Privacy Policy

Melody House ("we", "us") sells MIDI packs and offers a free melody generator at yourmelodyhouse.com. For the purpose of the EU General Data Protection Regulation (GDPR), Melody House is the data controller for the personal data described below.

Contact for privacy questions and requests: privacy@yourmelodyhouse.com.

• Account data. When you create an account we store your email address and a hashed password (managed by our authentication provider). Legal basis: performance of a contract.
• Order and download history. When you buy a MIDI pack we store the purchase record, the product bought, price, currency, and download timestamps so you can re-download from your account. Legal basis: performance of a contract.
• Newsletter email. If you subscribe to Studio Notes we store your email address to send occasional updates when we have something worth sharing. Legal basis: consent — you can withdraw at any time using the unsubscribe link.
• Support messages. If you email support we keep the message and your reply address to answer you. Legal basis: legitimate interest in providing support.
• Technical logs. Server logs (IP address, user agent, timestamps) are kept short-term to protect the service against abuse. Legal basis: legitimate interest in security.

Payments are processed by Stripe, our third-party payment provider. When you check out, your payment details (card number, billing address, country) are submitted directly to Stripe — we never see or store your full card number. Stripe acts as an independent data controller for the payment data it collects; see Stripe's privacy notice for details.

We receive from Stripe only what we need to fulfil your order: a transaction ID, the amount, currency, buyer country, and the associated email address.

We use a small number of strictly necessary cookies to keep you signed in and to remember your cart / pack-builder selection. We do not run third-party advertising or cross-site tracking cookies.

If we introduce optional analytics in the future we will ask for your consent first via a cookie banner.

We share personal data only with service providers strictly needed to run the shop:

• Stripe — payment processing.
• Our hosting and database provider — to run the website and store your account and purchases.
• Our email delivery provider — to send transactional emails (receipts, password resets) and, if you subscribed, the newsletter.

We never sell personal data.

Some of our providers process data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism.

• Account and order records: kept while your account is active, and up to 10 years after the last purchase to meet accounting obligations.
• Newsletter email: kept until you unsubscribe.
• Support messages: up to 2 years after the last message.
• Server logs: up to 30 days.

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten"), subject to legal retention obligations.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@yourmelodyhouse.com. You can also delete your account directly from the Account page.

If we make material changes we will update the date at the top and notify you by email if you have an account.