Privacy Policy

This page explains, in a readable form, what data we collect through the consumer web and for what purposes we use it.

Version: consumer-privacy-v2026-04-pinterest-hardening | Last updated: 2026-04-20

1. What data do we collect?

  • Account data: first name, last name, username, email, phone, and sign-in/identity verification records.
  • Profile data: city, age group, gender, tattoo experience, and account preferences.
  • Listing and interaction data: listings you create, reference images, descriptions, favorites, save actions, messages, and records arising from comments/ratings flows.
  • Location data: the city selected during registration and, if you use the relevant feature, device location provided by your browser.
  • System data: IP address, browser information, session records, error and security logs.
  • Pinterest integration data: If you choose to connect your Match.INK account to Pinterest, we may process limited account and integration data through an authorized connection via the Pinterest API/OAuth (including identifiers needed for connection and publishing).

We do not request special categories of personal data that are unnecessary for the platform’s standard product flows.

We recommend that you do not share sensitive data (such as health information) in messaging, listing descriptions, or support channels.

2. Why do we process this data?

  • To create accounts, sign in, and protect account security
  • To display profile and preference fields
  • To operate listing creation, messaging, and offer flows
  • To provide favorites, saves, and discovery experiences
  • To run notifications and support processes
  • To enable nearby listings and distance calculations (including kilometer-based calculations)
  • To maintain platform security
  • To provide Pinterest features to the user who authorized the connection; to publish your own Match.INK content; and to enable link-backs to public pages

3. With whom may data be shared?

  • Firebase Authentication: account sign-in and identity verification
  • Firebase Storage: uploaded images and file metadata
  • MongoDB: account, profile, listing, message, notification, and operational records
  • SMTP e-posta altyapisi: password reset, verification, and support communications
  • Google Maps Platform: map display, nearby listings, device location, and distance calculations
  • Pinterest: limited data exchange with Pinterest services under an authorized integration (API/OAuth).

Some of your data may also be shared with other users where required by the relevant flow. For example, your listings and limited account information needed to arrange communication may be shown to the relevant artist.

Data related to Pinterest is processed only for the purposes described above; it is not sold, not redistributed for unrelated commercial purposes, and not used for unrelated third-party advertising.

We do not act on your Pinterest account without your explicit authorization and without a corresponding user action or awareness, as applicable.

Match.INK is not affiliated with Pinterest, and is not endorsed or sponsored by Pinterest. Trade names and marks belong to their respective owners.

4. International transfers

Some of your data may be processed through infrastructure with cross-border connections due to services such as Firebase and Google Maps Platform.

These transfers are managed under the appropriate legal basis under applicable law, including explicit consent, adequacy decisions, appropriate safeguards, or other transfer mechanisms suitable for the product.

5. How long do we retain data?

Your personal data is retained while your account is active or for as long as required by the relevant service.

When your account deletion request is verified, your data is placed into a deletion process. The deletion process is generally completed within 30 days at the latest.

Records subject to legal retention obligations may be kept for the required period.

If you disconnect Pinterest through Match.INK, further integration-driven actions toward Pinterest stop; active access credentials and tokens are disabled or removed as appropriate for their validity. Immediate erasure of every technical record may not always be possible due to legal obligations, security needs, or service-provider log retention practices.

6. How to contact us

  • For privacy and KVKK requests: privacy@match.ink
  • For technical support and general requests: support@matchink.app
  • For the account deletion process: /account-deletion