MelloJam Privacy Policy

Updated: July 24, 2026

This policy explains how MelloJam handles personal data when you visit our website or use our business music service.

Who is responsible for your data

MelloJam is operated by WorkJoy ApS, CVR 43125869, c/o Hans-Kristian Bjerregaard, Frederiksberg Allé 26, 3. tv., 1820 Frederiksberg C, Denmark. WorkJoy ApS is the data controller for the processing described in this policy.

Questions and data protection requests can be sent to hi@workjoy.co.

Data we collect

Depending on how you use MelloJam, we collect:

• Account information, including name, business name, email address, a hashed password, account relationships, and acceptance of our legal terms.
• Service information, including saved lists, player settings, plan and subscription status, and activity needed to operate the player.
• Communications you send to us.
• Technical and security information, including IP address, request time, browser or device information, and login and server logs.
• Billing and transaction information, including subscription, invoice, payment status, and tax information. Stripe collects and processes payment-card and payment-method details. MelloJam does not store those details.

We do not sell personal data or use it for targeted advertising.

Why and how we use data

We use personal data to:

• create, authenticate, administer, and delete Accounts;
• provide and personalize the website and player;
• operate trials, subscriptions, billing, and accounting;
• communicate essential account, payment, security, legal, and service information;
• provide support, prevent misuse, and protect the Service;
• comply with legal obligations and establish, exercise, or defend legal claims; and
• understand aggregate website usage through cookieless analytics.

Our legal bases under the GDPR are performance of a contract, our legitimate interests in operating, improving, and securing the Service, compliance with legal obligations, and consent where we specifically request it.

MelloJam does not send marketing emails at launch. If we introduce marketing later, we will first implement the consent or opt-out process required by applicable law and update this policy where necessary.

Analytics and cookies

We use Plausible Analytics in its standard cookieless configuration to obtain aggregate website statistics. We do not send Plausible information intended to identify individual visitors or users through custom properties.

MelloJam uses only storage and cookies that are necessary for functions such as authentication and security. We do not use advertising cookies, advertising pixels, or session-recording tools. If this changes, we will update this policy and request consent where required.

Service providers and international transfers

We use the following providers:

• Hetzner hosts the MelloJam website, API, database, and music files on servers in Germany.
• Stripe processes subscription payments and related billing information.
• Plausible provides cookieless, aggregate website analytics.

These providers process data only as needed to provide their services and under appropriate contractual safeguards. We may also disclose information when required by law, to protect MelloJam or others, or as part of a corporate transaction.

If personal data is transferred outside the European Economic Area, we use a lawful transfer mechanism, such as an adequacy decision or the European Commission Standard Contractual Clauses, where required.

We have not yet selected an email delivery provider. We will review its privacy and transfer terms and update this policy as necessary before connecting it to MelloJam.

Retention and deletion

• Active Account and service data are retained while needed to provide the Service.
• When a paid subscription is cancelled, ordinary Account and usage data are deleted from active systems when the paid billing period ends. During a free trial, cancellation triggers immediate deletion.
• Residual encrypted backup copies expire within 30 days. If a backup is restored before expiry, the deletion is applied again.
• Technical and security logs are retained for up to 30 days.
• Payment-card and payment-method data are not stored by MelloJam. Other payment-related data held by MelloJam is deleted immediately when no longer needed.
• Invoices and accounting records are retained for five years after the end of the financial year to which they relate, as required by Danish bookkeeping law.
• Limited information may be retained longer where required by law or reasonably necessary for an unresolved dispute, then deleted when that need ends.

Security

We use technical and organizational measures designed to protect personal data, including encrypted connections, access controls, hashed passwords, backups, and restricted administrative access. No online service can guarantee absolute security.

Your rights

Subject to applicable law, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where processing is based on consent; and
• complain to a data protection authority.

Contact hi@workjoy.co to exercise a right. We may need to verify your identity. In Denmark, the supervisory authority is Datatilsynet.

Changes to this policy

We may update this policy as MelloJam changes or legal requirements develop. The date at the top shows the latest revision. Material changes may also be communicated through the Service or by email.