Privacy Policy
Effective date: November 11, 2026
Last updated: November 11, 2026
Who we are
This Privacy Policy explains how Nihal Murmu, an individual operating under the name Mellobase ("Mellobase", "we", "us", or "our"), collects, uses, shares, and retains information when you use mellobase.com, our creator profiles, and related services (the "Service").
Information we collect
Information you provide
- Account and profile information: Information you submit, such as your display name, biography, professional categories, location, languages, contact email, website and social links, and availability for work.
- Images and other content: Profile pictures, banners, and other content you upload or choose to publish.
- Communications: Information you include in support requests, privacy requests, or other correspondence with us.
A profile may include contact information for another person, such as a manager, if you choose to provide it.
Information from Google sign-in
When you sign in with Google, we receive information needed to create and authenticate your account, such as your name, email address, Google account identifier, and profile image, depending on the permissions granted. We also process authentication credentials or tokens as needed to maintain your sign-in.
Information from Instagram
When you authorize an Instagram connection, we collect the information made available through the permitted Meta APIs, including your Instagram account identifier, username, name, biography, profile image, follower information, and available performance metrics such as reach, views, accounts engaged, interactions, and follower activity.
While the connection is active, we periodically synchronize permitted information. We store historical observations, relevant API responses, synchronization records, and calculated metrics to provide and maintain creator analytics and professional profiles. Some metrics are derived from provider data and may differ from the figures displayed in Instagram.
Instagram data is processed subject to applicable Meta Platform Terms and other applicable platform requirements. Meta separately governs information processed within its own services.
Technical information and cookies
When you access the Service, we process IP addresses, user-agent information, authentication activity, and technical logs as needed for security, troubleshooting, and operation. We use essential cookies to maintain authenticated sessions. We do not use advertising or cross-site tracking cookies.
How we use information
We use information to authenticate accounts; create, manage, and display creator profiles; connect and synchronize authorized platforms; calculate and display analytics; maintain and secure the Service; respond to requests; and meet applicable legal obligations.
We do not sell personal information or use it for targeted advertising.
Public profiles, sharing, and service providers
When you publish a professional profile, the information and analytics displayed on that profile become publicly accessible. This may include your name, images, biography, location, professional categories, contact details, links, and selected analytics. Public pages may be viewed, shared, indexed by search engines, or accessed by automated services. Unpublishing a profile stops Mellobase from displaying it publicly but cannot remove copies already made by others or cached by search engines.
We use service providers to operate the Service, including Vercel (web hosting), Railway (application infrastructure), Neon (database hosting), Cloudflare R2 (file storage), and Better Stack (operational logging and monitoring). These providers may process information for the services they provide to us. Google and Meta also process information when you use their sign-in or integration services, under their respective terms and policies.
We may disclose information when required by applicable law or valid legal process, or when otherwise legally permitted and necessary to protect rights or safety. Links to third-party websites on creator profiles lead to services governed by their own policies.
Security and retention
We use technical and organizational safeguards, including encrypted connections, access controls, and encryption of connected-platform credentials. No method of storage or transmission is completely secure.
We generally retain account, profile, and connected-platform information while it is needed to provide the Service and the authorized connection or account remains active, subject to applicable platform requirements. Technical and support records are retained for periods appropriate to their operational, security, or legal purposes. We also retain relevant historical platform observations while permitted and necessary for the Service.
Disconnecting Instagram is not the same as deleting your Mellobase account. Disconnecting stops future authorized synchronization and removes the stored Instagram access credentials, but previously collected history and a published professional profile may remain. You can request deletion of the Instagram information we hold using the process below. Because the Instagram connection is currently integral to the creator profile, fulfilling that request may also require closing the corresponding Mellobase account; we will explain this when handling the request.
Your rights and data deletion
You may contact us to request access to, correction of, a copy of, or deletion of personal information we hold about you, subject to applicable law. We may need to verify your identity before acting on a request.
To request deletion of your Mellobase account or Instagram data, email privacy@mellobase.com from the email address associated with your account, with the subject DELETE MY ACCOUNT or DELETE MY INSTAGRAM DATA, as applicable. If you cannot access that email address, explain this in your request so we can verify ownership by another appropriate method.
After verification, we begin the applicable deletion process promptly and delete account-associated personal information and connected-platform data from active systems as soon as reasonably possible. We aim to complete ordinary requests within 30 days of verification, sooner where reasonably possible, subject to applicable legal requirements. This is not a mandatory 30-day waiting period or an account-restoration window.
We may retain a minimal record of the request and its completion for up to 12 months, and other information only where retention is legally required or otherwise permitted. Information in restricted backups may remain until the backups expire on their normal schedule and is not used for routine operations. If backup data is restored, we take steps to ensure previously completed deletions remain effective.
Deleting information held by Mellobase does not delete your Instagram account or data held independently by Meta. Further instructions are available at Data Deletion.
Children's privacy
The Service is intended for people aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we learn that an underage person has created an account, we will take appropriate steps to close the account and delete the information. Contact privacy@mellobase.com if you believe a child has provided information to us.
International processing
Our infrastructure and service providers may store or process information in different countries. We take measures appropriate to applicable law to protect personal information when it is processed across borders.
Changes to this policy
We may update this policy to reflect changes to the Service or applicable requirements. We will update the date above and provide notice of material changes where appropriate or required by law.
Data controller
Nihal Murmu, an individual based in Hyderabad, Telangana, India, operating under the name "Mellobase" is the data controller (also referred to as a data fiduciary under Indian data protection law).
Contact
Privacy requests: privacy@mellobase.com
Support: support@mellobase.com