1. Who we are
Melantha is an online service provided by Euphora Labs, TOO, Krylova 44, Karaganda, Kazakhstan ("we"). We are the controller of your personal data.
- Privacy requests and complaints: privacy@melantha.ai
- UK representative (Article 27 UK GDPR): Ilya Tsymbal, Altus House, Tower House Street, Leeds LS2 8GH, United Kingdom
- EU representative (Article 27 GDPR): details will be added to this policy.
2. What we collect
- Account. Your email address. If you sign in with Google, we keep your email address and your Google account ID, and not your name or photo.
- What you write. Your conversation with the intake, your dilemma summary, your deadline, chat titles, your answers to other people's dilemmas, and what happened after your decision.
- What we create from it. A topic, a one-line description of your situation, a numerical representation of your summary used to find similar dilemmas, your agent's profile built from your answers, a trust score for your agent, and predictions made by AI agents, including your own agent's prediction about you.
- Use of the service. Your settings, daily counts, emails sent to you, and your answers to our short surveys.
- Technical data. Your IP address and browser details, used for sign-in security and to prevent abuse.
Sensitive information. You may choose to write about your health, relationships, beliefs or other sensitive matters. We process it only because you choose to share it, and only to provide the service to you. You can remove it at any time by deleting the chat or your account. Please do not include names or contact details of other people.
You need an email address to create an account. Everything else you write is your choice, but without a dilemma there is nothing for Melantha to answer.
3. How we use it
- To provide the service (the intake, your summary, the answers of the fifty agents, results, your agent, emails about your dilemmas): performance of our contract with you.
- To let others answer you, and your agent answer others: your confirmed summary is shown to other users, and your agent answers their dilemmas. This is part of the service; you can stop your agent from answering in settings.
- To keep the service safe (security, abuse prevention, usage limits): our legitimate interests.
- To understand and improve the service (analytics tied to a random account ID, never to your name or email; surveys; de-identified statistics), and we may train and improve our own AI models using information from which anything identifying you has been removed: our legitimate interests. We never share your data for others to train their models. You can object at any time.
- To meet legal obligations.
We do not make decisions about you that have legal or similarly significant effects by automated means. Your agent's trust score only affects whether and how much your agent's answers are used in other people's results.
4. Who receives it
- Other users see your confirmed summary, never your name or email address. You never see who answered you.
- Our service providers, who process data on our behalf under data processing agreements: Supabase (database and sign-in, United Kingdom), Railway (application hosting, Netherlands), Anthropic (AI models, United States), Voyage AI (text representations, United States), Resend (email, United States), PostHog (analytics, European Union), Cloudflare (network security), and Google (only if you sign in with Google).
- Cloudflare Turnstile checks, without a visible test, that sign-in requests come from a person. It processes signals such as your IP address and browser details, as described in the Cloudflare Turnstile Privacy Addendum.
- Authorities, when the law requires it.
- A successor, if Melantha is transferred or reorganised, who must protect your data as described here.
Our AI providers do not use your data to train their models. Anthropic deletes it within 30 days, or keeps it for up to 2 years if it is flagged under its usage policy. We never sell your personal data or share it for advertising.
5. How we protect it
Everything you write is encrypted with AES-256-GCM before it reaches our database, with keys kept separately from the database. All connections use TLS. Only systems that need your data can reach it. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
6. How long we keep it
- Your account: until you delete it.
- Your intake conversation: deleted when you confirm your summary, or after 30 days without activity if you do not.
- When you delete a chat or your account: we delete what you wrote and what we created from it. What others contributed stays, with no link to you: people's answers to your dilemma with a one-line description of the situation that contains no names, and the AI agents' predictions about it, which we keep only to measure how well agents predict. Answers your agent already gave to others stay in their results.
- Analytics: up to 2 years, tied to a random account ID, never to your name or email.
- Backups and provider logs: removed on their normal cycle, which for our database is up to 7 days.
7. International transfers
Some providers process data outside your country, including in the United States. We rely on adequacy decisions, including the EU-US Data Privacy Framework and its UK extension where the provider is certified, or on standard contractual clauses approved by the European Commission and the UK. You can ask us for a copy.
8. Your rights
You can access, correct, delete or export your data, restrict or object to its use, and withdraw consent at any time. You can delete chats and your whole account in the app. For anything else, write to privacy@melantha.ai. We reply within one month and may ask you to confirm your identity.
If you have a complaint, write to us first: we acknowledge complaints within 30 days. You can also complain to the Information Commissioner's Office in the UK or to your data protection authority in the EU.
9. United States residents
You can ask to know, access, correct or delete your personal data, and appeal our decision by replying to it. We do not sell or share personal data for targeted advertising, and we use sensitive data only to provide the service. We will not treat you differently for using your rights. Residents of Washington and Nevada: see our Consumer Health Data Privacy Policy.
10. Age
Melantha is only for people aged 18 and over. If we learn that we hold data of someone younger, we delete it.
11. Cookies
We use only cookies that the service needs to work: one that keeps you signed in, one that lives for 30 seconds while a new chat is created, and security cookies set by Cloudflare. Our analytics use no cookies. We use no advertising or tracking cookies.
12. Changes
If we change this policy in a way that matters, we will tell you by email or in the service before the change takes effect.