Mélange Connect Ltd ("Mélange", "we", "us") operates the platform at melange.art, including the website, mobile app, and any related services. This policy explains what personal data we collect, why we collect it, how it is stored, and what rights you have over it.
Mélange is incorporated in Switzerland and operates across Australia, the United Kingdom, and the European Union. We comply with the UK GDPR, EU GDPR, and the Swiss Federal Act on Data Protection (nDSG).
Short version: we collect only what we need to run the platform. We don't sell your data. We don't share it with advertisers. You can request deletion at any time.
When you create a Mélange account or complete onboarding, we collect:
When you use the platform, we may collect:
We do not use tracking cookies, advertising pixels, or third-party analytics that profile you across other websites.
We process your data for the following reasons:
We do not use your data for advertising, profiling for third parties, or automated decision-making that has legal or significant effects on you.
All Mélange data is stored on Supabase, a managed Postgres database platform hosted on AWS infrastructure in the EU region. Data is encrypted at rest and in transit (TLS 1.2+).
Access to your data is protected by Row Level Security (RLS) policies at the database level — meaning no other user can read, edit, or delete your private information, even if they know your user ID. Only you (authenticated as yourself) and Mélange administrators can access your full record.
Profile photos are stored in a separate Supabase Storage bucket. Your photo is publicly readable (so it loads on your profile) but only you can upload, replace, or delete it.
Your password is never stored by Mélange. Authentication is handled entirely by Supabase Auth, which uses bcrypt hashing and industry-standard session tokens.
Your public profile — name, role, city, discipline, bio, photo, and portfolio — is visible to anyone who visits melange.art. This is the core function of the platform: helping creatives be found.
Your private data — email address, account settings, message history — is visible only to you and Mélange administrators.
We do not sell, rent, or share your personal data with any third party for commercial purposes. The only third parties who process your data are:
We may disclose data if required by law, court order, or to protect the safety of our users — but we will notify you if legally permitted to do so.
Under UK GDPR, EU GDPR, and the Swiss nDSG, you have the following rights:
To exercise any of these rights, email us at info@melange.art. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
We keep your data for as long as your account is active. If you delete your account, we will permanently remove your profile, photo, portfolio items, and messages within 30 days.
Some minimal records (such as anonymised usage logs) may be retained for up to 12 months for security and abuse-prevention purposes.
If you have not logged in for 24 months and have not responded to a re-engagement email, we may archive or delete your account and notify you beforehand.
Mélange is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, please contact us at info@melange.art and we will remove it promptly.
We may update this policy as the platform evolves. When we make material changes, we will notify you by email or via an in-app notice at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the current version.
Continued use of Mélange after a policy change constitutes acceptance of the updated terms.
For any privacy-related questions, data requests, or concerns:
Mélange Connect Ltd is the data controller for all personal data processed through melange.art.