Privacy Policy
Last updated: 17 May 2025
This Privacy Policy explains how we collect, use, and share personal data when you use the Melon Post service (the "Service"), including via WhatsApp.
1. Controller and contact
Melon Post (part of Thevelop BV) is the controller for personal data processed in connection with the Service.
- Country: The Netherlands
- Contact: thevelop@gmail.com
- KvK: 70109818
- VAT (BTW): NL858145844B01
2. What we collect
We may collect:
- Your contact details: phone number; optionally name and email (for example from checkout).
- Conversation content: messages you send and our replies.
- Media: images you upload; and images generated/edited if you request AI image features.
- Recipient details: recipient name and postal address for delivery.
- Order data: order status, preview approval, price/currency, timestamps.
- Payment data: payment status and identifiers from Stripe (no card numbers).
- Technical and metadata: message IDs, timestamps, and message/webhook metadata from our messaging provider; logs of automated tool actions used to run the Service.
3. Why we process data (purposes)
- To provide the Service: create previews, take payment, print and ship postcards, and send updates.
- To provide support and handle disputes/complaints.
- To prevent fraud/abuse and keep the Service secure and reliable.
- To improve performance and quality (for example debugging logs and conversation summaries).
4. Legal bases (GDPR)
We process personal data under:
- Contract necessity (Art. 6(1)(b)) to fulfill your postcard order.
- Legitimate interests (Art. 6(1)(f)) for security, fraud prevention, and service improvement.
- Consent (Art. 6(1)(a)) where required (for example optional marketing).
5. Who we share data with
We share data with providers needed to operate the Service, such as:
- Messaging provider(s) used to send/receive WhatsApp messages.
- Payment processor: Stripe.
- Print and fulfillment partner(s) and shipping/carrier partners (for printing and delivery).
- Address services (for address lookup/validation).
- AI provider(s) (for generating responses and, if requested, image generation/editing).
- Hosting/storage providers (for database and file storage).
Your use of WhatsApp is also subject to WhatsApp/Meta's own terms and privacy practices.
6. International transfers
Some providers may process data outside the EEA. Where required, we use appropriate safeguards to protect your data.
7. Retention
We keep data only as long as necessary for the purposes above, including fulfilling orders, providing support, and meeting legal/accounting obligations.
8. Security
We apply reasonable technical and organizational measures to protect your data. Please avoid sending sensitive information via chat unless necessary.
9. Your rights
You may have the right to access, correct, delete, restrict processing, object, and request portability. To exercise rights, contact thevelop@gmail.com.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Automated processing
We use automation (including AI) to help respond and operate the Service. We do not intend to make decisions with legal or similarly significant effects solely by automated means.
11. Changes
We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date.