Last updated: 1 October 2026
Controller
Jose Antonio Nuevo · Sole proprietor (Spain) · Barcelona, Spain · jose@josenuevo.dev.
Data processed
Email and registration (account); Entered texts (AI generation); Payment data (Stripe); Usage data and logs (improvements and security); Generated audio (storage and download); Technical cookies (session) and analytics cookies (consent).
Purpose
To provide personalized music generation, manage accounts, payments and credits, analyze platform usage and performance, and comply with legal and tax obligations.
Processors and third-party services
Supabase (DB/Auth, EU), Cloudflare (hosting, audio storage, rate limiting and contact email, EU/US), Stripe (payments, EU/US), ElevenLabs (music/voice, US), OpenRouter (text, US), Voyage AI (embeddings, US), Sentry (monitoring, EU/US). Safeguards: GDPR and Standard Contractual Clauses.
Retention
Account: active or until deletion request; Generated content: up to 12 months of inactivity; Logs: 6 months; Billing data: 5 years (tax rules).
User rights
Access, rectification, erasure, restriction, objection and portability via jose@josenuevo.dev (use your account email). Complaints to the Spanish DPA (AEPD).
Security
TLS encryption, Supabase RLS, service-key access control, Sentry monitoring, data minimization.
International transfers
Certain processing (OpenRouter/Voyage AI/ElevenLabs) may involve transfers outside the EEA; SCCs apply.
Use of third-party services and cookies
Memody relies on several external services to provide the technical functionality of the application and ensure reliability: Supabase Auth – handles user authentication and Google Sign-In. Supabase uses technical and session cookies to securely maintain user login. These cookies are strictly necessary for the proper operation of the application and are not used for advertising or tracking purposes. Cloudflare – provides hosting, content delivery, and storage of generated audio. It may use strictly necessary cookies or equivalent mechanisms for security and performance. These do not personally identify users or perform behavioral tracking. OpenRouter API – generates summaries, song lyrics, and help-chat answers from user-provided text. It does not install any cookies or browser trackers. Voyage AI – generates vector embeddings used for in-product help search. It does not install any cookies or browser trackers. ElevenLabs API – generates the corresponding music audio from the lyrics. It does not set cookies or perform any tracking. Sentry – monitors technical errors and failures to improve service stability. It may use local or session storage but does not use persistent cookies or user tracking. Overall, Memody does not use cookies for advertising or advanced analytics, only those strictly necessary for session management and platform security. Therefore, under the GDPR and the ePrivacy Directive, no cookie-consent banner is required.
Children
Intended for users 16+. If minors use it, parental consent is presumed.
Policy changes
We will notify material changes via on-site notice or email. Latest version at /privacy.
Contact
jose@josenuevo.dev – Controller: Jose Antonio Nuevo.
Owner: Jose Antonio Nuevo · Sole proprietor (Spain) · Barcelona, Spain · jose@josenuevo.dev
Back to home