MELLO TEAM / THE DETAILS
Privacy, plainly.
How Mello Team, the website and Mello Cloud handle information.
Draft · subject to review before publication1. Scope
This notice describes the information processed when you use Mello Team, a Mello account, Mello Cloud and the website dashboard. Third-party services and plugins have their own privacy notices.
2. Information on your computer
Desktop workspace data, conversations, settings and project files are stored on your computer. The app can inspect or modify project files and run commands according to your chosen permissions and approvals. Locally run models use your device’s resources.
3. Account information
Firebase Authentication handles account information such as email address, display name, verification status and sign-in credentials. The desktop stores the account session using operating-system encryption when available. The dashboard keeps a session in your browser tab; signing out clears that tab’s session.
4. Cloud requests
When you use a cloud model, messages and relevant project context may be sent to Mello Cloud and its model provider, Pollinations. Image attachments are sent when needed for a request. Files are not all uploaded automatically, but their contents may be included in context, tool results or your messages. Choose what you share accordingly.
5. Remote dashboard
When website tasks are enabled in the desktop app, task text travels through the Cloud relay to that open app. Status, teammate activity, file names, excerpts, progress and results may be returned to the dashboard. These can contain information from your project. Turn off website tasks in the desktop settings to stop new remote work.
6. Usage and administration
The Cloud service processes account identifiers, access status, usage and request accounting to provide the service, apply limits and protect shared capacity. An authorized administrator can manage Cloud access and restrictions and review administrative changes. Website task history is displayed for the most recent seven days; older records may remain until cleanup.
7. Providers and disclosures
Google Firebase provides authentication, Cloudflare hosts the Cloud Worker and its state, and Pollinations provides model access. Website hosting and any enabled integrations also process information needed for their functions. We may disclose information where required by law or necessary to protect the service and its users.
8. Browser storage
The dashboard uses session storage for the signed-in session and browser storage for interface preferences and onboarding progress. Browser notifications are optional and controlled through your browser permissions.
9. Your choices and requests
You can use an available local model, disable website tasks, sign out, manage local files and export or delete eligible finished website tasks from the dashboard. These controls do not necessarily delete all account, provider or desktop data. Applicable law may give you rights to access, correct, delete, restrict or obtain a copy of personal information and to complain to a data protection authority.
10. Security and retention
Access controls and encryption features help protect information, but no system is risk-free. Retention varies by the type of information, service operation, security requirements, provider practices and applicable law. Some records may remain in backups or provider systems after a user-facing deletion.