Effective date: January 1, 2026
This policy explains what personal data Melodynk collects, why, and what your rights are. It covers Melodynk.com and every purchase made on it.
Melodynk.com (“Melodynk,” “we,” “us,” “our”) is a digital art workshop and online store selling downloadable digital art files. We are the controller of the personal data described in this policy.
Registered address: 169 Madison Ave STE 15155, New York, NY 10016, United States.
Account data. Your name, email address, and login credentials when you create an account.
Order and payment data. Your name, email, billing details, and order history. Card payments are processed by Stripe; we never see or store your card numbers.
Delivery and acceptance records. Records of your acceptance of our Terms of Use, order confirmations, and download and access logs for your purchased files.
Support messages. Messages you send through our contact form (delivered to our support email) or by WhatsApp. WhatsApp messages are also processed by WhatsApp (Meta) under its own terms.
Marketing data. Your email address, if you subscribe to our emails.
Website and cookie data. Usage data collected through cookies and Google Analytics, as described in Section 5.
We do not knowingly collect any sensitive categories of data, and we do not want them — please don’t include them in messages to us.
Account and order data is needed to sell and deliver to you; without it, we cannot complete a purchase. Everything else, such as marketing emails and non-essential cookies, is optional.
We use your data only for the purposes below, each with its legal basis:
| Purpose | Legal basis |
|---|---|
| Creating your account, processing orders, delivering files, ongoing download access, support | Performance of our contract with you |
| Keeping tax, accounting, and transaction records | Legal obligation |
| Site security, fraud prevention, chargeback defense, protecting our artworks from unauthorized distribution (Section 4) | Our legitimate interests |
| Marketing emails | Your consent — unsubscribe anytime |
| Analytics and non-essential cookies | Your consent, where required |
We do not sell personal data, and we do not use your data for automated decisions that have legal effects on you.
Every artwork file we sell includes an invisible digital identifier connected to the order it was purchased in. We use it for one purpose: tracing unauthorized copying, sharing, or resale of our files, as described in Section 10 of our Terms of Use. It contains nothing visible, does not affect the artwork, and is kept with the order record. Embedding is performed for us by a specialized content-protection provider.
We use cookies for essential site functions, and — with your consent where required — for analytics (Google Analytics) and security (Google reCAPTCHA). When you first visit, our cookie banner (powered by CookieYes) lets you accept or decline non-essential cookies, and you can change your choice anytime through the cookie settings link on the site.
We share personal data only with providers that help us run the store, and only what they need: payment processing (Stripe), web hosting, content delivery and site security (Cloudflare), analytics and reCAPTCHA (Google), email marketing (Mailchimp), cookie-consent management (CookieYes), backup services, our content-protection provider, and the technical team that maintains the site under confidentiality obligations. We disclose data beyond this only when the law requires it or to protect our legal rights.
We are a US business, and data is processed in the United States. Several of our providers participate in the EU-US Data Privacy Framework; where a provider is not certified, transfers from the EU or UK rely on Standard Contractual Clauses or another lawful transfer mechanism. You can ask us which mechanism applies to a specific provider.
Account and order records: for as long as your account is active, so you keep ongoing access to your purchases, and afterward as long as tax and accounting law requires. Acceptance, delivery, and access logs: with the order record, as evidence of the transaction. The file identifier: with the order record. Support messages: as long as needed to resolve and follow up on your request. Marketing data: until you unsubscribe; after that we keep your address only on a do-not-email list. Cookie-consent logs: as managed by our consent tool.
We maintain reasonable administrative, technical, and physical safeguards appropriate to the size of our business: encrypted connections (HTTPS), access limited to the owner and the technical team on a need-to-know basis, reputable service providers, and prompt disposal of data we no longer need. If a breach affecting your data ever occurs, we will notify you and the authorities as the law requires, including under New York’s SHIELD Act.
Wherever you live, we honor these rights over your data: access and receive a copy, correct it, delete it, receive it in a portable format, object to or restrict our use of it, withdraw consent, and unsubscribe from marketing at any time.
To exercise any of them — including account removal — use our contact page. We will verify your identity and answer your request within three business days. If your request involves deleting data, removal begins immediately after our answer. As the law provides, completing a request can take up to one month, and unusually complex requests can take up to two further months — we would tell you within the first month if that were the case. One warning before account removal: it ends your dashboard access to purchased files, so download your files first. Two honest limits: records the law requires us to keep (such as tax records) are kept for the legal period, and order records tied to the file identifier are kept for as long as we need to protect our artworks.
If you are in the EU or UK, you can also complain to your data protection authority. In the US, you can contact your state attorney general.
Our artworks are for everyone, but purchasing is for adults 18 and older, because a purchase is a binding contract (see our Terms of Use). We do not knowingly collect personal data from minors, and we delete it if we discover it.
We may update this policy. Changes take effect when posted with an updated effective date, and material changes will be notified on the website or by email.
Privacy questions and requests: contact us.