Privacy Policy
Last updated October 7, 2026
This Privacy Policy explains how we collect, use, share and protect personal data when you use our website and services.
1. Who we are
The controller of your personal data is Sundin Digital Ltd, which operates Meloblocks. Our registered company details are set out on our company information page.
2. Personal data we collect
- Song information: the names, relationships, occasions, memories and other details you provide, and your style and voice preferences.
- Photos you upload and how you position them.
- Contact details: your email address and, where you choose scheduled delivery, the recipient's email address.
- Order details: products purchased, prices, dedication messages and, for physical products, the delivery name and address.
- Technical data: a one-way hashed form of your IP address, used to prevent abuse. We do not store your IP address itself.
- Payment data: card payments are processed by Stripe. We receive confirmation of payment but not your full card details.
Please do not provide special categories of data (for example, health information) unless you wish them to be included in your song.
3. Information about recipients
Information about the person a song is for is provided by our customer. We use it only to create and deliver the order. Recipients may contact us at any time to request access to, or deletion of, their information.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating your song and fulfilling your order, including emails about it | Performance of a contract, or steps taken at your request before entering into one |
| Preventing fraud and abuse, and keeping our services secure | Our legitimate interests |
| Responding to your enquiries | Our legitimate interests |
| Keeping accounting and tax records | Compliance with a legal obligation |
| Advertising measurement cookies, where used | Your consent |
We do not sell personal data, and we do not send marketing emails without your separate consent.
5. Service providers
We share personal data only with service providers that process it on our behalf and under contract:
| Provider | Service | Location |
|---|---|---|
| Vercel | Website hosting | EU / USA |
| Supabase | Database and file storage | EU (Germany) |
| Anthropic | Lyric generation | USA |
| Mureka | Music generation | China |
| Print-on-demand partner | Production and shipping of physical products | — |
| Stripe | Payment processing | EU / USA |
| Resend | Email delivery | USA |
| Meta | Advertising measurement (only with your consent) | USA |
Our music generation provider receives only song lyrics and a short style description. It does not receive your email address, photos, address or payment details.
6. International transfers
Where personal data is transferred outside the European Economic Area, including to the United States and China, we rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
7. Data retention
| Data | Retention period |
|---|---|
| Songs not purchased (including answers, photos and audio) | 30 days |
| Uploaded photos not used in a song | 2 days |
| Purchased songs | For as long as the song page is available, or until you request deletion |
| Original photos for physical orders | 90 days after delivery |
| Email addresses and hashed IP addresses in service logs | 30 days |
| Enquiries | Up to 12 months after resolution |
| Order and accounting records | 6 years, as required by law |
8. Cookies
We use only strictly necessary cookies and similar technologies unless you consent to others. See our Cookie Policy.
9. Your rights
Subject to applicable law, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time.
To exercise your rights, please use our contact form. We will respond within one month and may ask you to verify your identity.
You also have the right to lodge a complaint with a supervisory authority, in particular the Office of the Commissioner for Personal Data Protection in Cyprus or the authority in your country of residence.
10. Security
Personal data is stored in encrypted form within the European Union. Photos and full-length songs are not publicly accessible and are provided only through time-limited links. Song pages use long, randomly generated addresses.
11. Children
Our services are intended for adults. We do not knowingly accept orders from anyone under 18.
12. Changes to this policy
We may update this Privacy Policy from time to time. The date of the latest revision is shown at the top of this page.