MelaReport public information

Privacy Policy

Last updated September 30, 2026

MelaReport helps people send concerns to participating organizations. The organization selected by the reporter is responsible for reviewing and responding to that report. This policy describes the MelaReport platform; a participating organization may provide additional privacy information for its reporting program.

Information handled

A report can include report text, answers to configured questions, optional evidence files, and replies. Contact details are collected only when the reporter chooses a confidential or verified reporting option. Precise coordinates are collected only after the reporter explicitly chooses current-location capture.

How information is used

Information is used to deliver the report to the selected organization, support review and follow-up, protect the service from abuse, maintain security and audit records, and meet applicable legal obligations. MelaReport does not sell report information, serve advertising, or use report activity for cross-app tracking.

SMS messaging privacy

Daniel A2P Messaging Bundle uses MelaReport to provide transactional SMS responses requested by a reporter, specifically an organization's secure web reporting link. SMS is not used to collect a report or send later case-status updates. SMS consent and opt-in records are used only to provide and operate this messaging service.

WhatsApp secure-link privacy

Participating organizations may offer WhatsApp as an alternative way to request their secure web reporting link. Send only the organization code. Do not send report details, evidence, identity choices, consent, or case replies in WhatsApp. MelaReport does not use WhatsApp for later case-status messages; use the secure web status portal for updates and replies.

The raw WhatsApp identifier and inbound message are processed only to return the immediate response and are not stored as reporter contact data or linked to a report, tracking credential, or web session. Short- lived keyed hashes support replay protection, throttling, and opt-out enforcement. WhatsApp and the configured regional provider still process account and delivery metadata under their own retention terms, so the messaging interaction itself is not anonymous to them. Reply STOP to opt out, reply HELP for help, or block the business in WhatsApp.

We do not sell, rent, or share mobile numbers, SMS opt-in data, or SMS consent with third parties or affiliates for marketing or promotional purposes. Message frequency varies and is generally one or two messages for each request. Message and data rates may apply. See the public SMS opt-in instructions and Terms & Conditions.

MelaReport does not retain a public reporter's IP address, browser user-agent string, device identifier, or screen size, and does not associate that technical information with a report. A network address is processed transiently through an ephemeral keyed digest to limit automated abuse; neither the address nor the digest is written to the report or audit record. Infrastructure and security providers may process network information needed to deliver and protect the service.

Device storage and permissions

Language preference, saved organizations, and locally tracked reports can remain on the device. Offline form access is optional and expires. Drafts and queued submissions are encrypted. Mobile encryption keys are protected by iOS Keychain or Android Keystore. Camera and location permissions are requested only after the related action is selected.

Service providers and international processing

MelaReport uses infrastructure and security providers, including Cloudflare Turnstile for abuse prevention. Providers receive only the information needed to perform their contracted service. Processing may occur outside the reporter's country, subject to applicable safeguards and the participating organization's approved configuration.

Retention, security, and choices

Retention depends on the participating organization's approved policy, legal duties, and the type of record. Security controls reduce risk but no system can guarantee absolute security. Visit the Contact the address below to request access, correction, or deletion where applicable. A request may require a tracking code and access key and may be limited by legal retention requirements.

Contact

Privacy questions can be sent to privacy@melareport.com.