1. Introduction

MegaCorp, Inc. ("MegaCorp," "we," "us," or "our") operates Find Your Person, an AI-assisted dating and matchmaking platform available at findyourperson.live. This Privacy Policy explains how we collect, use, share, and protect your information — including sensitive data such as biometric information and voice interview responses — when you use Find Your Person.

Please read this policy carefully. Find Your Person collects more sensitive personal information than a typical platform, and this policy explains your rights and our obligations with respect to that data.

By using Find Your Person, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Account Information

• Name, email address, password, date of birth
• Phone number (if provided for verification)
• Account status and membership tier

2.2 Profile and Matching Data

• Profile content: Photos, biographical details, location, and any information you choose to share
• Interview responses: Your answers to onboarding interview questions (text and/or voice)
• Dating preferences: Age range, location radius, gender preferences, relationship goals, and other matching criteria you configure
• Behavioral signals: Which profiles you view, swipe on (accept or reject), match with, accept, or decline — used to improve match recommendations

2.3 Biometric Data

Find Your Person collects biometric information as defined under applicable state and federal law.

• Facial embeddings: Mathematical representations derived from your uploaded photos. These vectors are used solely for photo preference modeling and compatibility matching within our platform. They are not used for identification, surveillance, or law enforcement purposes and are not sold or shared with third parties.
• Photo attributes: Categorical features estimated from photos (e.g., visual style attributes) used for preference matching.

For state-specific disclosures regarding biometric data, see Section 9.

2.4 Voice Data

• Live voice audio: Audio is transmitted to our realtime voice infrastructure to deliver the conversation and create text. We disable session recording and do not retain an audio recording in our application.
• Saved interview responses and derived text: Final answers generated from your onboarding interview are saved and used to build compatibility signals and profile content for matching. Interim transcripts are not stored in the voice-session record.
• Voice session metadata: We retain limited operational metadata such as the experience, status, provider profile, and timestamps for reliability and cost controls. This metadata does not contain audio.

Voice data retention periods are detailed in Section 6.

2.5 Communication and Session Data

• Messages: Content of messages exchanged with matches. Note: end-to-end encryption is not currently offered. Messages are encrypted in transit (TLS) and at rest, and access is restricted to authorized systems and personnel.
• Date session transcripts: Logs of AI-facilitated date sessions, retained for quality improvement and dispute resolution.
• In-app reports: Content of any reports you file about other users.

2.6 Payment Information

• Billing address and payment method for paid membership tiers
• Full card numbers are processed and stored by our payment processor; we do not store them

2.7 Information Collected Automatically

• Usage data: Features used, pages visited, actions taken, and time spent
• Device information: IP address, browser type, operating system, and device identifiers
• Location data: Approximate location derived from IP; precise location only if you grant permission
• Cookies and similar technologies: Session cookies (httpOnly, Secure, SameSite=Lax) for authentication; analytics cookies to measure platform performance

2.8 Information From Third Parties

• OAuth providers: If you sign in via a third-party service, we receive your name and email
• Payment processors: Transaction confirmation and fraud risk signals
• Identity verification services: If we use a third party to verify identity or age, we receive a verification result (pass/fail) but not raw identity document data

3. How We Use Your Information

Biometric data (facial embeddings) is processed based on your explicit consent. You may withdraw consent at any time by deleting your photos or requesting biometric data deletion; see Section 8.

4. How We Share Your Information

We do not sell your personal information, including biometric data.

We share information in the following circumstances:

• Other Find Your Person users: Your profile (photos, bio, preferences you choose to share) is visible to potential matches according to your privacy settings. Match scores, compatibility signals, and behavioral data (swipe history) are never shared with other users.
• Service providers: Infrastructure, payment processing, email delivery, analytics, and AI/ML model providers. All vendors are bound by data processing agreements and may not use your data for their own purposes.
• Trust & Safety: When a report is filed, our Trust & Safety team may access profile data, messages, and behavioral signals relevant to the investigation.
• Law enforcement: We disclose information when required by law, court order, subpoena, or to prevent imminent harm to a person. We will attempt to notify you of legal demands unless prohibited.
• Business transfers: If MegaCorp is acquired or merges with another company, your data may be transferred. We will notify you before this occurs.
• With your consent: We may share data in other circumstances you explicitly authorize.

Biometric data specifically: Facial embeddings and photo attributes are never shared with other users, advertisers, or third-party data brokers. They are shared only with ML infrastructure providers under strict data processing agreements.

5. AI-Assisted Matching

Find Your Person uses machine learning to generate match recommendations. The matching algorithm considers your interview responses, stated preferences, behavioral signals, and (with consent) photo preference data.

• Match scores and compatibility signals are used internally only and are not disclosed to you or other users in raw form
• You may always reject any match recommendation; the algorithm updates based on your feedback
• You may request information about the logic of our matching system by contacting privacy@findyourperson.live

6. Data Retention

Upon account deletion, your profile is removed from matching and search within 24 hours. Personal data is deleted from active systems within 30 days.

When your final active match is rejected, expires, or is otherwise resolved, we purge stored onboarding interview transcript fields and other free-text response artifacts that are no longer needed for the active match lifecycle. Derived profile attributes needed to keep your account functional may remain until account deletion or a later profile refresh.

7. Your Rights

Depending on your jurisdiction, you have the following rights:

• Access: Request a copy of the personal data we hold about you, including your interview responses, match history, and preferences
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and personal data
• Portability: Receive your data in a machine-readable format (e.g., match history, interview responses)
• Objection / Restriction: Object to processing based on legitimate interest, or request restriction of certain processing
• Withdrawal of consent: For biometric data and voice quality retention, you may withdraw consent at any time

Additional Rights Specific to Find Your Person

• Withdraw photo consent: Delete all photos and associated facial embeddings from account settings at any time. This will also remove you from photo preference matching.
• Withdraw voice consent: Stop using voice features or contact us to revoke consent for future voice sessions. Saved interview responses can be managed with your other interview data.
• Biometric data destruction: Submit a written request to privacy@findyourperson.live. We will confirm destruction within 30 days.
• Match data export: Request an export of your match history and stated preferences.

To exercise any of these rights: privacy@findyourperson.live

We respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

8. California Privacy Rights (CCPA / CPRA)

California residents have the following rights:

• Right to know what personal information we collect, use, share, or disclose — including sensitive personal information such as biometric data
• Right to delete personal information we hold about you
• Right to correct inaccurate personal information
• Right to limit use of sensitive personal information (including biometric identifiers, racial/ethnic origin data derived from photos, and other sensitive categories)
• Right to opt out of the sale or sharing of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

Sensitive personal information that Find Your Person collects and uses includes: biometric identifiers (facial embeddings), geolocation data, and personal communications (messages). We use this data only to provide the core service; we do not use sensitive personal information for advertising.

To submit a California privacy request: privacy@findyourperson.live
Response within 45 days, extendable by an additional 45 days with notice.

9. Biometric Data — State Law Compliance

Find Your Person collects biometric information. We apply the following protections to all users regardless of state:

• We collect biometric data only for stated purposes (preference matching, compatibility scoring)
• We do not sell, lease, trade, or profit from your biometric data
• We do not share biometric data with third parties except ML infrastructure providers under strict processing agreements
• We retain biometric data only for the duration of your account plus the 30-day deletion window (with a maximum 3-year destruction window for backups)
• You may request destruction of your biometric data at any time, independent of account deletion

Illinois — Biometric Information Privacy Act (BIPA)

If you are an Illinois resident:

• We collect facial geometry (facial embeddings) derived from your photos, which constitutes "biometric identifiers" under BIPA
• By accepting these Terms and this Privacy Policy, you provide written consent as required under BIPA
• We will not sell, lease, trade, or profit from your biometric identifiers or biometric information
• Your biometric data will be destroyed within 3 years of collection or within 30 days of account deletion, whichever occurs first
• To request early destruction of your biometric data: privacy@findyourperson.live

Texas — Capture or Use of Biometric Identifier Act (CUBI)

If you are a Texas resident, similar protections apply under the Texas CUBI. Your consent via these terms satisfies the CUBI notice requirement.

Washington, Colorado, and Other States

We monitor emerging state biometric privacy legislation and will comply with applicable laws as enacted. Our baseline protections are designed to meet or exceed the most protective state requirements.

10. GDPR (EEA and UK Users)

Our legal bases for processing are described in Section 3. Additional information for EEA and UK users:

• Right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK)
• Data transfers: Your data is processed in the United States. We implement Standard Contractual Clauses for transfers from the EEA or UK.
• Automated decision-making: Our matching algorithm uses automated processing that produces recommendations affecting which profiles you see. You have the right to request human review of significant automated decisions, obtain an explanation of the logic, and contest a decision that significantly affects you. Contact privacy@findyourperson.live to exercise this right.
• EU/UK Representative: To be designated upon EU/UK market entry
• Data Protection Officer: To be designated if required under applicable law

11. Trust & Safety Data Handling

When a Trust & Safety report is filed:

• Report content and relevant data (profile information, messages, behavioral signals) are reviewed by our Trust & Safety team
• Data from substantiated violations may be retained for up to 7 years for legal defense and safety purposes
• Anonymous risk signals derived from violation patterns may be retained indefinitely to protect future users
• We will not use T&S data to disadvantage you in ways unrelated to the underlying safety concern

12. Children's Privacy

Find Your Person is strictly for users 18 years of age and older. We do not knowingly collect data from minors. If we discover that a user is under 18:

• The account will be immediately suspended and deleted
• All associated data will be destroyed
• If biometric data was collected, it will be destroyed promptly

If you suspect a user is under 18, report them immediately to: trust@findyourperson.live

13. Security

We implement security measures including:

• TLS encryption for all data in transit
• Encryption at rest for sensitive data, including biometric data
• Access controls, role-based permissions, and audit logging
• Regular security reviews and penetration testing

Biometric data is stored in isolated systems with restricted access. We apply heightened security standards to all data classified as sensitive under applicable law.

No system is completely secure. We will notify affected users of material data breaches as required by applicable law.

14. International Transfers

Find Your Person is operated from the United States. If you access the platform from outside the United States, your data may be transferred to and processed in the United States. We implement Standard Contractual Clauses and other appropriate safeguards for international data transfers.

15. Cookies

• Essential cookies: Required for authentication and session management. Cannot be disabled without breaking core functionality.
• Analytics cookies: Used to understand platform usage and improve features. You may opt out via our cookie preference center.

16. Changes to This Policy

We will notify you of material changes to this Privacy Policy by email or in-app notification at least 14 days before the changes take effect.

For changes that affect how we process biometric data, we will seek renewed consent where required by applicable law.

17. Contact

• Privacy requests and rights: privacy@findyourperson.live
• Trust & Safety reports: trust@findyourperson.live
• General support: support@findyourperson.live
• Legal: legal@megacorp.company