Privacy Policy

Information We Collect

We collect only the data needed to verify your identity, surface compatible matches, and keep the community safe. The categories below summarize everything PrestigeMatch holds about you as an active member.

• Account information: email address, password (hashed), date of birth, and the city you select on registration.
• Profile information: photos, bio, interests, lifestyle preferences, and any tags you add to your profile.
• Verification data: government ID, live selfie, and the resulting match score. ID documents are encrypted and removed from active storage after verification is complete.
• Communication data: messages, attachments, and interaction history between you and other members. Messages are encrypted at rest with 256-bit AES.
• Device and technical data: IP address, browser type, device identifiers, and approximate location derived from IP.
• Payment data: if you subscribe, our PCI-DSS compliant payment processor handles card data. PrestigeMatch never stores full card numbers.

How We Use Your Information

We use your personal data only for purposes that are necessary to deliver the service, comply with the law, or with your explicit consent. The legal bases under GDPR are contract performance, legitimate interest, legal obligation, and consent.

• Create and maintain your account and verify that you are over the age of 18.
• Surface relevant, verified profiles through our matching algorithm.
• Process subscription payments and prevent payment fraud.
• Detect, investigate, and prevent harassment, scams, and policy violations.
• Send service-related emails such as security alerts, billing receipts, and policy updates.
• Send marketing communications only if you opt in - and you can opt out at any time.
• Comply with applicable US federal, state, and international legal obligations.

Cookies and Tracking Technologies

PrestigeMatch uses cookies and similar technologies to keep you signed in, remember your preferences, and measure how the platform performs. We group them in three categories: strictly necessary, analytics, and marketing. You can manage non-essential cookies at any time from your account settings or browser controls.

For a full inventory of cookies used on the site, their expiration, and the third parties involved, please review our Cookie Policy.

Your Rights Under GDPR and CCPA

Regardless of where you live, PrestigeMatch extends the strongest available privacy rights to every member. If you reside in the European Economic Area, the United Kingdom, California, Colorado, Virginia, Connecticut, or Utah, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: correct any inaccurate or incomplete information.
• Right to erasure: request deletion of your account and associated data.
• Right to restrict or object: pause certain processing activities, including marketing.
• Right to data portability: receive your data in a machine-readable format.
• Right to opt out of sale or sharing: we do not sell personal information, and we do not share it for cross-context behavioral advertising.
• Right to non-discrimination: exercising any right above will never affect the service you receive.

To exercise any right, email our Data Protection Officer using the address below. We respond within 30 days, as required by GDPR and the CCPA.

How We Share Your Information

PrestigeMatch does not sell personal information. We share data only with carefully selected service providers who help us run the platform, and only to the extent strictly necessary. These include our cloud hosting partner, payment processor, identity verification vendor, email delivery service, and customer-support tooling. Each provider is bound by a Data Processing Agreement and is subject to regular security review.

We may also disclose information when required by a valid US legal request, a court order, or to protect the safety of our members.

Data Retention and Security

We retain your account data for as long as your account is active and for up to 24 months after deletion to comply with legal obligations and to prevent the re-creation of banned accounts. Verification documents are deleted from active storage within 14 days of successful identity check.

All data in transit is protected with TLS 1.3. All data at rest, including messages and photos, is encrypted with 256-bit AES. Access to production systems is limited to a small engineering team using multi-factor authentication, and we run independent penetration tests annually.

Contact Our Data Protection Officer

Questions, requests, and complaints about your privacy go directly to our Data Protection Officer. We aim to respond within five business days.

You may also reach our general support team via the Contact page or review our Terms & Conditions for the agreement that governs your use of PrestigeMatch.