Privacy Policy

1. Scope and contact

Melsona is a Karaoke Video Maker and Lyric Video Maker. This policy distinguishes browser-local editing from account services and optional cloud processing. Contact support@melsona.com about privacy or your information.

2. Google sign-in and account information

You can use manual editing and local export without an account. If you choose Google sign-in, Google and Supabase handle authentication. Melsona uses the verified account identifier, email address, and name or avatar provided by Google to identify your account, display your profile and separate local drafts and cloud tasks by owner.

Supabase stores authentication and application records, including account identifiers, AI job status and Credit reservations or ledger entries. Melsona does not receive your Google password.

3. Browser-local editing and drafts

The manual editor reads the audio, lyrics and background media you select in your browser. Preview and supported MP4 export run locally. IndexedDB stores the local project, media Blobs, lyric timing, styles and related draft state when saving succeeds. Browser storage also supports local preferences and account ownership checks.

This is not permanent cloud project storage. Clearing site data, using a different browser or device, storage restrictions or private browsing can make drafts unavailable. Signing out does not itself delete local media. Remove local drafts and files through your browser's site-data controls; this does not delete separate cloud records.

4. Optional cloud AI processing

Cloud AI tools are separate from local editing and require sign-in, Credits and an enabled service. At this update, public AI submission and reads are disabled; their presence in the interface does not mean a Provider request will run.

• Lyrics Transcription sends the selected audio to ElevenLabs Scribe v2.
• Lyrics Alignment sends the selected audio and supplied lyric text to ElevenLabs Forced Alignment.
• Vocal Removal uses fal Demucs. fal receives a time-limited HTTPS link from which it can retrieve the selected audio.

When you explicitly submit an enabled cloud task, Cloudflare Workers and media processing handle the selected input. Private Cloudflare R2 storage holds temporary inputs, Provider receipts and results. Queues and the database track execution, ownership, status and Credit accounting. Applying a result copies the chosen content into your local project; submitting a cloud task is not a permanent backup of that project.

Provider processing is subject to that Provider's terms and data practices. Do not submit material you lack permission to send for processing, or unnecessary personal information.

5. Payments and Credit records

At this update, paid plan and Credit purchases are disabled. The configured production payment path is Stripe; a Creem adapter is retained in the code but is not an active alternative checkout.

When payments are enabled, the payment provider handles payment details. Melsona records the relevant customer, payment and subscription identifiers, plan, amount, currency, status, and refund or dispute events to verify payments and maintain the unified Credit wallet. We do not store full card details.

6. Request metadata, cookies and storage

Requests to the website pass through Cloudflare; request handling can involve IP addresses, browser information, URLs, timestamps and error metadata. Cloud AI task records also include status and execution timestamps. We do not claim that IP addresses are automatically anonymized.

Authentication uses session cookies. Browser storage is used for local drafts and preferences. Blocking cookies can prevent sign-in; clearing storage can remove drafts. The application currently includes no dedicated advertising or marketing analytics SDK. Hosting-level logging or analytics are separate from local project storage.

7. Retention and deletion

Local drafts remain subject to your browser's storage controls. Cloud AI files have expiry timestamps, access checks and cleanup code; they are temporary working files, not a cloud asset library. Expired access does not prove immediate physical deletion, and cleanup failures can delay removal. Provider-side retention is separate from R2 expiry.

Authentication, job, security and accounting records have different purposes and are not all deleted when a media file expires. There is no universal retention period for all data described here. Contact support for information about a particular record or deletion request; we cannot promise that every record can be immediately removed.

8. Requests about your information

Account shows your available identity information. You may contact support@melsona.com to request access, correction, deletion or a copy of information, as applicable under law. We may need to verify your identity before assessing a request.

The current interface does not provide self-service account deletion or a comprehensive cloud-data export. Downloading an MP4 or project JSON exports that local project, not your entire account record. Support messages contain the information you choose to send; do not include passwords or payment credentials.

9. Service providers and international processing

Cloudflare hosts the web and runtime services; Supabase provides authentication and application data; Google handles optional Google sign-in. ElevenLabs and fal process only their relevant cloud AI requests when those tools are enabled, and Stripe handles payments when purchasing is enabled.

These services may process data in countries other than yours. Locations and applicable data practices depend on the service used and its infrastructure. Contact us with questions about processing and applicable privacy rights.

10. Security, children and updates

The service uses HTTPS, verified authentication, ownership checks and restricted file access. No system can guarantee absolute security.

The service is not intended for children under 13. If you believe a child has supplied personal information, contact support. We update this page and its last-updated date when our practices change.

Also read our Terms of Service and Refund Policy.