Privacy Policy

MelaBridge Inc. ("MelaBridge," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and the choices and rights you have. By using our Services, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: name, email address, password (hashed), and profile details you choose to add.
• Event data: event names, dates, locations, budgets, timelines, runsheets, and other planning information you create.
• Guest data: names, email addresses, RSVP status, dietary preferences, plus-one information, and other details you enter about guests.
• Vendor data: vendor profile information, portfolio photos, service descriptions, service categories, and packages.
• Files and documents: any files you upload to the platform, including photos, contracts, and planning documents.
• Payment information: billing details are collected and processed by Stripe. MelaBridge does not store full card numbers or bank account details.
• Support and feedback: requests you send to MelaBridge support and feedback you provide. Information submitted through event-planning tools may also be stored with your event and account data.

1.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction patterns, used to understand and improve the platform.
• Device and browser information: IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies: session cookies required for authentication and preferences cookies for settings you choose. See our Cookie Policy for details.

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services
• Process subscription payments and manage your billing
• Enable event planning, guest management, vendor discovery, and saved vendor lists
• Send transactional communications (event updates, billing receipts, security alerts)
• Send product updates and newsletters where you have opted in
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve and personalize the Services based on aggregated usage patterns

We never sell your personal data. We do not use your guest data, event details, or support requests with advertisers.

3. How We Share Your Information

We share your information only in the following circumstances:

• Subprocessors: We work with trusted third-party service providers under strict data-processing agreements. Key subprocessors include:
  • Supabase — database hosting and authentication
  • Stripe — payment processing
  • Email delivery providers — transactional email
  • Vercel / hosting providers — platform infrastructure
• Within the platform: Event data is shared with collaborators you explicitly invite. Vendor profiles are displayed to users browsing the marketplace.
• Legal requirements: We may disclose information when required by law, court order, or governmental authority, or when necessary to protect the rights, safety, or property of MelaBridge, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

4. Data Retention

We retain your account data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time from Settings. Some data may be retained in anonymized or aggregated form for analytical purposes after deletion.

5. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. Payments are processed via PCI-compliant providers. No system is completely secure; we encourage you to use a strong, unique password and to notify us immediately of any suspected breach.

6. Your Rights and Choices

Depending on your location, you may have rights including:

• Access and portability: Request a copy of the personal data we hold about you. Most data can be exported directly from Settings.
• Correction: Update or correct inaccurate personal data in your account settings.
• Deletion: Request deletion of your account and personal data from Settings → Account → Delete Account. We will honor deletion requests subject to any legal retention obligations.
• Objection and restriction: Object to or request restriction of certain processing activities by contacting us at hello@melabridge.com.
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by updating your notification preferences in Settings.

If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. We honour these rights globally to the extent practicable.

7. International Data Transfers

MelaBridge is operated in the United States. If you are located outside the US, your data may be transferred to and processed in the US or other countries where our subprocessors operate. We implement appropriate safeguards (such as Standard Contractual Clauses) for international transfers where required by law.

8. Children's Privacy

MelaBridge is not directed to children under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child under 18 without parental consent, we will delete it promptly. Contact us at hello@melabridge.com if you believe a minor's data has been collected.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 14 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Services after the effective date constitutes acceptance of the revised policy.

10. Contact

For privacy questions, data requests, or to exercise your rights, contact us at: hello@melabridge.com.

Related policies: Terms of Service · Cookie Policy · Refund Policy