Privacy Policy
Effective: July 5, 2026.
This explains what Melelem collects, why, and what control you have. The data controller is Melelem, Inc., a company incubated by Fountech.ai Limited (“we”, “us”). Contact: legal@melelem.ai.
1. What we collect
Your account (app.melelem.ai): when you sign in with Google we receive your name and email address, and we store the email and the sessions tied to it. Nothing else, no tracking pixels, no ad tech.
Your content:conversations, material you add as context, writing you provide to train your personal model, and the model’s outputs for you.
Handoffs: when you send or receive work, the shared package (the items you confirmed) and the messages added to it.
Connectors: if you connect services like Notion or Linear, we store the access tokens encrypted and request the narrowest scopes that make the feature work. We access connected data to do what you asked and not otherwise.
Model calls:every call to a model provider runs on Melelem’s own keys. You do not add provider keys, so there are none of yours for us to hold.
Technical basics: logs needed to run and secure the Service (timestamps, IPs, errors). No advertising analytics on the site.
2. Why we process it
To provide the Service you asked for (contract): running your conversations, training your personal model on your writing, executing handoffs you confirm, operating connectors you enabled. To keep the Service secure and debug it (legitimate interest). To contact you about the Service at your account email (legitimate interest, and consent where required; every non-essential email has an opt-out).
3. What we do not do
We don’t sell your data. We don’t show ads. We don’t use your content to train shared models or anyone else’s model: training is per-account, and what your model learns from you serves only you. Handoff content goes only to the people you explicitly confirmed.
4. Who processes data for us
We use a small set of processors to run the Service: Vercel (website and app hosting), Fly.io (application gateway), OpenRouter (model routing, and the route every outside model call takes, always with retention denied), Google (sign-in, and connectors you enable), Stripe (payments), and Resend (transactional email). Where these process data outside the EEA, transfers rely on recognised safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.
When your request consults an outside model, the content needed to answer it goes through OpenRouter, which reaches that model on our behalf. The catalogue it reaches runs to several hundred models across many makers, so the maker is whichever one the routing chose for that part of your request. Every call is made over a route that refuses retention and training, and nothing is sent over one that cannot honour that.
5. How long we keep it
Account data and content: for the life of your account. Handoff copies you sent to someone else live in their account like a delivered email; deleting your account doesn’t delete their copies. Logs: short rotation, weeks not years. Deletion requests: honoured within 30 days, backups shortly after.
6. Your rights
Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to legal@melelem.ai. You can also complain to your local data protection authority.
7. Cookies
melelem.ai sets no advertising or analytics cookies. app.melelem.ai uses strictly necessary cookies only: a session cookie that keeps you signed in. That’s the list, which is why there’s no cookie banner.
8. Security
Content in transit is encrypted (TLS). Connector tokens are encrypted at rest. Access to production systems is restricted. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
9. Children
The Service is not directed at children and requires users to be 16 or older.
10. Changes
We’ll post any changes here with a new effective date, and flag material changes in the app.
Contact: legal@melelem.ai