Privacy policy

Who this is about

Meldom is made and operated by Vildan Bina (“we”, “us”), the sole operator of meldom.com. Questions about anything on this page go to [email protected].

Where your data lives

Everything Meldom records — projects, tickets, notes, comments, agent conversations, attachments and diagnostic logs — is written to a database and a set of files on your own disk, under ~/.meldom. Nothing is uploaded to us. Deleting that directory deletes your data; we hold no copy and cannot restore one.

No telemetry

Meldom sends no telemetry, no usage analytics and no crash reports. Diagnostic logs are written locally to ~/.meldom/logs and are never transmitted anywhere. If you want us to see a log, you have to send it to us yourself.

What does leave your machine

Four things in normal use:

• Signing in. You sign in to your Meldom account on our account service at https://app.meldom.com, with email and password or with Google. The app then registers the machine as one of your devices, sending a device fingerprint, a device name and the app version. The fingerprint is a one-way hash derived from a random identifier generated on your machine — it is not your serial number, your hardware ID, or anything that identifies you personally. The device name defaults to your computer’s hostname, which is what lets you tell your machines apart when you manage your devices. The service returns a signed token that the app stores locally.
• Purchase checks after that. Once signed in, Meldom verifies that stored token on your machine itself. While you are online, the app also checks in with the account service every few minutes and refreshes the token once a day. Offline, Meldom keeps working for up to 14 days on a fresh token, plus a grace period up to 28 days; after that it needs to reach the account service again. The app also contacts the service when you sign in or out.
• Update checks. The app asks https://app.meldom.com/v1/desktop/latest whether a newer version exists, sending the version you are running and your sign-in token, so it can offer the releases meant for your account. Nothing is downloaded or installed unless you choose it.
• Your own AI provider. Meldom drives Claude Code and Codex using your accounts and subscriptions. When you run an agent, your prompts and the code it reads go to Anthropic or OpenAI under their terms, exactly as they would if you ran those tools in your own terminal. They do not pass through us, and we never see them.

Payment

Purchases are handled by Lemon Squeezy, which acts as the merchant of record for every sale. They collect and process your payment details, your billing address and any tax information required; card data never touches Meldom’s systems and we never see it. What we receive from them is your email address and the fact that an order was placed, so we can put the purchase on your account and email you a confirmation. Their handling of your data is governed by Lemon Squeezy’s privacy policy.

What we store

On our own systems we keep only what is needed to sell the software and run your account: your name and email address; your password if you set one (stored only as a one-way hash) and, if you sign in with Google, your Google account ID and email; your purchase; the devices you have signed in on (a fingerprint hash, a device name and timestamps); and your order record. We keep it for as long as your account exists, and as long afterwards as tax and accounting law requires. We do not sell it, and we do not share it with anyone beyond the payment and email providers needed to complete the sale.

This website

meldom.com automatically loads PostHog analytics on their EU servers. Your browser sends those analytics requests to r.meldom.com, a Cloudflare Worker operated for Meldom, which forwards them to PostHog’s EU service. Cloudflare handles the proxied traffic in transit and PostHog remains the analytics processor; the relay does not turn this into first-party processing.

PostHog uses cookies and browser storage to assign a persistent visitor identifier and recognise returning visits. Its regular web features can collect pages and referrers, device and browser details, approximate location, clicks and interactions, errors and performance data, surveys, and session replay. Which remote features run can change with this PostHog project’s settings; the site does not disable them in its client configuration.

Your rights

You can ask us what we hold about you, or ask for it to be corrected. Write to [email protected] and we will answer. You can delete your account yourself, under Account → Sign-in & security. Deleting it removes your Meldom purchase with it and ends your access to Meldom on every device, so do it only if that is what you want. Data on your own machine is yours to delete at any time and needs no request to us.

Changes

If this policy changes, the date at the top changes with it. Material changes will be announced by email to everyone with a Meldom account.