01Information We Collect
1.1 Account & Profile Information

When you create a Meli account we collect the information you voluntarily provide: your display name, email address, date of birth (to verify you are 18 or older), profile photo, gender (optional), country, creator bio, and any interest tags you choose to add. If you register via Apple Sign-In or Google, we receive a limited profile dataset as authorized by you and that provider.

1.2 Device & Technical Information

We automatically collect technical data including device model, operating system version, unique device identifiers, IP address, mobile carrier, app version, crash logs, and performance diagnostics to maintain service quality and diagnose issues.

1.3 Live Stream Session Data

When you broadcast or watch a live stream, we collect session metadata including stream start and end timestamps, viewer counts, peak concurrent audience size, stream title and category, virtual gifts sent and received, and moderation actions taken during the session. See Section 3 for full details on how live stream data is handled.

1.4 Social Feed & Moments Data

When you publish a Moment (a short-form social post such as a photo, video clip, or text update), we collect and store the content, caption, location tag (if you choose to attach one), and any tags or hashtags you include. See Section 4 for full details.

1.5 Usage & Behavioral Data

We record how you interact with the Service, including streams you watch, creators you follow, Moments you like or comment on, search queries you enter, and the frequency and duration of your sessions. This data informs our recommendation and discovery systems.

1.6 Virtual Economy & Transaction Data

If you purchase virtual currency or send/receive virtual gifts, we collect your transaction history (amounts, timestamps, sender/receiver identifiers) within the Meli platform. Payment card processing is handled entirely by Apple App Store or Google Play. We do not store your payment credentials.

1.7 Creator Monetization Data

If you are a creator who earns revenue through Meli's creator program, we collect earnings records, payout history, and any tax or identity verification information required by applicable law to process payments. See Section 21 for full details.

1.8 Communications & Support Data

If you contact our support team, submit a content report, or participate in surveys, we retain the content of those communications and associated metadata for the purpose of resolving your inquiry and improving our services.

02How We Use Your Information
2.1 Operating the Service

We use your information to authenticate your account, enable live streaming and Moment publishing, operate the virtual gift economy, deliver personalized content feeds, enforce community standards, and provide all other core Service functions.

2.2 Discovery & Recommendation

We use your viewing history, followed creators, liked content, and behavioral signals to power Meli's discovery feed, surfacing live streams and Moments we believe you will find compelling. See Section 6 for details.

2.3 Safety & Content Integrity

We process data from user reports, behavioral signals, and content scans to detect and prevent fraud, harassment, prohibited content, and policy violations. Real-time safety systems protect live stream audiences and creators during broadcasts.

2.4 Creator Support & Monetization

We use your creator data to calculate earnings, process payouts, generate performance analytics, and provide you with audience insights to help you grow your channel on Meli.

2.5 Product Improvement

Aggregated and de-identified usage data is analyzed to improve stream quality, discovery accuracy, Moment engagement features, and overall platform performance.

2.6 Marketing & Communications

With your consent where required by law, we may send promotional communications about new features, creator events, and platform offers. You may withdraw consent at any time via in-app settings or the unsubscribe link in any email.

2.7 Legal Compliance

We process personal data as necessary to comply with applicable laws, respond to valid legal process, enforce our Terms of Service, and protect the safety of our users and the public.

03Live Streaming Data
3.1 Public Nature of Live Streams

Live streams on Meli are public by default and viewable by any user on the platform. By going live, you understand and consent to your video feed, audio, and any content you display during the broadcast being visible to Meli users globally in real time. Do not broadcast information you are not comfortable making public.

3.2 Stream Recording & Replay

Meli may offer an automatic replay feature that records your live stream and makes it available to viewers after the broadcast ends. If this feature is enabled (whether by default or by your choice), your stream content will be stored on our servers for the replay period. You may disable replay recording or delete saved replays from your creator dashboard. Where replay is optional, your choice will be clearly presented before or at the start of your broadcast.

3.3 Audience Interactions

Comments, virtual gifts, reactions, and other audience interactions during a live stream are visible to all viewers in real time and may be retained as part of the stream record. Viewers should be aware that their display names and interactions are visible to all participants during a broadcast.

3.4 Safety Monitoring During Streams

Meli operates real-time content monitoring systems during live broadcasts to detect prohibited content including nudity, violence, hate speech, and CSAE-related material. These systems analyze the stream feed for safety purposes. Where prohibited content is detected, the stream may be interrupted and the account subject to enforcement action. See Section 17 for our CSAE policy.

3.5 Stream Metadata Retention

Stream session metadata (title, category, timestamps, viewer counts, gift transactions, and moderation events) is retained for up to 24 months for analytics, creator earnings calculations, and safety enforcement, after which it is anonymized or deleted.

3.6 Camera & Microphone Access

Live streaming requires access to your device camera and microphone, which you grant at the point of first use subject to your device's operating system permission controls. You may revoke these permissions at any time in device settings. Meli does not access your camera or microphone outside of active live stream sessions.

04Social Feed & Moments
4.1 What Are Moments?

Moments are short-form social posts (photos, short video clips, or text updates) that you publish to your Meli profile and the community feed. Moments are your everyday snapshots — behind-the-scenes content, travel updates, lifestyle posts, or anything you want to share with your community.

4.2 Data Collected from Moments

When you publish a Moment, we collect and store: the media content (photo or video file); your caption and hashtags; the location label if you choose to attach one (displayed at city or region level, not precise coordinates); EXIF metadata from uploaded files (geolocation EXIF is automatically stripped before public display); timestamp and account association; and all engagement interactions (likes, comments, shares) from other users.

4.3 Visibility & Privacy Settings

Each Moment can be set to Public (visible to all Meli users), Followers Only (visible to your approved followers), or Private (visible only to you). You may change visibility settings at any time. Public Moments may be surfaced in the discovery feed and viewed by non-followers.

4.4 Moment Deletion

You may delete any Moment at any time from your profile. Deleted Moments are removed from public display within 48 hours and from production servers within 30 days. Residual copies in backup archives are purged within 90 days. Likes, comments, and engagement associated with a deleted Moment are also removed from public view.

05User-Generated Content (UGC)
5.1 Your Content, Your Responsibility

You are solely responsible for all content you publish or broadcast through the Service, including live streams, Moments, comments, profile content, and any other materials. By submitting content, you represent and warrant that you own or have all necessary rights to it and that it complies with these Terms, our Community Guidelines, and applicable law.

5.2 License Grant to Meli

By posting UGC, you grant Meli a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, modify (for formatting and technical compatibility), display, distribute, and promote your content within the Service and in connection with marketing the Service, subject to your privacy settings. You retain ownership of all original content you create.

5.3 Content Moderation

We use automated scanning and human review to moderate both live stream content and Moments for compliance with our Community Guidelines. Prohibited content including nudity, graphic violence, hate speech, misinformation, and CSAE-related material will be removed. Accounts responsible for repeated or severe violations may be suspended or permanently terminated.

5.4 Copyright & Attribution

You must not use copyrighted music, video footage, or other third-party media in your live streams or Moments without proper licensing or authorization. We respond to valid copyright infringement notices submitted to service@meli.club and may remove infringing content and take enforcement action against repeat infringers.

06Personalization Engine
6.1 How We Personalize

Meli's discovery feed is powered by a recommendation system that analyzes your watch history, followed creators, liked Moments, search history, and engagement patterns to surface live streams and Moments most likely to interest you. Personalization is applied to both the live discovery feed and the Moments feed.

6.2 Creator Recommendations

We recommend creators to follow based on your content preferences, viewing history, and the engagement patterns of users with similar taste profiles. Creator recommendation signals do not include sensitive personal data categories and are used solely for in-app discovery.

6.3 Opting Out

You may disable personalized recommendations at any time in Settings > Privacy > Personalization. Meli will then serve a non-personalized, editorially curated discovery feed. Core Service functions are not affected by this setting.

07Information Sharing & Disclosure
7.1 Service Providers

We share personal information with trusted third-party service providers supporting our operations, including cloud infrastructure providers, streaming CDN providers, payment processors, analytics platforms, customer support tools, and content moderation systems. All providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.

7.2 No Sale of Personal Data

We do not sell your personal information. We do not share your personal data with advertisers, data brokers, or third-party marketing platforms for their independent commercial use.

7.3 Creator Earnings & Payment Partners

For creators enrolled in Meli's monetization program, we share necessary earnings and identity information with payment processing partners to facilitate payouts. This sharing is limited to what is required to complete the payment and comply with applicable financial regulations.

7.4 Business Transfers

In the event of a merger, acquisition, or asset sale, your personal data may transfer to the acquiring entity. We will notify you in advance via in-app notice or email before your data becomes subject to a materially different privacy policy, giving you the opportunity to request account deletion.

7.5 Legal Disclosure

We may disclose your information to law enforcement or government authorities when required by applicable law, valid legal process, or to protect user safety. Where legally permitted, we will notify affected users prior to such disclosure.

7.6 Publicly Visible Content

Your username, profile photo, public Moments, stream replays, and public comments are visible to all Meli users and may be indexed by search engines. Setting your account or individual content to private limits this visibility accordingly.

08Third-Party SDKs & Integrations
8.1 Streaming CDN

Live stream delivery relies on third-party CDN (Content Delivery Network) providers to distribute your broadcast to viewers globally with low latency. These providers process encrypted stream data as technical intermediaries under data processing agreements that prohibit independent use of your content.

8.2 Analytics SDKs

We integrate mobile analytics SDKs to measure app performance and feature engagement. These SDKs are configured with privacy-preserving settings, including anonymized event collection and suppression of advertising identifiers absent user consent.

8.3 Content Safety Tools

We use third-party AI-assisted content safety tools for real-time stream monitoring and UGC scanning. These tools process only the data necessary for safety review and are bound by strict confidentiality and data minimization obligations.

8.4 Authentication & Payment Providers

Apple Sign-In, Google authentication, Apple App Store, and Google Play are third-party services each governed by their own terms and privacy policies. Our use of data from these services is limited to authentication, profile creation, and purchase validation.

09Data Retention
9.1 Active Account Data

We retain personal information for as long as your account is active. Accounts with no activity for 24 consecutive months will receive a dormancy notice, after which inactive data may be anonymized or deleted.

9.2 Stream Replays & Recorded Content

Stream replays are retained for a period disclosed in the app (typically 30 to 90 days after broadcast, unless you choose to archive them in your creator profile). You may delete replays at any time from your creator dashboard.

9.3 Safety & Moderation Records

Records of content moderation actions, user reports, and enforcement decisions are retained for up to 36 months after account closure to support pattern analysis, appeals, and legal defense.

9.4 Creator Earnings Records

Creator earnings and payout records are retained for a minimum of seven years to comply with applicable tax, accounting, and financial regulatory obligations.

9.5 Transaction Records

Virtual currency purchase and gift transaction records are retained for a minimum of seven years for accounting and legal compliance purposes.

10Data Security
10.1 Technical Safeguards

We implement industry-standard security including TLS 1.2+ encryption for data in transit, AES-256 encryption for sensitive data at rest, strict role-based access controls, encrypted stream delivery via secure CDN protocols, and automated anomaly detection for unusual access patterns.

10.2 Organizational Safeguards

Access to user data is need-to-know, requires multi-factor authentication, and is subject to comprehensive audit logging. All personnel with access to personal data are trained in data protection and bound by confidentiality agreements.

10.3 Vulnerability Management

We conduct regular security assessments and third-party penetration testing. If you discover a security vulnerability, report it responsibly to service@meli.club.

10.4 Breach Notification

In the event of a personal data breach posing risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours where required by law, and inform affected users without undue delay.

11Cookies & Tracking Technologies
11.1 In-App Technologies

The Meli app uses session tokens, local storage, and analytics SDKs (not traditional browser cookies) to maintain your authenticated session, remember app preferences, and measure feature engagement for product improvement.

11.2 Advertising Identifiers

On iOS, we request your consent via Apple's App Tracking Transparency (ATT) prompt before accessing your IDFA. On Android, we respect your opt-out of personalized advertising via device settings. Advertising identifiers are used solely to measure our own user acquisition campaign effectiveness and are not shared for third-party behavioral advertising.

11.3 Web Properties

Our website and help center may use standard browser cookies for session management and analytics. You may manage these via your browser settings.

12Cross-Border Data Transfers
12.1 Global CDN Infrastructure

Live streaming requires global CDN infrastructure to deliver content with low latency to audiences worldwide. Stream delivery data is processed in CDN nodes geographically distributed across multiple regions. All such processing is governed by appropriate contractual safeguards.

12.2 Transfer Safeguards

For transfers of personal data from the EEA, UK, or Switzerland to countries lacking an adequacy decision, we rely on EU Standard Contractual Clauses (SCCs) and, where applicable, the UK IDTA. Equivalent safeguards apply to other cross-border transfers.

12.3 Data Localization

Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to store and process the required data categories within the mandated territory.

13Your Privacy Rights
13.1 Access

Request a copy of personal data we hold about you via your in-app settings or by emailing service@meli.club with subject “Data Access Request.”

13.2 Rectification

Correct or update inaccurate information directly in your account settings or by contacting us. We will action corrections within 30 days.

13.3 Erasure

Request deletion of your account and personal data via Settings > Account > Delete Account or by emailing us. See Section 20 for full deletion details.

13.4 Objection & Restriction

Object to or request restriction of processing in certain circumstances. We will pause relevant processing while assessing your objection.

13.5 Data Portability

Where processing is based on consent or contract and automated, request your data in a structured, machine-readable format (e.g., JSON) for transfer to another service.

13.6 Withdrawal of Consent

Withdraw consent for marketing or optional personalization at any time via in-app settings or by contacting us, without affecting prior lawful processing.

13.7 How to Submit

Email service@meli.club with “Privacy Rights Request” in the subject, your registered email, and a description of your request. We verify your identity and respond within the timeframe required by applicable law.

14GDPR — EEA & UK Users
14.1 Data Controller

For EEA and UK users, Meli acts as data controller under the GDPR and UK GDPR respectively.

14.2 Legal Bases

We process your data under: (a) contractual necessity (to provide the Service); (b) legal obligation (regulatory compliance); (c) legitimate interests (safety, fraud prevention, service improvement), where not overridden by your rights; and (d) consent (for marketing and optional personalization).

14.3 Supervisory Authority

If you believe your data has not been handled lawfully, you may lodge a complaint with your national data protection supervisory authority. We encourage you to contact us first to attempt direct resolution.

15CCPA / CPRA — California Users
15.1 California Rights

California residents have rights under the CCPA as amended by the CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. Meli does not sell personal information and does not share it for cross-context behavioral advertising.

15.2 Non-Discrimination

Exercising your California privacy rights will not result in denial of services, different pricing, or reduced quality of experience.

15.3 Authorized Agents

California residents may designate an authorized agent to submit privacy requests by providing written proof of authorization. We verify the identity of both agent and resident before processing any request.

16Brazil — LGPD
16.1 Rights Under LGPD

Brazilian users have rights under the Lei Geral de Protecao de Dados (LGPD), including confirmation, access, correction, anonymization, blocking, deletion, portability, and information about sharing, as well as the right to withdraw consent.

16.2 Legal Bases

We process personal data of Brazilian users based on contract performance, legal obligation, and consent where applicable. We do not rely on legitimate interests alone to process sensitive data categories of Brazilian users.

16.3 ANPD

Brazilian users may lodge complaints with the Autoridade Nacional de Protecao de Dados (ANPD) if they believe their data has been processed in violation of the LGPD.

17Children's Privacy & CSAE Policy
17.1 Age Restriction

Meli is designed exclusively for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18. Date-of-birth verification is required at registration and additional detection measures are applied to accounts suspected of being operated by minors. Accounts confirmed to belong to users under 18 will be immediately terminated and all associated data deleted.

17.2 Parental Notification

If you are a parent or guardian and believe a minor has created a Meli account, contact us immediately at service@meli.club. We will investigate and, where confirmed, permanently delete the account and all associated data without delay.

Child Sexual Abuse and Exploitation (CSAE) — Zero Tolerance
Meli enforces an absolute zero-tolerance policy toward any content, conduct, or activity that constitutes, facilitates, promotes, or glorifies CSAE in any form. Given that Meli is a live streaming platform with real-time video broadcast capabilities, we treat this commitment with the highest operational urgency. Prohibited conduct includes, without limitation: child sexual abuse material (CSAM) in any medium; grooming, solicitation, or exploitation of individuals under 18; any use of live streaming features to broadcast or display exploitative content involving minors; and any trafficking or endangerment of persons under 18.

We deploy automated CSAM hash-matching, AI-assisted real-time stream monitoring, and dedicated human safety reviewers to detect and eliminate CSAE material. Upon confirmed detection or credible report, we immediately: permanently remove all associated content; permanently terminate the responsible account and all associated identifiers; file a mandatory report with the NCMEC CyberTipline or the legally required equivalent national authority; and cooperate fully and proactively with all resulting law enforcement investigations.

To report suspected CSAE on Meli, use the in-app Report function on any stream, Moment, or profile, or email service@meli.club with subject “CSAE Report.” These reports are our absolute highest-priority safety matter.
17.3 Ongoing Safeguards

We conduct regular reviews of our child safety policies and moderation procedures, collaborate with recognized child safety organizations, and continuously update our detection capabilities to reflect evolving best practices and legal requirements.

18Virtual Gifts & Economy
18.1 Virtual Currency

Meli may offer virtual currency (e.g., coins or credits) that users can purchase and use to send virtual gifts to creators during live streams. All virtual currency purchases are processed exclusively through Apple App Store or Google Play. Meli does not store your payment card details.

18.2 Gift Transaction Data

When you send a virtual gift, we record the sender identifier, recipient identifier, gift type, amount, and timestamp. This data is used to calculate creator earnings, generate sender activity history, and detect fraudulent or abusive gift patterns.

18.3 Virtual Currency Properties

Virtual currency has no cash value, is non-transferable between accounts, is non-refundable except as required by applicable law or app store policy, and may expire in accordance with terms disclosed at the point of purchase. Virtual currency balances may be forfeited upon account termination for cause.

19Notifications & Communications
19.1 Notification Types

Meli may send push notifications for: live stream alerts from creators you follow; new Moments from followed accounts; likes, comments, and shares on your content; virtual gifts received; creator earnings milestones; platform feature announcements; and account security alerts.

19.2 Managing Preferences

Control notification types in Settings > Notifications. You may also disable push notifications via your device's OS settings. Disabling all notifications may cause you to miss important security alerts.

19.3 Email Communications

Transactional emails (account confirmations, security alerts, payout receipts) are necessary for Service operation and cannot be unsubscribed from while your account is active. Marketing emails are optional and can be unsubscribed from at any time.

20Account Deletion & Data Erasure
20.1 How to Delete

Delete your Meli account at any time via Settings > Account > Delete Account, or by emailing service@meli.club with “Account Deletion Request” in the subject line.

20.2 What Happens

Your profile, Moments, and stream replays are removed from public view within 48 hours. Personal data is deleted from production servers within 30 days. Backup archives are purged within 90 days. Any pending creator earnings are processed before deletion, subject to minimum payout thresholds and verification requirements.

20.3 Retained Data

Certain data is retained post-deletion where required by law: creator earnings and tax records (up to 7 years); safety and moderation records (up to 3 years); transaction records (up to 7 years); and data subject to an active legal hold.

21Creator Monetization Data
21.1 Creator Program Data

Creators enrolled in Meli's monetization program provide additional information to enable payouts, including government-issued identity documents (for verification), tax information, and payout account details (bank account or supported payment method). This information is collected and processed under strict security controls and shared only with payment processing partners as necessary to complete payouts.

21.2 Earnings Analytics

We provide creators with analytics dashboards showing stream performance, audience demographics (in aggregate), gift revenue, and payout history. These analytics are provided solely for the creator's own use and are not shared with other users or third parties.

21.3 Tax Compliance

Where required by applicable tax law, we may issue tax forms (such as Form 1099 in the United States or equivalent documents in other jurisdictions) to creators who meet applicable earnings thresholds. Creator tax information is processed and stored in accordance with applicable tax regulations and our data retention obligations.

22Governing Law & Disputes
22.1 Applicable Law

This Policy is governed by applicable international data protection law and the laws of the jurisdiction in which Meli is incorporated, except where mandatory local law in your country of residence imposes higher standards that cannot be contractually excluded.

22.2 Regulatory Recourse

If our response to a direct complaint has not resolved your concern, you retain the right to escalate to the relevant data protection supervisory authority in your country of residence.

23Policy Updates
23.1 How We Notify You

We may update this Policy periodically. For material changes, we notify you at least 14 days in advance via in-app notice, push notification, and/or email to your registered address. Non-material corrections may be made without advance notice.

23.2 Continued Use

Your continued use of Meli after the effective date of any revised Policy constitutes acceptance of the updates. If you do not agree, you may delete your account before the changes take effect.

23.3 Version Archive

Prior versions of this Policy are available upon request at service@meli.club.

24Contact Us
24.1 Privacy Inquiries

For questions, concerns, or data rights requests:

We aim to acknowledge inquiries within 5 business days and respond substantively within 30 days.

24.2 CSAE & Child Safety Reports

Report suspected CSAE via the in-app Report function on any stream, Moment, or profile, or email service@meli.club immediately with subject “CSAE Report.” These reports are our absolute highest-priority safety matter and will be actioned without delay.