Privacy Policy

Last updated: 8 October 2025

Controller

webdevfactory · Sole proprietor (Spain) · Barcelona, Spain · support@memody.app.

Data processed

Email and registration (account); Entered texts (AI generation); Payment data (Stripe); Usage data and logs (improvements and security); Generated audio (storage and download); Technical cookies (session) and analytics cookies (consent).

Purpose

To provide personalized music generation, manage accounts, payments and credits, analyze platform usage and performance, and comply with legal and tax obligations.

Processors and third-party services

Supabase (DB/Auth/Storage, EU), Stripe (payments, EU/US), ElevenLabs (music/voice, US), OpenAI (text, US), Sentry (monitoring, EU/US), Upstash (rate limiting, EU). Safeguards: GDPR and Standard Contractual Clauses.

Retention

Account: active or until deletion request; Generated content: up to 12 months of inactivity; Logs: 6 months; Billing data: 5 years (tax rules).

User rights

Access, rectification, erasure, restriction, objection and portability via support@memody.app (use your account email). Complaints to the Spanish DPA (AEPD).

Security

TLS encryption, Supabase RLS, service-key access control, Sentry monitoring, data minimization.

International transfers

Certain processing (OpenAI/ElevenLabs) may involve transfers outside the EEA; SCCs apply.

Cookies

Essential cookies for session; optional analytics with consent. Manage preferences via the cookie banner.

Use of third-party services and cookies

Memody relies on several external services to provide the technical functionality of the application and ensure reliability: Supabase Auth – handles user authentication and Google Sign-In. Supabase uses technical and session cookies to securely maintain user login. These cookies are strictly necessary for the proper operation of the application and are not used for advertising or tracking purposes. Vercel – provides hosting infrastructure and may use temporary cookies or equivalent mechanisms for load balancing and performance optimization. These cookies do not personally identify users or perform behavioral tracking. OpenAI API – generates summaries and song lyrics from user-provided text. It does not install any cookies or browser trackers. ElevenLabs API – generates the corresponding music audio from the lyrics. It does not set cookies or perform any tracking. Sentry – monitors technical errors and failures to improve service stability. It may use local or session storage but does not use persistent cookies or user tracking. Overall, Memody does not use cookies for advertising or advanced analytics, only those strictly necessary for session management and platform security. Therefore, under the GDPR and the ePrivacy Directive, no cookie-consent banner is required.

Children

Intended for users 16+. If minors use it, parental consent is presumed.

Policy changes

We will notify material changes via on-site notice or email. Latest version at /privacy.

Contact

support@memody.app – Controller: webdevfactory.

Owner: webdevfactory · Sole proprietor (Spain) · Barcelona, Spain · support@memody.app

Privacy Policy