We don't sell your data
Audience and engagement data from your connected accounts is used for matching, verification, and analytics — never sold to third parties or data brokers.
MatchrLegal
Privacy Policy
This policy explains what Matchr collects from creators and brands, why we collect it, who we share it with, and the control you have over all of it. It is written to be read, not to be skimmed past.
The short version
This summary is here for convenience. The numbered sections below are the policy that actually governs your account.
Contact details stay private
Your email, phone number, and DMs are not visible to anyone until both sides swipe right. No cold outreach, no scraped inboxes.
You stay in control
Export a copy of your data or delete your account at any time from Settings. Deletion removes your profile, matches, and chat history.
Encrypted end to end of the wire
All data is encrypted in transit over HTTPS/TLS and at rest. Card details never touch our servers — they go straight to our PCI-compliant processor.
1. Overview
Matchr is a two-sided platform where brands and creators discover each other, match on mutual interest, and run collaborations. This policy covers [registered entity name], the company that operates Matchr, acting as the data controller for the information described here.
It applies whenever you use the Matchr mobile app, this website, or the brand dashboard. It sits alongside our Platform Rules, which describe what is and is not allowed on Matchr. Where this policy and the rules overlap on a data question, this policy governs.
If you disagree with something here, the honest answer is that you should not create an account — most of what we collect is what the product needs in order to work at all.
2. Information we collect
We collect three kinds of information: what you give us, what we pull from accounts you connect, and what we observe as you use the product.
CategoryWhat it includesWhy we need it
Account dataName, email address, password hash, role (creator or brand), country, and — for brands — company name and business domain.To create and secure your account, and to show you the right side of the marketplace.
Profile dataNiche, bio, location, rates, portfolio pieces, media kit, content samples, and past collaborations you choose to publish.This is what other users see and swipe on. You decide what goes in it.
Connected social dataFollower count, engagement rate, audience demographics, and recent post performance, pulled through the platform's official OAuth integration.To verify that an audience is real and to rank relevant matches. We request read-only scopes and never post on your behalf.
Collaboration dataMatches, chat messages, campaign briefs, deliverables, agreed rates, and approval history.To run the collaboration, and to resolve disputes if one side raises a claim.
Payment dataBilling name, address, subscription tier, payout account reference, invoices, and transaction history.To bill subscriptions and route payouts. Raw card numbers are handled by our payment processor — we store only a token and the last four digits.
Usage and device dataSwipes, searches, screens viewed, IP address, device model, operating system, app version, and crash logs.To improve matching, fix bugs, and detect fraud, bots, and duplicate accounts.
Support dataMessages you send to support or trust and safety, plus any screenshots or attachments you include.To answer your question and keep a record of the decision.
What we deliberately do not collect
- Raw payment card numbers. These go directly to our PCI-compliant payment processor and never reach our servers.
- Your social account password. Connections are made through official OAuth, so you can revoke our access from the platform itself at any time.
- Your contacts, photo library, or precise GPS location. We ask for city-level location only, and only to improve matching.
- Special category data — health, religion, political views, biometrics. Please do not put it in your profile.
3. How we use information
We use what we collect for these purposes and no others:
- Running the marketplace — building your profile, generating your discovery feed, recording swipes, opening chats on a mutual match, and managing campaigns.
- Verification and trust — confirming that audiences are real and businesses are legitimate, detecting bought followers, bots, duplicate accounts, and fraud.
- Payments — billing subscriptions, calculating the service fee, holding funds in escrow where applicable, and paying creators out.
- Support and disputes — answering your messages and, where a dispute is raised, reviewing the relevant chat and campaign records.
- Product improvement — aggregated analytics on how features are used, and crash diagnostics.
- Communications — match alerts, campaign updates, receipts, security notices, and, if you opt in, occasional product news.
- Legal obligations — tax records, responding to lawful requests, and enforcing our rules.
Legal bases (for users in the UK, EU, and similar regimes)
We rely on performance of a contract for anything required to run your account and collaborations; legitimate interests for fraud prevention, security, and product analytics; consent for marketing email, optional analytics cookies, and connecting a social account; and legal obligation for financial and tax records. You can withdraw consent without affecting the rest of your account.
Automated matching
Your discovery feed is ranked automatically using your niche, audience data, stated goals, and past swipes. This ranking decides what you are shown — it never decides a payment, a suspension, or anything with a legal effect on you, and a human reviews every enforcement decision.
4. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it in four situations:
- With users you match with. Before a match, the other side sees only your published profile. After a mutual match, the chat opens and you choose what else to share.
- With service providers. Vendors that process data on our instructions, under contract, listed in section 5.
- For legal reasons. Where we are required by law, or where disclosure is necessary to investigate fraud or protect someone's safety.
- In a corporate transaction. If Matchr is acquired or merged, data may transfer to the acquirer under this policy. We will tell you before it takes effect.
Brand teams share one account with role-based seats, so collaboration records are visible to teammates with access to that campaign. Keep that in mind when writing in a campaign chat.
5. Service providers
We use third parties for the functions below. Each is bound by a data processing agreement, may only use the data to provide its service to us, and is reviewed before we onboard it. The current named list is available on request at privacy@matcher.com.
FunctionWhat they do for us
Cloud hosting and databasesRunning the app and storing your data
Payment processingSubscriptions, escrow, and creator payouts
Product analytics and crash reportingUnderstanding feature usage and diagnosing errors
Transactional email and push notificationsMatch alerts, receipts, and security notices
Identity and audience verificationChecking follower authenticity and business legitimacy
Customer support toolingManaging and replying to your support requests
6. How long we keep data
- Active accounts — for as long as your account exists.
- After you delete your account — your profile and matches are removed from the product immediately, and purged from backups within 30 days.
- Chat and campaign records — kept for 12 months after a collaboration ends, so either side can raise a dispute.
- Financial records — invoices and payout records are kept for [retention period required by your jurisdiction], because tax law requires it.
- Trust and safety records — reports and enforcement decisions are kept for 24 months so that repeat behaviour can be recognised.
- Analytics — retained in aggregated, non-identifying form, which we may keep indefinitely.
7. Your rights and choices
Wherever you live, you can exercise the rights below. Depending on your jurisdiction — for example under the GDPR, the CCPA/CPRA, or India's DPDP Act — some of them may also be legally enforceable.
Access and portability
Request a machine-readable copy of the data tied to your account.
Correction
Fix anything inaccurate, directly in Settings or by writing to us.
Deletion
Delete your account and the data attached to it, except records we must keep by law.
Objection and restriction
Ask us to stop or limit a specific use of your data, including profiling for matches.
Withdraw consent
Disconnect a social account or turn off marketing email without losing your account.
Complain
Raise a complaint with your local data protection authority at any time.
Most of this is self-serve in Settings → Account. For anything else, email privacy@matcher.com. We respond within 30 days, we will not charge you for a reasonable request, and we will never degrade your account because you made one. We may ask you to confirm your identity first so that we do not hand your data to someone else.
8. Security
Data is encrypted in transit with HTTPS/TLS and encrypted at rest. Access to production data is restricted to staff who need it, protected by multi-factor authentication, and logged. We run automated checks on new profiles, and we review every report our community sends us.
No system is perfect. If we discover a breach affecting your personal data, we will notify you and the relevant regulator within the timeframes the law requires, and tell you what we know rather than waiting until we know everything. If you have found a vulnerability, please report it to security@matcher.com before disclosing it publicly.
9. Cookies and analytics
On our website we use strictly necessary cookies to keep you signed in and to protect against abuse. These cannot be turned off without breaking the site.
We also use analytics cookies and mobile SDKs to understand which features are used and where people get stuck. Where the law requires consent, we ask before setting them, and you can change your answer at any time from the cookie banner or in Settings → Privacy. We honour Global Privacy Control signals sent by your browser.
We do not run third-party advertising trackers on Matchr, and we do not build advertising profiles of you.
10. Age requirements
Matchr is for adults. You must be 18 or older to hold an account. Creators under 18 may only participate through a verified parent or legal guardian account, and the guardian is the account holder.
We do not knowingly collect data from children. If we learn that an account belongs to someone underage, we remove it and delete the associated data. If you believe a child has an account, tell us at privacy@matcher.com.
11. International transfers
Matchr operates across regions, so your data may be processed in a country other than your own — including by the service providers in section 5. Our primary hosting region is [primary hosting region].
When we move personal data out of the UK, EU, or another region with transfer restrictions, we rely on an approved safeguard — the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision — and we assess the destination country before we do.
12. Changes to this policy
We update this policy when the product changes or the law does. The date at the top always reflects the current version.
For minor clarifications we update the page. For changes that materially affect your rights or how we use your data, we notify you in the app or by email at least 30 days before they take effect, so you have time to object or close your account.
13. How to reach us
A person reads these inboxes. Pick whichever fits and we will route it internally if it lands in the wrong place.
Privacy and data requestsprivacy@matcher.comGeneral supportsupport@matcher.comSecurity disclosuressecurity@matcher.com
Postal address: [registered office address]. Our data protection contact is [DPO or privacy contact name]. If you are in the EU or UK and are not satisfied with our response, you may complain to your local supervisory authority.
Prefer a conversation? The support page has live chat hours and a contact form, and typical first replies land within 24 hours.