Privacy Policy

1. Introduction

Bisou Match Inc. (“Bisou,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Vedic astrology-based dating and connection platform.

Our Service: Bisou Match is a platform that uses Vedic astrology to help adults find meaningful connections.

Geographic Scope: This policy applies to users in the United States, Canada, the European Union, and the United Kingdom.

Related Policies:

• Child Safety Policy (for minor protection)
• Terms of Service (for platform usage rules)

2. Information We Collect

2.1 Information You Provide

Account Information:

• Name, email address, phone number
• Date of birth, time of birth, place of birth (for astrological calculations)
• Gender, gender preferences
• Photos and profile information
• Location (city, province/state, country)

Astrological Information:

• Birth chart data you provide
• Preferences for astrological compatibility
• Responses to personality questions

Communication:

• Messages you send through our platform
• Customer support inquiries
• Feedback and survey responses

Payment Information:

• Payment card details (processed by our payment provider)
• Billing address
• Transaction history

2.2 Sensitive Personal Information

Important: Bisou Match collects certain categories of information that are considered sensitive under applicable privacy laws. We collect this information only with your explicit consent and apply heightened safeguards to its storage and processing.

The following categories of information you provide may constitute sensitive personal information under applicable law, including GDPR, California CPRA, and Quebec Law 25:

• Gender identity and sexual orientation or relationship preferences
• Astrological birth data (date, time, and place of birth) used to generate a personalized birth chart and compatibility profile — this data is used solely for astrological and psychological compatibility analysis within the platform and is never shared with third parties for profiling or advertising purposes
• Photos or images you upload to your profile

We collect sensitive personal information only to the extent necessary to provide our core service. You may choose not to provide certain sensitive information, but doing so may limit your access to specific platform features.

2.3 Information Collected Automatically

Usage Data:

• Pages viewed, features used, time spent
• Interactions with other users (swipes, matches, messages)
• Device information (type, operating system, browser)
• IP address and general location

Cookies and Tracking:

• Cookies, web beacons, and similar technologies
• Analytics data about how you use our service
• Advertising identifiers

2.4 Information from Third Parties

• Social media profile information (if you connect accounts)
• Payment processor information
• Identity verification services
• App store purchase data

3. How We Use Your Information

3.1 Provide Our Service

• Create and manage your account
• Generate Vedic astrology birth charts and compatibility analyses
• Show you potential matches based on astrological compatibility
• Facilitate connections and communication
• Process payments and subscriptions

3.2 Improve Our Service

• Analyze usage patterns and preferences
• Develop new features and functionality
• Conduct research on astrological compatibility
• Test and optimize our algorithms

3.3 Safety and Security

• Verify your identity and age
• Detect and prevent fraud, abuse, and violations
• Enforce our Terms of Service and policies
• Protect against security threats

3.4 Communication

• Send service-related notifications
• Respond to your inquiries
• Provide customer support
• Send marketing communications, advertisements, and promotional offers (with your consent)

3.5 Legal Compliance

• Comply with legal obligations
• Respond to legal requests
• Protect our rights and property
• Resolve disputes

3.6 Advertisements, Offers, and Events

Bisou Match may send you advertisements, promotional offers, and invitations to participate in events related to our platform and selected third-party partners. These communications may be delivered via email, push notifications, or in-app messages. By creating an account, you acknowledge that you may receive such communications. You may opt out of receiving promotional messages at any time by adjusting your notification preferences within the app or by following the unsubscribe instructions included in any marketing email.

Types of promotional communications you may receive include:

• Special subscription discounts and upgrade offers for Bisou Match premium plans
• Seasonal promotions, platform feature announcements, and third-party offers curated for our users
• Invitations to participate in Bisou Match-hosted or co-sponsored events, including social gatherings, community meetups, astrological workshops, and virtual experiences
• In-app advertisements displayed while using the Bisou Match platform

Data Collection Through Promotional Activities: When you engage with advertisements, offers, or events — including clicking on an offer, registering for an event, or completing a related survey or form — Bisou Match may collect personal information generated through that interaction (such as your responses, registration details, attendance, or engagement behaviour). All such data collected through these promotional activities is treated as personal information and is managed in accordance with this Privacy Policy. We apply the same standards of security, retention, and user rights to this data as we do to all other personal information we hold about you.

Where required by applicable law (including CASL for Canadian users and GDPR for EU/UK users), we will obtain your explicit consent before sending promotional communications. We will never send promotional SMS messages — all SMS communications remain limited to transactional OTP verification as described in Section 11. Opting out of promotional communications will not affect your ability to use the core platform or receive service-related notifications.

4. Legal Basis for Processing (GDPR/UK GDPR)

For users in the EU and UK, we process your personal data based on:

• Contract Performance: To provide our service and fulfill our Terms of Service
• Legitimate Interests: To improve our service, ensure security, and prevent fraud
• Consent: For marketing communications, sensitive data processing, and optional features (you can withdraw anytime)
• Legal Obligation: To comply with applicable laws and regulations

4.1 Automated Decision-Making

Our platform uses automated processing to generate compatibility scores and match suggestions based on astrological and psychological data you provide. Under GDPR Article 22, you have the right to:

• Request information about the logic involved in automated compatibility assessments
• Express your point of view regarding automated decisions
• Request human review of any significant decision made about you by our automated systems

To exercise these rights, contact us at support@bisoumatch.com.

5. How We Share Your Information

5.1 With Other Users

• Your profile information is visible to potential matches
• Messages you send are visible to recipients
• You control what information appears on your profile

5.2 Service Providers

We share information with trusted vendors who help us operate:

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Stripe, PayPal)
• Analytics providers (Google Analytics)
• Customer support tools
• Email and SMS delivery providers (including Twilio), used exclusively to transmit transactional OTP verification messages to users who have provided their mobile number during registration or account management. See Section 11 for full details.
• Identity verification services

5.3 Business Transfers

If we merge, are acquired, or sell assets, your information may be transferred to the new entity.

5.4 Legal Requirements

We disclose information when required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Enforce our policies
• Protect rights, property, and safety
• Respond to emergencies

5.5 With Your Consent

We may share information for other purposes with your explicit consent.

We never sell your personal information to third parties.

6. Data Retention

We retain your information for as long as:

• Your account is active
• Needed to provide our service
• Required by law
• Necessary for legitimate business purposes

After Account Deletion:

• Most data is deleted within 90 days
• Some data retained for legal compliance (e.g., transaction records for 7 years)
• Anonymized data may be retained for analytics

7. Your Privacy Rights

7.1 All Users

• Access: View your personal information
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Opt-Out: Unsubscribe from marketing emails, advertisements, and promotional offers at any time
• Data Portability: Download your data

7.2 US Users (CCPA/CPRA Rights)

California Residents: You have the right to:

• Know what personal information we collect
• Know if we sell or share your data (we don’t sell)
• Opt-out of data sales (not applicable)
• Delete your personal information
• Limit use of sensitive personal information
• Non-discrimination for exercising rights

Other State Rights: Similar rights may apply under Virginia, Colorado, Connecticut, and Utah privacy laws.

7.3 Canadian Users (PIPEDA / CASL Rights)

• Access your personal information
• Challenge accuracy and completeness
• Withdraw consent (where applicable)
• File complaints with Privacy Commissioner of Canada
• Unsubscribe from commercial electronic messages at any time

7.4 EU/UK Users (GDPR Rights)

• Access: Obtain a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion (“right to be forgotten”)
• Restriction: Limit how we process your data
• Portability: Receive data in portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: For consent-based processing
• Automated Decision-Making: Request human review of automated decisions
• Lodge Complaint: With your data protection authority

To Exercise Rights: Contact support@bisoumatch.com

8. Security

We protect your information using:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and testing
• Access controls and authentication
• Employee training on data protection
• Incident response procedures

No system is 100% secure. While we use industry-standard measures, we cannot guarantee absolute security.

8.1 Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable regulatory authorities as required by law:

• EU/UK Users (GDPR): We will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach, and will notify affected individuals without undue delay where the breach is likely to result in high risk.
• Canadian Users (PIPEDA): We will notify the Office of the Privacy Commissioner of Canada and affected individuals as soon as feasible when a breach creates a real risk of significant harm.
• US Users: We will notify affected individuals and applicable state regulators within the timeframes required by applicable state breach notification laws.

Breach notifications will include: the nature of the breach, categories of information affected, likely consequences, and steps we are taking to address the breach.

9. International Data Transfers

9.1 Transfer Mechanisms

We may transfer data internationally using:

• EU-US Data Privacy Framework (for US transfers)
• Standard Contractual Clauses (EU Commission approved)
• UK Extension to Data Privacy Framework
• Adequacy decisions where available

9.2 Safeguards

We ensure appropriate safeguards through:

• Transfer Impact Assessments
• Data Processing Agreements with vendors
• Technical and organizational measures

10. Cookies and Tracking

10.1 Types of Cookies

• Essential: Required for site functionality — these cannot be disabled
• Analytics: Help us understand usage patterns
• Advertising: Deliver relevant ads (with consent only)
• Preference: Remember your settings

10.2 Cookie Consent

When you first visit the Bisou Match platform in jurisdictions where consent is required (including the EU, UK, and Quebec), you will be presented with a cookie consent banner. We will not place non-essential cookies (analytics, advertising, or preference cookies) until you have provided your affirmative consent.

You may withdraw or modify your cookie preferences at any time through the cookie settings available within the platform. Withdrawing consent for non-essential cookies will not affect the functionality of core platform features.

11. SMS and Text Message Communications

IMPORTANT: This section governs how Bisou Match Inc. uses SMS text messaging and constitutes required disclosure under applicable telecommunications regulations, including the Telephone Consumer Protection Act (TCPA), Canada's Anti-Spam Legislation (CASL), and carrier A2P 10DLC requirements.

11.1 SMS Use — Transactional Only

Bisou Match Inc. uses SMS (text messaging) exclusively to deliver one-time passcode (OTP) verification codes to users. No marketing or promotional messages are sent via SMS. SMS messages are triggered only in two specific circumstances:

• During initial account registration, to verify your phone number and confirm your identity; and
• When you initiate a change to sensitive account information, including password, phone number, mailing address, or username.

All SMS messages are sent solely in direct response to an action you initiate on the platform. You will never receive an unsolicited SMS from Bisou Match Inc.

11.2 How We Obtain Your Consent

At the point of phone number entry during account registration, users are shown the following disclosure:

“By entering your mobile number, you agree to receive a one-time verification code (OTP) via SMS from Bisou Match Inc. for identity verification purposes only. Msg & data rates may apply. Reply STOP to opt out at any time.”

Users must affirmatively proceed past this disclosure to complete registration. By voluntarily providing your mobile phone number and continuing with account creation, you acknowledge and agree to receive transactional OTP SMS messages from Bisou Match Inc. You must confirm that you are 18 years of age or older prior to completing registration.

Bisou Match Inc. does not share your mobile number with third parties for their marketing purposes. Consent to receive SMS is not a condition of purchasing any goods or services.

11.3 Message Frequency

Message frequency varies. OTP messages are only sent in direct response to actions you initiate on the platform. You will not receive recurring, scheduled, or unsolicited SMS messages.

11.4 Rates and Charges

Message and data rates may apply depending on your mobile carrier plan. Bisou Match Inc. is not responsible for any charges imposed by your carrier in connection with SMS delivery.

11.5 How to Opt Out

To stop receiving SMS messages from Bisou Match Inc., reply STOP to any message. You will receive a single confirmation that your opt-out request has been processed. Note that opting out of OTP SMS will affect your ability to verify your identity and access certain platform features that require verification.

11.6 Help and Support

Reply HELP to any SMS message for assistance, or contact us at support@bisoumatch.com.

11.7 SMS Service Providers

We use third-party SMS service providers (including Twilio) to deliver verification messages on our behalf. These providers process your phone number solely for message delivery and are bound by confidentiality and data protection obligations consistent with this Privacy Policy. No opt-in data, consent records, or end-user mobile information is shared with third parties for their own marketing or commercial purposes.

12. Children's Privacy

Our service is not for anyone under 18. We do not knowingly collect information from minors.

If we discover we've collected minor data:

• We delete it immediately
• We notify parents/guardians
• We investigate how it occurred

See our Child Safety Policy for complete details.

13. Jurisdiction-Specific Provisions

13.1 United States

• COPPA Compliance: We do not target children under 13
• State Laws: We comply with California CCPA/CPRA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and Utah UCPA
• Do Not Sell: We do not sell personal information
• Sensitive Data: California residents may limit our use of sensitive personal information as described in Section 2.2

13.2 Canada

• PIPEDA Compliance: We follow all 10 privacy principles under the Personal Information Protection and Electronic Documents Act
• Provincial Laws: We comply with Quebec Law 25, Alberta PIPA, and BC PIPA
• Consent: We obtain meaningful consent as required prior to collecting, using, or disclosing personal information
• CASL Compliance: We comply with Canada’s Anti-Spam Legislation (CASL) with respect to all commercial electronic messages, including obtaining express or implied consent before sending messages and providing a functional unsubscribe mechanism in every applicable message

13.3 European Union

• GDPR Compliance: We comply with all GDPR requirements
• Sensitive Data: We process special categories of personal data only with your explicit consent under GDPR Article 9
• Automated Decisions: We comply with GDPR Article 22 regarding automated decision-making and profiling
• Data Protection Officer: Available at amar@bisoumatch.com
• Lead Supervisory Authority: [To be determined based on main establishment]
• EU Representative: [If required, based on Article 27]

14. Third-Party Links

Our service may contain links to third-party websites and services. We are not responsible for their privacy practices. Please review their policies before providing information.

15. Changes to This Policy

We may update this Privacy Policy to reflect:

• Changes in our practices
• New legal requirements
• Service improvements

Notice of Changes:

• Material changes: 30 days advance notice via email and in-app notification
• Non-material changes: Posted with updated effective date
• Continued use after changes constitutes acceptance

16. Contact Us

17. Supervisory Authorities

European Users: You may lodge complaints with your national data protection authority. Find yours at: https://edpb.europa.eu/about-edpb/board/members_en

UK Users: Information Commissioner's Office (ICO)

• Website: https://ico.org.uk
• Phone: 0303 123 1113

Canadian Users: Office of the Privacy Commissioner of Canada

• Website: https://www.priv.gc.ca
• Phone: 1-800-282-1376

US Users (California): California Attorney General

• Website: https://oag.ca.gov/privacy