1. Who We Are
MeloTools is a project run by Dushyant Patel, an individual (sole trader), who is the data controller for the personal data described in this policy.
Contact Information:
- Email: support@mails.melotools.com
- Website: melotools.com
2. Policy Overview
This policy explains how we handle personal data under UK GDPR and EU GDPR, and the rights you have. If you have any questions, please contact us using the details above.
3. How the Tools Handle Your Images
How MeloTools handles your images depends on the tool:
- Image compressor: The image compressor runs in your browser. Your images are not uploaded to our server.
- Format converters: Format converters send each file over HTTPS to our server, which converts it and returns the result. Our server deletes the original and the converted copy immediately afterwards, including when a conversion fails.
- Larger files: On every plan, files over 4.4MB are converted in your browser instead and are not uploaded.
- Image contents: We never look at or analyse the contents of your images beyond what is needed to convert the file.
4. Data We Collect, Why, and How Long We Keep It
The table below sets out the personal data we hold, why we use it, the lawful basis we rely on, and how long we keep it.
| Data | Purpose | Lawful basis | Kept for |
|---|---|---|---|
| Account details (email address, name, hashed password) | Provide your account | Contract | Until you delete your account or ask us to delete it |
| Subscription records (plan, status, dates, PayPal subscription ID). We never receive your card details. | Billing, accounting and handling disputes | Contract; legal obligation | 6 years after the subscription ends |
| Conversion records (file type, file size, output format, time, and your account ID if you are logged in). We do not record file names. | Run the service, enforce plan limits and prevent abuse | Legitimate interests | 90 days, then deleted automatically |
| Contact and feedback messages | Reply to you | Legitimate interests | 12 months |
| Analytics (Google Analytics 4, Vercel Analytics) | Understand how the site is used | Consent (only if you accept analytics) | 2 months |
| Security and request logs | Keep the service running and secure | Legitimate interests | We do not write email addresses to server logs. Our hosting provider, Vercel, keeps request logs for a short period. |
5. Emails We Send
We send only account emails: email verification, a welcome email, and subscription and cancellation confirmations. We do not send marketing emails.
6. Advertising
MeloTools shows no adverts and uses no advertising or marketing cookies. We do not sell your personal data or share it with anyone for advertising.
7. Cookies and Local Storage
We use the following cookies and similar technologies:
| Name | Provider and type | Purpose | Duration |
|---|---|---|---|
melotools_consent | MeloTools; local storage | Stores your cookie choice | Until you change it |
authjs.session-token / __Secure-authjs.session-token | MeloTools (NextAuth); strictly necessary cookie | Keeps you logged in | Session, up to 30 days |
_ga and _ga_* | Google Analytics; analytics cookie, only with your consent | Distinguishes visitors so we can measure site usage | 2 years by default, or as set in Google Analytics |
| Vercel Analytics | Vercel; cookieless, only with your consent | Measures page views | No cookie is set |
Your choices: Analytics stays off unless you accept it. You can change your choice at any time using the "Cookie settings" link in the footer. If you withdraw consent, we delete the Google Analytics cookies.
8. Service Providers We Use
We share personal data only with the providers below, who process it on our behalf to run MeloTools:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Hosting | USA/EU |
| Supabase | Database | The region of our Supabase project |
| PayPal | Payments | See PayPal's privacy statement |
| Resend | Account emails | USA |
| Google Analytics | Analytics, only with your consent | USA |
| Vercel Analytics | Analytics, only with your consent | USA/EU |
| Google reCAPTCHA | Spam protection on forms; loads only when you submit a form | USA |
Our contact and feedback forms are protected by reCAPTCHA; the Google Privacy Policy and Terms of Service apply.
9. International Data Transfers
Some providers process data outside the UK and EEA, mainly in the USA. We rely on the safeguards in each provider's data processing terms, such as the EU-US Data Privacy Framework (and its UK extension) or standard contractual clauses.
10. Data Security
We protect your data in the following ways:
- Encryption in transit: Data sent to and from MeloTools is encrypted using HTTPS
- Passwords: Passwords are stored hashed, not in plain text
- Access: Access to production systems is restricted to the operator
No online service can be completely secure, so we cannot guarantee the security of data sent over the internet. We encourage you to use a strong, unique password.
11. Your Rights
Under UK GDPR and EU GDPR you have the following rights over your personal data:
- Access: Ask for a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete data
- Deletion: Ask us to delete your personal data
- Restriction: Ask us to limit how we use your data
- Objection: Object to processing we carry out on the basis of legitimate interests
- Portability: Ask for data you gave us in a portable, machine-readable format
- Withdraw consent: Where we rely on consent (analytics), withdraw it at any time using "Cookie settings" in the footer
The lawful basis for each type of data is set out in section 4. To use any of these rights, email us at support@mails.melotools.com. We aim to reply within one month.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or to your local data protection authority.
12. Age Requirements
- The free tools are for people aged 13 or over.
- Premium is for people aged 18 or over.
- We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, please contact us and we will delete it.
13. Changes to This Policy
We may update this policy when our practices or the law change. When we do, we will post the new version on this page with a new "Last updated" date, and we will email registered users about material changes.
14. Contact Us
For questions or requests about this policy or how we handle your data, please contact us:
Contact Information:
- Email: support@mails.melotools.com
- Website: melotools.com
- Response time: We aim to reply within one month