1. Information We Collect
We collect the following information:
- Account information: name, email address, phone number
- Address information (optional)
- Payment information (processed securely via Stripe)
- Children's profile information including name, date of birth, gender, and bio
- Usage data and audit logs for security purposes
- Device trust information for security (hashed identifiers only)
2. How We Use Your Information
- To provide and improve our escrow services
- To process payments and refunds
- To facilitate matches between families and shadchanim
- To send notifications about your account activity
- To verify your identity and prevent fraud
- To comply with legal obligations
3. Visibility Controls
You control who can see your children's information and reserve amounts through our three-level visibility system:
- All Shadchanim: Any registered shadchan can see the information
- Verified Only: Only Silver, Gold, Diamond, or Platinum ranked shadchanim can see the information
- On Request: Shadchanim must request access, and you can approve or deny each request
4. Information Sharing
We do not sell your personal information. We share information only:
- With shadchanim according to your visibility settings
- With payment processors (Stripe) to process transactions
- With communication providers (Twilio, email service) for notifications
- As required by law or legal process
5. Data Security
We implement industry-standard security measures including:
- Passwords hashed using bcrypt (12 rounds)
- JWT tokens stored in httpOnly cookies
- Two-factor authentication via OTP for new device logins
- Account lockout after failed login attempts
- TLS encryption for all data in transit
- HTTPS enforced via HSTS headers
6. Data Retention
We retain your data as long as your account is active. Financial records (ledger entries) are retained permanently as required by financial regulations. You may request account closure, at which point personal information will be anonymized.
7. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request account closure
- Opt out of marketing communications
- Request a copy of your data