Privacy Policy

Melius Privacy Policy

This Privacy Policy ("Privacy Policy") describes how Melius AI, Inc. ("Melius," "Company," "we," "us," or "our") collects, uses, discloses, and protects information about you when you access or use our website located at www.melius.com and any related subdomains, mobile applications, tools, features, and functionality (collectively, the "Service"), as well as when you interact with us through our marketing activities, social media pages, customer support channels, and other activities described in this Privacy Policy.

Melius provides a creative canvas platform that enables users to generate AI-powered images, videos, and other visual content. The Service integrates third-party artificial intelligence and machine learning models, services, and APIs provided by third-party vendors ("Third-Party AI Models") to process user inputs and produce outputs. Melius does not itself develop, train, or operate the underlying generative artificial intelligence models used to create outputs.

This Privacy Policy is incorporated into and forms part of our Terms of Service, available at www.melius.com/terms ("Terms"). Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in the Terms. By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.

We may provide additional or supplemental privacy notices for specific products, features, or services at the time we collect information from you. Such supplemental notices will govern to the extent they conflict with this Privacy Policy with respect to the applicable product, feature, or service.

1. Information We Collect

We collect information about you from various sources, including information you provide to us directly, information collected automatically when you use the Service, and information we obtain from third-party sources.

(a) Information You Provide to Us

You may provide us with the following categories of information when you use the Service:

Account Information. When you create an Account, we collect your name, email address, username, profile picture, and any other information you choose to provide during registration. If you register using a third-party authentication service (such as Google or Apple), we receive information from that service, such as your name, email address, and profile information, in accordance with that service's privacy settings and policies.
User Content. We collect any text prompts, images, videos, reference materials, parameters, instructions, or other materials you submit to the Service ("User Input"), as well as the images, videos, or other content generated by the Service in response to your User Input ("Output"). Collectively, User Input and Output constitute your "Content."
Payment Information. If you purchase a paid Subscription Plan, our third-party payment processor, Stripe, Inc. ("Stripe"), collects and processes your payment information, including payment card number, billing address, and related transaction details. Melius does not receive or store your full payment card number. We receive only limited information from Stripe, such as the last four digits of your card number, card type, expiration date, and billing address, to manage your subscription and respond to billing inquiries. Stripe's collection and use of your payment information is governed by Stripe's privacy policy, available at https://stripe.com/privacy.
Communications. When you contact us via email, customer support, social media, or other channels, we collect the information you provide in those communications, including your name, contact information, and the content of your messages.
Survey and Feedback Data. If you participate in surveys, promotions, contests, or provide feedback about the Service, we collect the information you submit in connection with those activities.
Marketing Preferences. We collect information about your preferences for receiving marketing communications from us, including your opt-in and opt-out choices.

(b) Information Collected Automatically

When you access or use the Service, we and our service providers automatically collect certain information about you and your device, including:

Device and Browser Information. We collect information about the device and browser you use to access the Service, including device type, operating system and version, browser type and version, screen resolution, device identifiers, and language settings.
Usage Data. We collect information about how you interact with the Service, including pages viewed, features used, actions taken, timestamps, frequency and duration of use, referring and exit URLs, clickstream data, and search queries within the Service.
Log Data. Our servers automatically record information when you access the Service, including your Internet Protocol ("IP") address, access times, date and time of requests, and error logs.
Location Data. We may infer your approximate geographic location based on your IP address. We do not collect precise geolocation data unless you expressly grant permission through your device settings.
Cookies and Similar Technologies. We use cookies, pixels, web beacons, local storage, and similar tracking technologies to collect information about your interactions with the Service. For more information, see Section 5 (Cookies and Tracking Technologies).

We may receive information about you from third-party sources, including:

Authentication Providers. If you register or log in using a third-party authentication service, we receive profile information from that service as described above.
Analytics and Advertising Partners. We may receive information from analytics providers and, where applicable, advertising partners that help us understand how users interact with our Service and measure the effectiveness of our communications.
Publicly Available Sources. We may collect information from publicly available sources to the extent permitted by applicable law.

2. How We Use Your Information

(a) Information You Provide to Us

You may provide us with the following categories of information when you use the Service:

Account Information. When you create an Account, we collect your name, email address, username, profile picture, and any other information you choose to provide during registration. If you register using a third-party authentication service (such as Google or Apple), we receive information from that service, such as your name, email address, and profile information, in accordance with that service's privacy settings and policies.
User Content. We collect any text prompts, images, videos, reference materials, parameters, instructions, or other materials you submit to the Service ("User Input"), as well as the images, videos, or other content generated by the Service in response to your User Input ("Output"). Collectively, User Input and Output constitute your "Content."
Payment Information. If you purchase a paid Subscription Plan, our third-party payment processor, Stripe, Inc. ("Stripe"), collects and processes your payment information, including payment card number, billing address, and related transaction details. Melius does not receive or store your full payment card number. We receive only limited information from Stripe, such as the last four digits of your card number, card type, expiration date, and billing address, to manage your subscription and respond to billing inquiries. Stripe's collection and use of your payment information is governed by Stripe's privacy policy, available at https://stripe.com/privacy.
Communications. When you contact us via email, customer support, social media, or other channels, we collect the information you provide in those communications, including your name, contact information, and the content of your messages.
Survey and Feedback Data. If you participate in surveys, promotions, contests, or provide feedback about the Service, we collect the information you submit in connection with those activities.
Marketing Preferences. We collect information about your preferences for receiving marketing communications from us, including your opt-in and opt-out choices.

(b) Information Collected Automatically

When you access or use the Service, we and our service providers automatically collect certain information about you and your device, including:

Device and Browser Information. We collect information about the device and browser you use to access the Service, including device type, operating system and version, browser type and version, screen resolution, device identifiers, and language settings.
Usage Data. We collect information about how you interact with the Service, including pages viewed, features used, actions taken, timestamps, frequency and duration of use, referring and exit URLs, clickstream data, and search queries within the Service.
Log Data. Our servers automatically record information when you access the Service, including your Internet Protocol ("IP") address, access times, date and time of requests, and error logs.
Location Data. We may infer your approximate geographic location based on your IP address. We do not collect precise geolocation data unless you expressly grant permission through your device settings.
Cookies and Similar Technologies. We use cookies, pixels, web beacons, local storage, and similar tracking technologies to collect information about your interactions with the Service. For more information, see Section 5 (Cookies and Tracking Technologies).

We may receive information about you from third-party sources, including:

Authentication Providers. If you register or log in using a third-party authentication service, we receive profile information from that service as described above.
Analytics and Advertising Partners. We may receive information from analytics providers and, where applicable, advertising partners that help us understand how users interact with our Service and measure the effectiveness of our communications.
Publicly Available Sources. We may collect information from publicly available sources to the extent permitted by applicable law.

3. Sharing Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Third-Party AI Model Providers. We share your User Input with Third-Party AI Model providers to the extent necessary to generate Outputs. These providers process your User Input in accordance with their own terms and privacy policies, which are separate from this Privacy Policy. Melius configures Third-Party AI Model services to limit the use of your Content for model training or retention where such configurations are available; however, Melius does not control and cannot guarantee the data practices of third-party providers. For more information, see Section 4 (AI-Specific Data Practices).
Payment Processors. We share your payment-related information with Stripe to process transactions for paid Subscription Plans. Stripe's handling of your information is governed by Stripe's privacy policy.
Service Providers. We share your information with third-party service providers who perform services on our behalf, including hosting and infrastructure, analytics, customer support, email delivery, and security services. These service providers are contractually obligated to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.
Analytics and Advertising Partners. We may share information with analytics providers to help us understand usage of the Service, and, where applicable, with advertising partners to measure the effectiveness of our marketing efforts. Where such sharing constitutes a "sale" or "sharing" of personal information under applicable state privacy laws, we provide opt-out mechanisms as described in Section 11 (Additional Disclosures for U.S. State Residents).
Community Gallery. If you elect to share your Output through the Community Gallery, your Output and associated metadata (such as your username and profile information) will be visible to other users and the public. For more information, see Section 13 (Community Gallery).
Legal Compliance and Protection. We may disclose your information if we believe in good faith that disclosure is necessary to: (i) comply with applicable law, regulation, or legal process (including lawful requests from public authorities); (ii) protect the rights, property, or safety of Melius, our users, or the public; (iii) detect, prevent, or address fraud, security, or technical issues; (iv) enforce our Terms, Acceptable Use Policy, or other agreements; or (v) respond to an emergency involving danger of death or serious physical injury.

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, acquisition, sale of assets, financing, reorganization, bankruptcy, receivership, dissolution, or similar transaction involving all or a portion of our business. If such a transaction occurs, we will use reasonable efforts to direct the transferee to use your information in a manner consistent with this Privacy Policy.

With Your Consent. We may share your information with third parties when you direct us to do so or provide your consent.
Affiliates. We may share your information with our corporate affiliates and subsidiaries for purposes consistent with this Privacy Policy.

4. AI-Specific Data Practices

Because the Service integrates Third-Party AI Models to generate content, this Section provides additional transparency about how your data is handled in connection with AI-powered features.

(a) How User Input and Output Are Processed

When you submit User Input to the Service, Melius routes your User Input to one or more Third-Party AI Model providers for processing and delivers the resulting Output to you through the Service.

(b) No Training on User Content

Melius does not use your User Input or Outputs to train or develop any underlying artificial intelligence or machine learning models. Melius may use User Content on an aggregated and de-identified basis to operate, maintain, and improve the Service, including to enhance system performance, improve output quality, develop new features, and optimize workflow automation and routing across model providers. Such improvements do not involve training generative models on your User Content or using your User Content to replicate or learn specific user styles, proprietary assets, or brand characteristics.

Third-Party AI Model providers may process your User Input and Output in accordance with their own terms and privacy policies. Where available, Melius configures such services to limit the use of your Content for model training or retention by third-party providers. However, Melius does not control and cannot guarantee the data handling practices of third-party providers. The availability, identity, and terms of Third-Party AI Model providers may change from time to time as Melius adds, removes, or substitutes model providers at its discretion.

(d) Sensitive Information in User Input

You should exercise caution when submitting User Input to the Service. Do not include sensitive personal information, confidential information, or information you are not authorized to share in your User Input. If you upload images or videos containing faces or other identifying features, you are responsible for ensuring you have obtained all necessary rights, consents, and permissions from any identifiable individuals. Melius does not extract or store biometric identifiers from your User Input; however, Third-Party AI Model providers may process facial features or other characteristics as part of generating Outputs in accordance with their own policies.

(e) Content Moderation

Melius may review or analyze User Input and Output using automated tools and, in some cases, manual review to enforce compliance with our Terms and Acceptable Use Policy, to detect prohibited content, and to comply with applicable law. For more information, see Section 8 (Content Moderation and Enforcement) of the Terms.

5. Cookies

We and our service providers use cookies, pixels, web beacons, local storage, and similar technologies (collectively, "Tracking Technologies") to collect information about your interactions with the Service, provide and improve the Service, and deliver relevant content and advertising.

(a) Types of Tracking Technologies

Strictly Necessary Cookies. These are essential for the operation of the Service. They enable core functionality such as authentication, security, and accessibility. You cannot opt out of strictly necessary cookies.
Analytics Cookies. We use analytics cookies and similar technologies to understand how users interact with the Service, measure performance, identify errors, and improve the user experience. We may use third-party analytics services to assist with these activities.
Functional Cookies. These cookies remember your preferences and settings (such as language or display preferences) to provide a more personalized experience.
Advertising and Marketing Cookies. We may use advertising cookies and pixels to measure the effectiveness of our marketing campaigns, deliver relevant advertisements, and track conversions. These technologies may be provided by third-party advertising partners.

(b) Your Cookie Choices

Most web browsers allow you to manage your cookie preferences through browser settings. You can typically set your browser to refuse cookies or to alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of certain features of the Service.

Where required by applicable law, we will obtain your consent before placing non-essential cookies on your device. You may withdraw your consent at any time through the cookie preference controls available on the Service.

Some browsers offer a "Do Not Track" ("DNT") signal. We do not currently respond to DNT signals because there is no industry-standard interpretation of DNT. We do honor Global Privacy Control ("GPC") signals. If we detect a GPC signal from your browser, we will treat it as a valid opt-out request for the sale or sharing of personal information associated with that browser, as required by applicable state privacy laws.

6. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. This Section describes the general rights and choices available to all users. Additional jurisdiction-specific rights are described in Section 11 (Additional Disclosures for U.S. State Residents) and Section 12 (Additional Disclosures for European Users).

Access and Portability. You may request access to the personal information we hold about you, or request a copy of your personal information in a portable format.
Correction. You may request that we correct inaccurate or incomplete personal information we hold about you.
Deletion. You may request that we delete your personal information, subject to certain exceptions (such as where we are required to retain information for legal compliance or to complete a transaction you initiated).
Opt-Out of Marketing. You may opt out of receiving marketing communications from us by following the unsubscribe instructions in any marketing email we send you, or by contacting us at privacy@melius.com. Even if you opt out of marketing communications, we may continue to send you transactional and service-related communications.
Account Settings. You may update your Account information at any time through your Account settings on the Service.
Account Deletion. You may delete your Account by submitting a request to support@melius.com. Upon Account deletion, we will delete or de-identify your personal information within a reasonable period, subject to the exceptions described in Section 7 (Data Retention).

To exercise any of these rights, please contact us at privacy@melius.com. We will verify your identity before processing your request and will respond within the timeframes required by applicable law. We will not discriminate against you for exercising any of your rights.

7. Data Retention

We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

In determining the appropriate retention period, we consider:

The nature and sensitivity of the information;
The purposes for which we process the information;
Whether we can achieve those purposes through other means;
Applicable legal, regulatory, tax, accounting, or reporting requirements; and
Applicable statutes of limitations and records-retention obligations.

When you delete your Account, we will delete or de-identify your personal information, including your User Input and Output stored on the Service, within a reasonable period following your deletion request. However, we may retain certain information as necessary to:

Comply with applicable legal, regulatory, tax, or accounting obligations;
Establish, exercise, or defend legal claims;
Detect, prevent, or investigate fraud, abuse, or violations of our Terms or Acceptable Use Policy;
Enforce our agreements and protect the rights, property, or safety of Melius, our users, or the public; and
Complete any processing initiated before termination, including delivering Outputs for pending requests.

Aggregated and de-identified data that can no longer be used to identify you may be retained indefinitely for analytics, research, and service improvement purposes.

8. Data Security

We implement and maintain reasonable administrative, technical, and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, loss, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your personal information. You are responsible for maintaining the confidentiality of your Account credentials and for all activities that occur under your Account. If you believe your Account has been compromised, please contact us immediately at support@melius.com.

9. International Data Transfers

Melius is headquartered in the United States. If you access the Service from outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries where Melius, its affiliates, service providers, or Third-Party AI Model providers operate. These countries may have data protection laws that differ from the laws of your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for the transfer of personal information to countries outside of your jurisdiction, including:

Standard Contractual Clauses approved by the European Commission (for transfers from the EEA);
The UK International Data Transfer Addendum (for transfers from the United Kingdom);
Other transfer mechanisms recognized under applicable data protection law; or
Your explicit consent, where appropriate.

For more information about the safeguards we use for international transfers, or to request a copy of the applicable transfer mechanism, please contact us at privacy@melius.com.

10. Children's Privacy

The Service is intended for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from individuals under eighteen (18). If you are under eighteen (18), do not use the Service or provide any personal information to us.

If we become aware that we have collected personal information from an individual under eighteen (18), we will take commercially reasonable steps to delete that information promptly. If you believe an individual under eighteen (18) has provided personal information to us, please contact us at privacy@melius.com.

11. Additional Disclosures for U.S. State Residents

This Section provides additional information required under U.S. state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), and similar laws in Colorado, Connecticut, Delaware, Indiana, Iowa, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other states that have enacted comprehensive privacy legislation (collectively, "U.S. State Privacy Laws"). This Section applies to residents of states with applicable privacy laws and supplements the information provided elsewhere in this Privacy Policy.

(a) Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information, for the purposes described below and shared with the categories of third parties indicated:

Identifiers & Account Information

Examples: Name, email address, username, IP address, device identifiers, company name (if provided).
Purposes: Operate and personalize the Service; communicate with you; security and fraud prevention.
Shared With: Service providers; analytics partners.

Commercial & Payment Information

Examples: Subscription Plan, transaction history, billing details.
Purposes: Process payments; manage subscriptions; comply with tax and accounting obligations.
Shared With: Payment processor (Stripe); service providers.

Internet / Electronic Activity & Geolocation

Examples: Usage data, log data, clickstream data, approximate location inferred from IP address.
Purposes: Improve and personalize the Service; analytics; security; compliance.
Shared With: Service providers; analytics partners.

Sensory & User-Generated Content

Examples: Images, videos, text prompts, and other multimedia submitted as User Input or generated as Output.
Purposes: Process User Input; generate Output; content moderation; enforce Terms and Acceptable Use Policy.
Shared With: Third-Party AI Model providers; service providers.

(b) Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration. We may "share" personal information (as defined under the CCPA) with analytics and advertising partners for purposes of cross-context behavioral advertising. Where such sharing occurs, it is limited to online identifiers (such as cookie data and device identifiers) and Internet or electronic network activity information.

We do not knowingly collect, sell, or share the personal information of individuals under eighteen (18) years of age.

Depending on your state of residence, you may have the following rights:

Right to Know / Access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collection, and the categories of third parties with whom we share your personal information.
Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by applicable law.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Opt Out of Sale or Sharing. You may opt out of the "sale" or "sharing" (for cross-context behavioral advertising) of your personal information. You may exercise this right by contacting us at privacy@melius.com, or by enabling a Global Privacy Control ("GPC") signal on your browser. We honor GPC signals as valid opt-out requests.
Right to Limit Use of Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those permitted under applicable law.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your rights under applicable privacy laws.
Right to Appeal. If we deny your privacy request, you may appeal by contacting us at privacy@melius.com. We will respond to your appeal in accordance with the timeframes required by applicable law.

(d) How to Exercise Your Rights

To exercise any of the rights described above, please contact us at privacy@melius.com or submit a request through the mechanisms described on the Service. We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf, provided the agent submits proof of authorization.

(e) California Shine the Light

Under California Civil Code Section 1798.83, California residents may request information about the disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

(f) Automated Decision-Making

We may use automated tools for content moderation and fraud detection purposes. We do not use automated decision-making technology to make decisions that produce legal or similarly significant effects concerning you without human involvement, except where permitted by applicable law.

12. Additional Disclosures for European Users (EEA/UK)

This Section provides additional information for individuals located in the European Economic Area ("EEA") or the United Kingdom ("UK") (collectively, "Europe"). For the purposes of this Section, references to "GDPR" include the EU General Data Protection Regulation (Regulation (EU) 2016/679) and, as applicable, the UK General Data Protection Regulation as incorporated into UK law by the Data Protection Act 2018.

(a) Data Controller

Melius AI, Inc. is the data controller responsible for processing your personal data in connection with the Service. Our contact details are provided in Section 17 (Contact Us).

(b) EU/UK Representative

As Melius is established outside of the EEA and the UK, we have appointed representatives pursuant to Article 27 of the GDPR.

EU Representative (Article 27, EU GDPR):

iuro Rechtsanwälte GmbH t/a Prighter

Schellinggasse 3, 1010 Vienna, Austria

UK Representative (Article 27, UK GDPR):

Prighter Ltd

20-22 Wenlock Road, London, N1 7GU, United Kingdom

We process your personal data only when we have a valid legal basis to do so under the GDPR. The legal bases we rely on include:

Performance of a Contract. We process your personal data as necessary to perform our contract with you (i.e., the Terms), including to create and manage your Account, process your User Input, deliver Outputs, and process payments.
Legitimate Interests. We process your personal data for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Our legitimate interests include operating, improving, and securing the Service, conducting analytics, preventing fraud, and enforcing our Terms. We do not rely on legitimate interests to process personal data where the impact on you would override our interests.
Consent. We process your personal data based on your consent where required by applicable law, such as for marketing communications and non-essential cookies. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Legal Obligation. We process your personal data as necessary to comply with our legal obligations, including tax, accounting, reporting, and regulatory requirements.

(d) Your Rights Under the GDPR

In addition to the rights described in Section 6, European users have the following rights under the GDPR:

Right of Access. You have the right to obtain confirmation as to whether we process personal data about you and to request a copy of such data.
Right to Rectification. You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
Right to Erasure. You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing. You have the right to request restriction of processing of your personal data in certain circumstances, such as while we verify the accuracy of your data following a correction request.
Right to Data Portability. You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where technically feasible.
Right to Object. You have the right to object to processing of your personal data based on our legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent. Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint. You have the right to lodge a complaint with your local data protection supervisory authority in the EEA member state of your habitual residence, place of work, or place of the alleged infringement.

(e) Data Transfers

Your personal data may be transferred to and processed in the United States and other countries outside of Europe. Where we transfer personal data outside of Europe, we rely on the transfer mechanisms described in Section 9 (International Data Transfers), including Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum.

13. Community Gallery

The Service includes a Community Gallery where users may elect to showcase and share their Outputs with other users and the public. Participation in the Community Gallery is entirely voluntary.

If you choose to publish your Output to the Community Gallery, the following information will be displayed publicly alongside your Output:

Your username;
Your profile picture (if provided); and
Any other metadata associated with the Output that you choose to make public.

Your Output and associated metadata will not be displayed in the Community Gallery until you affirmatively elect to publish them. You may remove your Output from the Community Gallery at any time through the Service; however, removal will not affect any uses that occurred before removal or any copies already made by other users in accordance with the Terms.

We encourage you to review the information displayed with your Output before publishing to the Community Gallery. Do not publish any Output that contains or reveals personal information you do not wish to make public.

14. Third-Party Links and Services

The Service may contain links to, or integrations with, third-party websites, applications, or services that are not owned or controlled by Melius. This Privacy Policy does not apply to the practices of third parties. We are not responsible for the privacy practices, content, or security of any third-party website, application, or service. We encourage you to review the privacy policies of any third-party services you access through the Service.

Your interactions with Third-Party AI Model providers, payment processors, and other third-party services integrated with the Service are governed by those third parties' own terms and privacy policies.

15. Enterprise Customers

If you access the Service under an Enterprise Subscription Plan, additional data processing terms may apply. Enterprise customers may enter into a separate Data Processing Addendum ("DPA") with Melius, as described in the Terms. In the event of any conflict between this Privacy Policy and an executed DPA, the DPA will govern with respect to the processing of personal data covered by the DPA.

A list of sub-processors that Melius uses to provide the Service is available upon request. To request the current sub-processor list, please contact us at privacy@melius.com.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. If we make material changes to this Privacy Policy, we will notify you by updating the "Last Updated" date at the top of this Privacy Policy and by providing additional notice as appropriate, such as by posting a notice on the Service, sending you an email notification, or through other reasonable means.

We encourage you to review this Privacy Policy periodically to stay informed about our information practices. Your continued use of the Service after the effective date of any changes to this Privacy Policy constitutes your acceptance of such changes. If you do not agree with the revised Privacy Policy, you must stop using the Service and delete your Account.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Melius AI, Inc.

Attn: Privacy

420 Lexington Avenue, Suite 1402 1018

New York, New York 10170

Email: privacy@melius.com

If you are located in Europe, you may also contact our EU or UK representative as set forth in Section 12(b), or lodge a complaint with your local data protection supervisory authority.