Privacy Policy

Medley ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Medley plugin, website at getmedley.app, and related services (collectively, the "Service").

1. Information We Collect

Information you provide to us

When you create an account or use the Service, we may collect the following information that you provide directly:

• Name and email address (when you register for an account)
• Organization or company name (if applicable)
• Billing information (processed and stored by our payment partner Paddle — we do not directly store your payment card details)
• Communications you send to us (support requests, feedback, emails)

Information collected automatically

When you use the Service, we may automatically collect certain technical information:

• Device and browser information (operating system, browser type, screen resolution)
• IP address and approximate geographic location (country/region level)
• Usage data (features used, frequency of use, error logs, performance data)
• Plugin version and host application information (e.g., which Adobe or Microsoft application you are using)

Information we do NOT collect

Medley acts as a connector between your storage services and creative applications. We want to be clear about what we do not collect or store:

• Your files and assets: We do not store, copy, or retain your digital assets. Files are transferred directly between your storage provider and your creative application through the Plugin. Asset data passes through our servers only temporarily to facilitate the connection and is not persisted.
• Third-party credentials: We use industry-standard OAuth authentication to connect to your storage providers. We do not see or store your passwords for third-party services. We store only the access tokens necessary to maintain your authorized connections, and these are encrypted at rest.
• Payment card numbers: All payment processing is handled by Paddle. We receive confirmation of your subscription status but never see or store your full card details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and operate the Service: authenticating your account, connecting to your storage providers, delivering plugin functionality
• To manage your Subscription: processing payments (via Paddle), managing billing, sending renewal and payment confirmations
• To communicate with you: responding to support requests, sending service-related notices (outages, security alerts, changes to Terms), and product updates
• To improve the Service: analyzing usage patterns, diagnosing technical issues, and understanding which features are most valuable
• To ensure security: detecting and preventing fraud, abuse, and unauthorized access

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

• Payment processing: We share necessary billing information with Paddle to process your Subscription payments. Paddle's handling of your data is governed by their own privacy policy.
• Infrastructure providers: We use hosting and infrastructure services (such as cloud hosting providers) to operate the Service. These providers process data on our behalf under strict data processing agreements.
• Analytics: We may use analytics services to understand how the Service is used. This data is aggregated and does not identify individual users.
• Legal obligations: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: If Medley is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. If you cancel your Subscription and request account deletion, we will delete your personal information within 30 days, except where we are required to retain certain data by law (e.g., billing records for tax compliance).

Usage and analytics data may be retained in anonymized or aggregated form for longer periods to help us improve the Service.

5. Data Security

We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS) and at rest, secure authentication practices, regular security reviews, and access controls limiting employee access to personal data.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing of your information

To exercise any of these rights, please contact us at hello@getmedley.app. We will respond to your request within 30 days.

7. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our infrastructure providers are located. By using the Service, you consent to the transfer of your information to these locations.

Where required by applicable law (such as the GDPR), we will ensure that appropriate safeguards are in place for international data transfers.

8. Cookies and Tracking

Our website uses essential cookies necessary for the site to function (such as session management and authentication). We do not use advertising cookies or third-party tracking cookies.

If we use analytics services, they may place their own cookies. You can control cookie preferences through your browser settings.

9. Children's Privacy

The Service is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected information from a child under 16, we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when this Policy was last revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@getmedley.app.