Privacy Policy
This Privacy Policy explains how Refine Touch ("we", "us") collects, uses and shares personal data when you use the Platform. We comply with US federal law and applicable state privacy laws (including the California Consumer Privacy Act, "CCPA") and, when we serve users in the European Union, with the GDPR.
1. Data we collect
- Account data — name, email, phone, city, role (Customer / Provider), password hash.
- Profile data — bio, skills, portfolio images, years of experience, avatar.
- Booking data — services booked, dates, notes, price, commission, payment status.
- Payment data — handled directly by our payment processor (Stripe). We do not store your full card number on our servers.
- Usage data — IP address, device info, pages visited, cookies (see our Cookie Policy).
2. How we use it
- To create and operate your account.
- To match Customers with Providers and process bookings.
- To process payments and remit earnings to Providers.
- To keep the Platform safe and prevent fraud.
- To send transactional emails (booking confirmations, receipts, cancellations).
- To send marketing emails only when you have opted in — you can opt out at any time.
3. Legal bases (EEA / UK users)
We rely on: performance of the contract between you and us, our legitimate interests in operating and improving the Platform, your consent (for marketing and non-essential cookies), and compliance with legal obligations.
4. Sharing
We share personal data with (a) the counter-party of your booking (Customer ↔ Provider), (b) trusted service providers (hosting, payment processing, email delivery, analytics), (c) government authorities when required by law. We do not sell your personal data.
5. Retention
We keep account data for as long as your account is active. Booking and financial records are kept for up to 7 years to meet tax and accounting obligations. You may request earlier deletion, subject to legal retention duties.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, and to object to certain processing. California residents have specific CCPA rights, including the right to know what we collect and to opt out of the "sale" or "sharing" of personal information (we do not sell data). To exercise these rights, email hello@refinetouch.com.
7. Security
We use encryption in transit (TLS), hashed passwords (bcrypt), access controls and continuous monitoring. No system is 100% secure — please protect your credentials.
8. International transfers
Our servers are located in the United States. If you access the Platform from another country, your data will be transferred to the US, subject to appropriate safeguards.
9. Children
The Platform is not intended for anyone under 18. We do not knowingly collect personal data from minors.
10. Changes
We may update this Policy. Material changes will be posted here and, where required, notified by email.
For any question, contact us at hello@refinetouch.com.