Privacy notice

1. Who is responsible

Mello is responsible for personal information handled to provide the platform. For privacy requests or questions, contact legal@itsmello.cloud; for general support, contact support@itsmello.cloud.

2. Information we process

We process account details such as email address, display name if supplied, verification state, account identifier and authentication records; project names, deployment details and API key identifiers; request counts and limits; support and bug reports you submit; and account or staff actions recorded for security and administration. Service providers may also process technical information such as IP addresses, device information and request metadata for security and delivery.

3. Your API content and users’ data

We process code you deploy and requests sent to your API to operate the service. Depending on your implementation, your API may receive personal information about other people. You are responsible for your own notices, lawful bases, security and retention practices for that information. Do not include passwords, API keys or other secrets in bug reports or source files.

4. Why we process information

We use information to create and secure accounts, authenticate users, host APIs, enforce usage limits, answer support requests, investigate reports, protect the platform, manage staff access and maintain records. Depending on the activity, the legal basis may be performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and securing the service, balanced against your rights. Where consent is legally required, we will ask for it.

5. Service providers and transfers

We use service providers for identity, infrastructure, hosting, storage, delivery and operational support. Providers process information as needed for their roles. Some processing may occur outside your country or the European Economic Area; where applicable, appropriate transfer safeguards are required. Contact us for information about recipients and relevant safeguards.

6. Account status and human review

Mello automatically displays account state using factual information such as verification, restrictions and API usage. Reaching a usage threshold is not a misconduct finding. Staff may review reports and technical signals and take proportionate action where necessary. You may contact support to question a decision and request human review. We do not describe a traffic threshold as evidence of wrongdoing.

7. Staff access and account references

The team panel uses a keyed account reference instead of displaying account names and email addresses. This reference is pseudonymous, not anonymous: authorised systems can associate it with an account. Authorised staff can review relevant status and support reports, and administrative actions are recorded. Do not include personal or confidential information in reports unless needed to explain the issue.

8. Storage and retention

Information is retained for the period needed to provide the service, resolve disputes, meet legal obligations and protect the platform. Retention depends on the type of information and the applicable security, legal and operational needs. Records may remain where necessary for legitimate security, legal or audit purposes. Deleting an account may require removing deployed resources and may not immediately remove all operational records.

9. Cookies and local storage

Mello uses browser storage and authentication mechanisms to maintain your signed-in session and provide essential functionality. Clearing site data or using a private browser session may sign you out. If additional analytics or non-essential technologies are introduced, we will update this notice and obtain consent where required.

10. Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also request human review of a decision where applicable. Contact legal@itsmello.cloud; we may need to verify your identity before acting. You may lodge a complaint with the Portuguese data protection authority, CNPD, or another competent authority.

11. Security and limitations

We use access controls and other measures designed to protect information, but no service can guarantee absolute security. Keep credentials private, use strong passwords, revoke exposed API keys and keep copies of important data. Do not use the service for sensitive or safety-critical information without independently assessing whether the protections meet your needs.

12. Changes and contact

We may update this notice as the service changes and will give notice when required. Questions and rights requests can be sent to legal@itsmello.cloud.