User Privacy Notice

This User Privacy Notice ("Notice") explains how MelaMatch collects, uses, and shares personal data of individuals using our lead-generation platform to plan South Asian events. We are committed to protecting your privacy and complying with applicable laws, including the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, Children's Online Privacy Protection Act (COPPA), the Colorado Privacy Act of 2023 (CPA), and the Texas Data Privacy and Security Act of 2024 (TDPSA).

Information We Collect

We collect information from and about you in various ways when you use MelaMatch:

• Personal Identifiers: Information you provide that identifies you, such as your name, email address, telephone number, and account login details. We collect this when you register on our site or fill out an inquiry form to contact event Vendors.
• Event Details: Information about your event that you choose to provide (for example, event type, dates, location, number of guests, budget, and specific cultural or religious preferences relevant to South Asian ceremonies). This helps us match you with appropriate Vendors and services.
• Usage Data: Details about how you use our website, including your IP address, browser type, device information, pages viewed, and the dates/times of your visits. We obtain this data through server logs and analytics tools, as well as cookies and similar tracking technologies.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to personalize your experience (e.g., keeping you logged in, remembering preferences), analyze site traffic, and serve relevant content. For more details, see "Cookies & Tracking" below.

How We Use Your Information

We use your personal information for the following purposes:

• Providing Services: To connect you with Vendors. For instance, if you request information from vendors (such as photographers or caterers), we use your details to inform those Vendors of your inquiry so they can respond.
• Communication: To send you confirmations, updates, and support messages. We may contact you about your account, inquiries you’ve submitted, or to remind you of upcoming events or tasks (e.g., a reminder to review a Vendor).
• Personalization: To tailor the content and recommendations you see on our platform. For example, we might highlight Vendors in your region or suggest services based on your event details or cultural preferences.
• Marketing (with Consent): To send you newsletters, promotions, or offers related to event planning and vendors that might interest you. We will only send marketing emails or texts if you have opted in, and you can opt out at any time.
• Analytics and Improvements: To analyze usage of our platform and improve our services. We examine aggregate usage patterns to improve site navigation, develop new features, and enhance the user experience for the South Asian event planning community.
• Legal Compliance and Enforcement: To enforce our Terms of Service, prevent fraud, ensure security, and comply with legal obligations. For example, we may use your information to detect and prevent malicious activity or to meet requirements under consumer protection laws.

Sharing of Information

We share your information with third parties only as necessary and as described here:

• With Vendors You Choose: If you submit a request or inquiry to Vendors through our platform, we will share the relevant information you provided with those specific Vendors. This typically includes your name, contact information, and event details so that the Vendor can reply and provide their service information or quote. Vendors are contractually required to use your information only for responding to your inquiry and to treat it confidentially. We also require Vendors to comply with applicable communication laws (like TCPA for phone/text outreach and CAN-SPAM for emails) when they contact you.
• With Service Providers: We engage trusted third-party companies to perform functions on our behalf and help us operate the platform. Examples include website hosting, data analytics providers, customer support tools, email delivery services, or payment processors (for any transactions on the site). These service providers have access to personal information only as needed to perform their tasks for us and are obligated not to disclose or use it for other purposes.
• Legal Requirements and Safety: We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to (a) comply with a legal obligation, such as a subpoena or court order; (b) protect and defend the rights or property of MelaMatch, our users, or others; (c) act in urgent circumstances to protect the personal safety of users of the platform or the public; or (d) investigate and prevent fraud or security issues.
• Business Transfers: If MelaMatch is involved in a merger, acquisition, sale of assets, or reorganization (including in bankruptcy proceedings), your information may be transferred as part of that transaction. We will ensure any such transfer is subject to appropriate safeguards. You would be notified via email or a prominent notice on our site of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information in that event.

Cookies & Tracking

We use cookies and similar tracking technologies to collect Usage Data and improve your experience on MelaMatch. Cookies are small text files stored on your device that allow us to remember your preferences and recognize you on subsequent visits. For example, cookies enable features like saving your login session, so you don't have to re-enter your password on every visit, and showing relevant content based on your previous interactions. We also use cookies and third-party analytics tools (like Google Analytics) to understand how users engage with our site (which pages are most popular, how users navigate the site, etc.), which helps us improve our platform.

Some cookies may be used for advertising purposes, to provide you with offers that may be of interest. You can control or delete cookies through your browser settings. However, please note that if you disable certain cookies, some features of the Service might not function properly.

Global Privacy Control: We honor Global Privacy Control (GPC) signals and similar browser or device settings that communicate a "do not sell or share" preference. If our site detects a valid GPC signal from your browser, we will treat it as a request to opt out of the sale of personal information or sharing for targeted advertising purposes as required by applicable law (such as the CPA and TDPSA). Additionally, you can manage your data sharing and advertising preferences any time by contacting us.

Communications & Your Consent

When you provide us with your contact information (like phone number or email) and use MelaMatch to inquire about Vendor services, you consent to receive communications related to your inquiries. This includes communications from MelaMatch (for example, confirmation emails or customer support follow-ups) and from the Vendors you contacted. Communications may be made via email, phone call, or text message/SMS. We and our Vendors will only contact you about matters relevant to your event request or as otherwise permitted by law.

Compliance with Communications Laws: We strive to ensure all communications comply with applicable laws. If you provide a phone number, you are consenting to be contacted at that number regarding your event (including via text message or auto-dialed call, if applicable), consistent with the TCPA and state telemarketing laws. Our text messages will include information on how to opt out (for instance, replying "STOP" will prevent future texts). If you provide an email, and if we send you marketing emails beyond your specific inquiries, those emails will comply with the CAN-SPAM Act and include an "unsubscribe" link. You can adjust your communication preferences or withdraw consent at any time by using the opt-out mechanisms provided in the message or by contacting us through the Privacy Requests page.

Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to honoring applicable rights, which may include:

• Access & Correction: You have the right to request a copy of the personal data we hold about you, and to request corrections of any inaccuracies. You can also access and update some of your information by logging into your MelaMatch account (if you have one).
• Deletion: You can request that we delete personal information we have collected from you. Note that we may need to retain some information for legitimate business purposes or to comply with legal obligations (for example, we might retain a record of a transaction you made, if any, or keep suppression lists to honor opt-outs).
• Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" of your personal information or the sharing of your personal information for targeted advertising, as those terms are defined under certain privacy laws. While MelaMatch does not sell personal data for money, we may share information with third parties for purposes that could be considered a "sale" or "sharing" under law (such as certain advertising or analytics partnerships).
• Data Portability: Where applicable, you may request to receive your personal information in a common, machine-readable format (and request that we transmit it to a third-party where technically feasible), allowing you to port your data to other services.
• Non-Discrimination: MelaMatch will not discriminate against you for exercising any of your privacy rights. This means we will not deny you services, charge you different prices, or provide a different level of service because you made a privacy request. However, in some cases, if the exercise of your privacy rights limits our ability to process data (for example, a deletion request), we may not be able to provide certain services to you (such as retaining your account if you request deletion of all your data).

State-Specific Rights: Residents of certain states (such as Colorado and Texas) have additional rights under state laws like the CPA and TDPSA. These may include the right to opt out of certain types of processing (for instance, profiling in furtherance of decisions that produce legal effects, or targeted advertising beyond what is covered above) and the right to appeal our decision if we deny a privacy request. MelaMatch has implemented processes to comply with these state-specific requirements. For example, Colorado and some other states recognize the Global Privacy Control signal as a valid opt-out, which we honor as noted. If you are a Colorado, Texas, or California resident (or resident of any state with similar laws), you can exercise your rights by contacting us. We will respond to your request within the timeframe required by law (generally 45 days, with the possibility of a 45-day extension, which we will inform you about if needed).

Children's Privacy

MelaMatch is not directed to children under 13, and we do not knowingly collect personal information from anyone under the age of 13. If you are under 13, please do not use our Service or provide any personal information. If we become aware that we have collected personal data from a child under 13, we will promptly take steps to delete such information from our records. If you are a parent or guardian and believe that a child under 13 has provided us with personal information, you can contact us to request removal of that data.

We also recommend that users under 18 seek the guidance of a parent or guardian when using our platform. Individuals under 18 may use the Service only with involvement of a parent or guardian. Vendors are independently responsible for ensuring their interactions and content are appropriate for all ages, but we encourage families to take an active role in their children's online activities and event planning processes.

Data Security

We take the security of your personal information seriously. MelaMatch implements administrative, technical, and physical safeguards designed to protect your data from unauthorized access or disclosure. For example, we use encryption technologies (like HTTPS) to secure data in transit, maintain firewalls and intrusion detection systems, and restrict access to personal data to employees or contractors on a need-to-know basis. We also regularly review our security procedures to consider appropriate new technology and methods.

However, please be aware that no method of transmitting or storing data is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You can help by using a strong password for your MelaMatch account, keeping your login credentials confidential, and notifying us immediately if you suspect any unauthorized access to your account or information.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. If we make material changes to how we collect or use your personal information, we will notify you by prominently posting a notice on our website, and/or by sending you a direct notification (such as an email) if you have provided contact information. We will indicate the date of the latest revision at the top of this Notice (see "Effective Date" above). We encourage you to review this Notice periodically to stay informed about our privacy practices. Your continued use of MelaMatch after any update to this Notice will signify your acceptance of the changes.

Contact Us & Exercising Your Rights

If you have any questions, concerns, or comments about this Privacy Notice or our privacy practices, or if you wish to exercise any of your rights regarding your personal data, please contact us. You can reach our privacy team using our contact page. We will respond to your inquiry or request as soon as reasonably possible and in accordance with applicable law.