Privacy Policy

Information We Collect

• Account and authentication data: Email, sign-in provider details, account identifiers, and authentication metadata from Firebase Authentication (email/password, Google, Facebook, anonymous, or passkey flows).
• Profile data: Username, display name, birthday (for age gating), gender, location, profile description, interests, languages, interface-language preference, avatar choice, and profile photos.
• Messages and shared content: Chat messages, replies, reactions, file attachments, and optional location shares sent in conversations.
• Moderation and safety data: User reports, moderation scores, flagged excerpts, appeal records, and enforcement events used to enforce community rules.
• Verification and compliance data: If paid, creator, payout, or adult-oriented workflows are enabled, Pairousel or its providers may collect identity, age, liveness, tax, payout-account, sanctions, consent, and records information needed for eligibility, safety, legal compliance, and provider requirements.
• Technical and security data: Signed device identifier cookie, device identifier stored locally in your browser, IP-derived country/region lookups, session metadata, and abuse-prevention signals.
• Support and diagnostics data: Bug reports and optional screenshots submitted through in-app reporting.

How We Use Information

• Provide core service functionality (authentication, profile management, matching, messaging, and account features).
• Operate safety, moderation, abuse prevention, and account enforcement controls.
• Verify eligibility for paid, creator, payout, and adult-oriented workflows where those features are enabled.
• Maintain reliability, troubleshoot issues, and improve product quality.
• Send transactional account emails (for example verification, password reset, and account deletion confirmation).

Video and Audio Calls

• Calls use WebRTC peer-to-peer transport whenever possible, so media streams are exchanged between participants rather than permanently stored by Pairousel.
• Pairousel does not provide built-in call recording. When disclosed and enabled, random Match video may be subject to limited, ephemeral image-frame safety analysis. Pairousel does not routinely apply adult-content frame analysis to Connections or Locked In calls.
• Pairousel may process reports, relevant messages, submitted evidence, session metadata, moderation scores, and safety signals needed to investigate and enforce platform rules. Raw proactive Match frames are not retained by Pairousel; safety scores, a content hash, provider and policy metadata, and review records may be retained under moderation schedules.
• Connection metadata (for example session state and signaling details) is still processed to establish and maintain calls.

Where Data Is Stored and Processed

• Client/browser: Local and session storage for app preferences and temporary UI state.
• API and services: Pairousel server processes authenticated requests, moderation, and account actions.
• PostgreSQL: Matching, relationship, moderation-reporting, and enforcement records.
• Firestore and Firebase Storage: User profile documents, conversation records, and uploaded media objects.
• Redis: Real-time socket/session state, queue state, and short-lived rate-limit/moderation caches.

Third-Party Services

Pairousel uses third-party processors only for service operation and security, not advertising:

• Firebase (Google): Authentication, Firestore, and Cloud Storage.
• Google Cloud Vision API: Image safety checks for moderation flows.
• Google Perspective API: Text safety and toxicity scoring.
• Google Maps Platform: Places/autocomplete, map rendering, and location UI features.
• GIPHY: GIF search and sharing.
• Resend: Transactional email delivery when configured.
• ipapi.co: IP-based geolocation fallback for coarse regional detection.
• Cloudflare TURN (optional): Time-limited ICE/TURN credentials for call connectivity when enabled.
• Payment, payout, identity, age-assurance, and compliance providers (optional): Payment, billing, creator verification, viewer age assurance where required, consent/records support, sanctions screening, tax, and payout processing when paid, creator, payout, or adult-oriented workflows are enabled.

Cookies and Local Storage

• Signed device ID cookie: HTTPOnly cookie used for security, session continuity, and abuse prevention. Default expiry is 1 year.
• Authentication/session tokens: Used to keep you signed in.
• Local browser storage: Stores user-selected app preferences (for example notification, media, and privacy UI settings).
• These mechanisms are used for operation and safety, not ad tracking across third-party sites.

Data Retention

• Account/profile and conversation data: Retained while your account is active, unless removed earlier by you or moderation action.
• Account deletion and closure: The in-app deletion flow removes normal profile, social, conversation, and real-time account data. If a creator has unpaid earnings, an in-progress payout, or another unresolved financial obligation, Pairousel may first restrict the account to a limited closing-account experience so the creator can complete payout, tax, identity, and support tasks.
• Pending call requests: Expire automatically (typically within seconds) and are marked expired by scheduled cleanup jobs.
• Disconnected connection records: Cleanup job removes old disconnected request records after approximately 30 days.
• Moderation evidence snapshots: Written with a 14-day expiry target (`expiresAt`) for automatic removal when Firestore TTL is configured.
• Photo moderation cache: Short-lived cache (default approximately 24 hours) keyed by content hash.
• Verification, payout, tax, consent, fraud, chargeback, safety/enforcement, and support records: Account deletion does not necessarily erase these records from Pairousel or its vendors. They may be retained as needed for security, abuse prevention, legal and tax obligations, provider requirements, payment/payout compliance, refunds, disputes, sanctions review, and fraud prevention.

Your Privacy Choices and Rights

• Correct your information: Update profile fields directly in app settings.
• Delete or close your account: Use the in-app account deletion flow to remove normal account data. A creator account with unresolved earnings or financial obligations may remain available in a restricted closing state until required payout and compliance processing is complete.
• Access/export request: Email privacy@pairousel.com for a copy of your personal data currently available through support workflows.
• Manual correction/deletion requests: If you cannot use in-app tools, contact privacy@pairousel.com with your account email and request details.
• No sale/share for advertising: Pairousel does not sell personal data and does not share personal data for cross-context behavioral advertising.

Regional Rights

Depending on your location, you may have rights that include access, correction, deletion, portability, and restriction or objection to certain processing. We review and respond to verified privacy requests according to applicable law.

Children’s Privacy

Pairousel is intended for adults 18 and older. We do not knowingly permit under-18 use. If we learn that an underage account exists, we remove it.

Security

• Transport encryption (HTTPS/WSS in production environments).
• Signed device identifiers and abuse-prevention controls.
• Access controls and authenticated API checks for protected operations.
• No security control is perfect; you should also protect your account credentials and devices.

Changes to This Policy

We may update this policy as product features or legal obligations change. When we do, we update the date on this page.

Contact

For privacy questions or data requests, contact privacy@pairousel.com.