Privacy without surprises.
This policy describes how Match & Muscle handles information during its private DMV pilot. Match & Muscle does not sell personal information or use sensitive booking or calendar information for targeted advertising.
Information we collect
- Customers: name, email or phone, massage preferences, area, requested date and time, service setting, optional price limit, request and appointment history, and account or guest-session identifiers.
- Providers: contact and business details, services, prices, profile content and photos, credential details, application status, availability, and portal activity.
- Calendar connections: a provider’s private subscription URL and a temporary cache of busy time intervals. We use the feed to prevent conflicts; customers do not see calendar event titles, attendees, locations, or notes.
- Technical and communications data: essential cookies, authentication identifiers supplied by the hosting platform, email delivery status, and security or operational logs.
Please do not submit medical records, diagnoses, payment-card information, Social Security numbers, or detailed health history. The booking form does not ask for them.
How we use and share information
We use information to operate the pilot, match requests, confirm appointments, maintain provider records, perform credential checks, prevent double booking, send transactional messages, respond to requests, secure the service, and comply with law.
We share only the details reasonably needed to handle a request with the matched provider, and use service providers for hosting, database and file storage, authentication, and transactional email. We may also disclose information when required by law, to protect safety or rights, or as part of a properly structured business transaction.
Credential information
Provider-supplied license information is a claim until Match & Muscle checks an official source. Public profiles clearly distinguish “official source checked” from “website claim only” or “not checked.”
Pilot retention targets
| Record | Target |
|---|---|
| Guest-session cookie | 30 days. |
| Closed booking records | 24 months after closure. |
| Inactive or unsuccessful provider application | 12 months after the last activity. |
| Active provider record | For the relationship, then 24 months. |
| Calendar URL and cached busy times | Until disconnect or account closure, subject to brief operational backups. |
| Legal acceptance records | 6 years. |
| Security, email, and notification logs | Up to 24 months. |
These are pilot targets, not promises to delete information when retention is required for legal, safety, fraud-prevention, dispute, or recordkeeping reasons. Final schedules require counsel review and operational automation before public launch.
Security and incidents
We use access controls, private provider calendar handling, limited collection, secure cookies, validation, and restricted owner/provider areas. No system can guarantee security. We will investigate incidents and provide legally required notices.
Your choices and requests
You may ask to access, correct, delete, or obtain information about our handling of your personal information. We may need to verify your identity and may deny or limit a request when law permits. Use the privacy request form. This pilot is intended only for adults 18 and older.
Changes
We will post a new effective date and version when this policy changes. Material changes requiring new agreement will be presented before the relevant action.
Contact
The final operator legal name, postal address, and privacy contact will be added before public launch. During the private pilot, use the request form.
New operational records
We also record credential and insurance evidence references, verification dates, booking price and policy acceptances, completion attestations, cancellation reasons, manual payment/refund references, safety investigations, privacy verification and fulfillment actions, and incident-response notes. Do not submit card details, medical histories, or identity documents in these fields.
Privacy fulfillment and retention controls
The owner verifies identity before releasing data or making changes. Matching signed-in identity may establish verification; otherwise an evidence-based verification process is required. We can prepare an access export, correct booking contact fields, and remove or pseudonymize eligible personal data. Active bookings, unresolved safety matters, and legal holds can restrict deletion. Limited financial and agreement evidence may remain for lawful recordkeeping and disputes. Retention review of closed bookings older than 24 months is available to the owner; other schedules and backup handling remain to be finalized. No automatic deletion schedule is currently enabled.
Advertising and health information
We do not sell booking or health-related data to advertisers during this pilot. We do not request detailed health histories. Any future advertising-data use requires a separate assessment, updated disclosures, and any required consent before it begins.
Pilot privacy contact
Use the privacy request form or matchandmuscle.dmv@proton.me. The intended operator is Match and Muscle, LLC; registration details and notice address remain to be confirmed.