Privacy Data Policy
Your privacy is important to us. This policy outlines how we collect, use, and protect your organizational and personal data.
Privacy Principles
At Melon, we value the security and privacy of the data our users entrust to us. This policy outlines how we collect, process, manage, and protect organizational data processed through our platform.
01 Introduction
At Melon (”we”), we value the privacy and security of the data our users (”you” or ”users”) entrust to us. This Data Privacy & Protection Policy outlines how we collect, use, store, and protect personal and organizational data processed through our web application. Our goal is to ensure transparency and compliance with data protection regulations.
02 Information Collection
When accessing the Melon platform, we collect the following types of information:
User Account Data
Names, permissions, work emails, and encrypted credentials.
Organization Data
Business-related datasets, visualizations, and record structures.
Usage Data
Platform performance, IP addresses, connection activity, and error diagnostics.
Location Data
Verified GPS boundaries required for geographic and spatial analysis.
03 How We Use Your Data
The information collected is used for:
- SERVICESProviding Services: To allow organizations to visualize, manage, and analyze their data through our web platform.
- EXPERIENCEEnhancing User Experience: Tailoring the platform experience and optimizing performance.
- SECURITYSecurity Monitoring: To detect and prevent fraudulent activities and unauthorized access.
04 Data Security
We implement industry-standard security measures:
- •Encryption: TLS 1.3 in transit and industry-standard AES encryption for data at rest.
- •Access Control: Strict Zero-Trust architecture internally with least-privilege policies.
- •Authentication: Multi-factor authentication requirements for administrative operations.
05 Data Transfers & Third Parties
Your data may be stored on secure servers in regions required for processing. We ensure that appropriate safeguards are in place to protect your data, such as compliance with international data protection frameworks. We never share your data with unauthorized third parties.
06 Marketplace Waitlist
When you join the waitlist for the Melon Data Marketplace on our Marketplace page, Melon is the data controller for what you give us, under the Nigeria Data Protection Act 2023 and, where it applies to you, the EU or UK GDPR.
What we collect
- Your full name, email address, and whether you want to buy data, sell data or both.
- If you choose to give them: your organisation, country, the sectors you care about, and what data you need or have.
- The campaign tags in the link you arrived from (for example utm_source), if there were any.
- When you agreed to be contacted, and when you confirmed your email.
- A salted, one-way hash of your IP address and browser, used to stop abuse. We never store your IP address itself.
Why, and on what basis
We use it, with your consent, to confirm your email address, to tell you when the marketplace opens, to give waitlist members early access, and to understand what data people want so we build the right catalogue. We don’t sell it, use it for advertising, or add you to other mailing lists. If you allowed analytics cookies (see our cookie policy), Google Analytics records that a form was sent and the buy, sell or both choice and sectors you picked; never your name or email.
Confirming your email
You’re not on the list until you open the link we email you and press Confirm. That link expires after 7 days, and sign-ups that are never confirmed are deleted automatically when it does. If someone enters your email without your knowledge, ignore the email and nothing is kept.
Who processes it
Your details are stored by the Melon Data Marketplace’s systems, hosted with MongoDB Atlas (database) and Render (servers), and our emails are sent through Resend. Some of these providers process data outside Nigeria, including in the United States, under their data protection terms. Melon staff can see the waitlist to plan the launch.
How long we keep it
Unconfirmed sign-ups: 7 days. Confirmed entries: until we’ve told you the marketplace is open and given you early access, or until you leave the list, whichever comes first. If you then open a marketplace account, the marketplace’s own privacy policy, shown when you sign up, applies to that account.
Your choices and rights
You can leave the waitlist at any time with the “Leave the waitlist” link on the page where you confirmed (our launch emails will carry it too), which deletes your entry, or by emailing us below. You can also ask to see, correct or delete what we hold, and complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or to your local data protection authority if you’re in the EU or UK. We reply to requests within 30 days.
Contact Us
If you have questions about our data practices or privacy policies, please contact us: