provides any information about the child and is responsible for having an appropriate legal basis to do so.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, applicable law or our data processing practices.

The latest version will always be available on the Service together with the date it became effective.

12. Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact us:

HipTech OÜ · Reg. 16671417 · VAT EE102661826 · Kadaka 72a, 12618 Tallinn, Estonia · hello@melodaki.com