Privacy Policy

We collect information you provide directly when creating an account, listing a practice, or contacting us. This includes your name, email address, and (for therapists) your service and profile details. We also collect limited technical data automatically, including your IP address, browser type, and pages visited on our site. This data is used solely to maintain and improve the platform. We do not collect health information, sensitive personal data, or any information about the nature of your massage therapy sessions.

We use your information to: - Operate and maintain the MasseurMatch directory - Review profile quality and completeness - Send transactional communications (account confirmations, support responses) - Improve platform functionality and user experience - Detect and prevent fraud, abuse, or policy violations We do not use your information for advertising profiling or behavioral targeting. We do not send unsolicited marketing communications without your explicit consent.

We never sell your personal information to third parties. Period. We share limited data only with: - Safety/compliance partners when required by law - Payment processors (Stripe) for handling subscription payments - we never store payment card data - Hosting and infrastructure providers (Vercel, Supabase) who process data solely on our behalf under strict data processing agreements - Law enforcement when required by valid legal process Any third-party service provider we use is contractually prohibited from using your data for their own purposes.

We use a minimal set of cookies necessary to operate the platform (authentication, session state). We do not use third-party advertising cookies or behavioral tracking technologies. You can disable cookies in your browser settings. Disabling cookies may affect your ability to log in and use account features. See our Cookie Policy at /cookie-policy for a full breakdown.

Depending on your location, you may have rights including: - Access: Request a copy of the personal data we hold about you - Correction: Request that we correct inaccurate data - Deletion: Request deletion of your personal data ("right to be forgotten") - Portability: Request your data in a machine-readable format - Objection: Object to certain types of processing To exercise any of these rights, email privacy@masseurmatch.com. We respond to all requests within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights: - Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you. - Right to Delete: You may request deletion of your personal information, subject to certain exceptions. - Right to Opt-Out of Sale: We do not sell your personal information. However, you may submit an opt-out request at any time to privacy@masseurmatch.com and we will confirm our non-sale status. - Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights. Authorized agents may submit requests on your behalf by contacting us at privacy@masseurmatch.com. We may require verification of identity before fulfilling requests.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and equivalent laws: - Lawful Basis: We process your data under the following legal bases: (a) performance of a contract (operating your account and profile), (b) legitimate interests (platform security, fraud prevention, analytics), and (c) consent (where explicitly sought). - Right of Access (Article 15): Request a copy of your data. - Right to Rectification (Article 16): Request correction of inaccurate data. - Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten"). - Right to Restriction (Article 18): Request restriction of processing in certain circumstances. - Right to Data Portability (Article 20): Receive your data in a structured, machine-readable format. - Right to Object (Article 21): Object to processing based on legitimate interests. - Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority. Data Controller: XRankFlow Media Group LLC, legal@masseurmatch.com. We do not transfer personal data outside the US except where necessary to operate the platform (e.g., Supabase, Vercel infrastructure), in which case we rely on standard contractual clauses or equivalent mechanisms.

We implement industry-standard security measures including TLS encryption in transit, encrypted storage for sensitive data, and access controls that limit staff access to personal data on a need-to-know basis. No method of transmission over the internet is 100% secure. While we use commercially reasonable security measures, we cannot guarantee absolute security.

We retain account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).

MasseurMatch is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us immediately at privacy@masseurmatch.com.

We may update this policy from time to time. We will notify registered users of material changes via email and update the "Last Updated" date below. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights: Email: privacy@masseurmatch.com Legal: legal@masseurmatch.com Support: support@masseurmatch.com Operator: XRankFlow Media Group LLC (Delaware) Mailing: 2810 N Church St PMB 74302, Wilmington, DE 19802