Melo.

Melo. Privacy Policy

Enacted: October 13, 2026

Melo. (the "Service") respects users' privacy and establishes this Privacy Policy to handle personal information and other user data appropriately.

Article 1 (Information Collected)

To the extent necessary to provide the Service, the Service may collect the following information.

1. Information obtained through Spotify account linking

  • Spotify user ID
  • Spotify display name
  • Profile image
  • Playlist information the user has authorized access to
  • Playlist name, description, image, and included tracks
  • Access token and refresh token required for linking

2. Information obtained through Apple Music linking

When Apple Music linking is available, the Service may obtain the following information depending on the user's permission and the scope of the API used.

  • Playlist information contained in the user's Apple Music library
  • Playlist name, description, image, and included tracks
  • User token required for access authorization via MusicKit, etc.
  • Other information within the scope permitted by the user

The Service does not directly obtain or store the user's Spotify account or Apple ID password.

3. Information obtained through URL pasting

  • Spotify or Apple Music playlist URL entered by the user
  • Playlist ID
  • Playlist name, description, and image
  • Included tracks and artist information
  • Public information about the playlist publisher

4. Information collected through Service use

  • IP address
  • Browser type and device information
  • Access date/time and pages viewed
  • Cookies and other identifiers
  • Error logs and security-related logs

5. Information voluntarily provided by users

  • Title and description text registered in the gallery
  • Images and other information posted by the user
  • Email address provided when contacting us
  • Contents of inquiries

Article 2 (Purpose of Use)

Collected information is used for the following purposes.

  • Retrieving, registering, displaying, and sharing Spotify and Apple Music playlists
  • Providing gallery features
  • Authenticating and linking with external music services
  • Managing playlists registered by users
  • Maintaining, improving, and troubleshooting the Service
  • Preventing unauthorized access, spam, and other misuse
  • Responding to inquiries
  • Analyzing usage
  • Complying with applicable laws

Data obtained from external music services is used only within the purposes and scope permitted by each service's developer terms.

The Service does not use Spotify-derived data for ad targeting, user profiling, or AI model training in ways that violate Spotify's permission terms.

Article 3 (Information Made Public)

When a user registers a playlist in the Service, the following information may be made public to other users.

  • Playlist name
  • Playlist description
  • Playlist image
  • Included tracks and artist information
  • Links to Spotify or Apple Music
  • Display name and profile image of the playlist publisher
  • Information the user entered for public display

Not all information obtained through linking with external music services is automatically made public.

Information made public is determined by the Service's features and the user's actions.

Article 4 (Authentication Information and Access Tokens)

  • The Service uses the authentication and authorization methods specified by Spotify or Apple.
  • Access permissions obtained are limited to the scope necessary to provide the Service.
  • Access tokens and other authentication information are handled under appropriate security management measures.
  • Authentication information is never sold to third parties.
  • Upon unlinking, the relevant authentication information and personal data are deleted in accordance with each service's developer terms and applicable laws.

Article 5 (Use via URL Pasting)

  • Users can register a corresponding playlist in the Service by pasting a public Spotify or Apple Music playlist URL.
  • The URL pasting feature does not, in principle, require account linking with each music service.
  • However, to ensure security and understand usage, the Service may collect IP addresses and access logs.

Article 6 (Third-Party Disclosure and Outsourcing)

  • The operator of the Service does not provide personal data to third parties, except with the individual's consent, as required by law, or otherwise permitted by law.
  • However, to the extent necessary to operate the Service, the operator may outsource information handling to server management providers and other contractors.
  • When using Spotify or Apple Music authentication, APIs, or embedding features, information may be exchanged between the user's browser and each service.
  • If personal data is provided to providers located overseas, the operator will take necessary information disclosure and other measures in accordance with applicable laws.

Article 7 (Cookies and Access Analytics)

The Service may use cookies and other technologies for the following purposes.

  • Maintaining login state
  • Ensuring security
  • Analyzing usage
  • Improving Service usability

If access analytics or ad delivery services are introduced, the operator will notify users of the provider, information transmitted, purpose of use, and opt-out method in accordance with applicable laws.

Article 8 (Information Storage and Security Management)

  • The operator takes appropriate security management measures to prevent unauthorized access, leakage, loss, or damage to collected information.
  • Collected information is retained only for the period necessary to achieve the purpose of use.
  • Information no longer needed is deleted or properly processed in accordance with applicable laws and each music service's developer terms.

Article 9 (Unlinking from External Music Services)

  • Users can unlink or revoke access permissions from each music service's settings page or through features provided by the Service.
  • Upon unlinking, the relevant authentication information and personal data are deleted in accordance with each service's developer terms and applicable laws.
  • For playlists published on the Service, a separate removal procedure may be required. However, data that should be deleted upon unlinking will be properly processed without a separate request.

Article 10 (Playlist Removal Requests)

  • Users or rightful owners may request removal of playlists registered in the Service.
  • When requesting removal, the Service may ask for the target playlist URL and information necessary for identity verification.
  • The operator will review the request and respond appropriately within a reasonable period.

Article 11 (Disclosure, Correction, and Suspension of Personal Information)

  • Users may, under applicable laws, request notification of purpose of use, disclosure, correction, suspension of use, or deletion of their own personal information held by the operator.
  • After necessary identity verification, the operator will respond in accordance with applicable laws.

Article 12 (Information about the Operator)

  • The Service is provided by an individual operator in Japan.
  • The name, address, and other legally required information of the entity responsible for personal information handling will be promptly provided upon request from the individual.

Article 13 (External Services)

The Service may use Spotify, Apple Music, and other external services.

For information handling by external services, please refer to each service's privacy policy.

Article 14 (Changes to the Privacy Policy)

  • The operator may change this Policy in response to legal revisions, changes to the Service, or other necessary circumstances.
  • When making significant changes, the operator will notify users through appropriate means on the Service.