Privacy Policy

1. Overview

This Privacy Policy explains what information MatchGrade ("we," "us," or "our") collects when you use our profile-analysis service, how we use it, and the choices and rights you have. By using MatchGrade you agree to the collection and use of information as described here.

2. What we collect

• Profile content: the photos (two to six) and bio text you submit to be analyzed.

• Contact information: your email address, collected when you purchase a report or subscription, used for passwordless sign-in and to send your report link and receipts.

• Payment metadata: billing information handled by Stripe (see "Payment data" below) and records of what you purchased, when, and for how much.

• Waiver record: the timestamp and IP address associated with your acceptance of the digital-content withdrawal waiver at checkout, kept as evidence of consent.

• Technical data: standard web request metadata (such as IP address and browser user agent) generated when you use the Service, used for security and abuse prevention.

We do not use cookies for advertising or third-party tracking. Supabase, our authentication provider, sets a session cookie strictly to keep you signed in.

3. How we use your information

We use the information above to: generate your report; authenticate you and give you access to your reports on the dashboard; process payments and subscriptions; send transactional emails (sign-in links, receipts, report-ready notifications); prevent fraud and abuse; and comply with legal obligations, including consumer-protection recordkeeping for the withdrawal waiver.

4. How photos are used and stored

Uploaded photos are stored in a private storage bucket and are accessed only through short-lived signed URLs — they are never publicly listed or browsable. Photos are used solely to generate your own MatchGrade report. They are not shared with any third party for their own purposes, are not sold, and are not used to train any AI model.

Photos are automatically deleted 90 days after upload. You can also request earlier deletion of your photos and report data at any time — see "Your rights" below.

5. How bio text is used

If you submit bio text, it is sent to Anthropic's Claude API solely to generate your report's written feedback. It is not used for any other purpose, is not combined with other users' data, and is not used by us or, per Anthropic's API terms, by Anthropic to train AI models.

6. Payment data

Payments are processed by Stripe. When you check out, your card details are entered directly into Stripe's secure, PCI-compliant checkout — MatchGrade does not receive or store your full card number, CVC, or other sensitive card data. We retain the payment records Stripe provides us (such as the amount charged, currency, and a reference ID) to fulfill your order, handle refunds, and meet accounting and tax obligations. See Stripe's own privacy policy for how it handles your payment details.

7. Data retention

Photos: deleted automatically 90 days after upload, or sooner on request.

Bio text and report results: kept for as long as your account/report history is active so you can view past reports, or until you request deletion.

Waiver acceptance records and payment records: retained for as long as required by applicable consumer-protection, accounting, and tax law, even if you otherwise request deletion of your account.

8. Third-party service providers

We share data with the following providers, each of which processes it only on our behalf and under its own security and privacy commitments: Supabase (database, authentication, and file storage), Anthropic (AI analysis of photos and bio text), and Stripe (payment processing). We do not sell your personal information to anyone.

9. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct inaccurate data, delete your data, export it in a portable format, or object to or restrict certain processing.

To exercise any of these rights, email support@matchgrade.app from the address associated with your report or account. We will respond within a reasonable time and, in any event, within the timeframe required by applicable law. Deleting your data will remove your stored photos, bio text, and report results; records we are legally required to keep (such as waiver and payment records) may be retained as described above.

10. Children's privacy

The Service is not directed to, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

11. International data transfers

[Placeholder — confirm with legal counsel where Supabase, Stripe, and Anthropic process and store data relative to your users' locations, and add the applicable transfer safeguards (e.g., Standard Contractual Clauses) if data leaves the EEA/UK.]

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continuing to use the Service after changes take effect constitutes acceptance of the revised policy.

13. Contact

Questions about this Privacy Policy or your data can be sent to support@matchgrade.app.