Privacy Policy

ANumberOne, LLC, doing business as MateAlign ("MateAlign," "we," "us," or "our") operates a relationship and social compatibility matching platform, including the website, mobile applications, and related services (collectively, the "Service"). The Service is a software platform and algorithmic compatibility tool; it is not a matchmaking service, dating service, or introduction service. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Service.

This Privacy Policy should be read together with our Terms and Conditions of Use. By clicking "Accept" during the account registration process, or by otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.

If you are located in California or Canada (excluding the Province of Québec), additional rights and disclosures apply to you as described in Sections 12 and 13 of this Privacy Policy. MateAlign does not currently offer the Service in the Province of Québec, the European Economic Area (EEA), the United Kingdom, the United Arab Emirates, Oman, Pakistan, Morocco, Egypt, Algeria, Tunisia, or other international markets; the provisions of Sections 11 and 13.2–13.4 relating to those jurisdictions are reserved for future activation.

We collect information you voluntarily provide when you register for and use the Service, including:

• Account Registration Data: Name, email address, date of birth, and gender.
• Profile Information: Photographs, biographical details, and other information you choose to include in your profile.
• Questionnaire Responses: Your answers to compatibility questionnaires, preferences, and related inputs.
• Communications: Messages you send to us through support channels, feedback forms, or other communication methods.
• Payment Information: Billing details processed through our third-party payment provider (Stripe). MateAlign does not directly store your full credit card number.

When you use the Service, we automatically collect certain information, including:

• Usage Data: Session activity, matching session participation, compatibility scores, features accessed, pages viewed, and interaction patterns.
• Device and Technical Data: IP address, browser type, operating system, device identifiers, and mobile network information.
• Location Data: Approximate location derived from your IP address (we do not collect precise GPS location unless you separately consent).
• Log Data: Server logs recording access times, referring URLs, and system activity.

We use cookies and similar technologies to operate and improve the Service. These may include:

• Essential Cookies: Required for basic platform functionality, authentication, and security.
• Analytics Cookies: We do not currently use analytics cookies. If we introduce analytics tools in the future, we will update this section and our Cookie Policy and, where required by applicable law, request your consent before setting any analytics cookies.
• Functional / Security Cookies: Used to protect the platform against bots and automated abuse. For example, Cloudflare Turnstile is deployed during account signup to verify that requests come from a human, not a bot. These cookies do not track user behaviour or build advertising profiles.
• Marketing Cookies: As of the effective date of this Privacy Policy, MateAlign does not deploy marketing cookies. If we introduce marketing cookies in the future, we will update this section and obtain your consent where required by law.

Non-essential cookies currently deployed on the Service (such as Cloudflare Turnstile for bot protection and Stripe for payment fraud prevention) are set on the basis of our legitimate interests. You can manage cookies at any time through your browser settings. For detailed information about each cookie we use — including its name, provider, purpose, type, and duration — please see our Cookie Policy, available at https://matealign.com/cookie-policy.

Cookies currently in use include: sb-[project-ref]-auth-token (Supabase — authenticates your session, session-scoped); sb-[project-ref]-auth-token-code-verifier (Supabase — PKCE code verifier during auth flows, short-lived); cf-turnstile-* (Cloudflare — bot protection during signup, per-challenge); __stripe_mid (Stripe — payment fraud prevention, ~1 year, billing pages only); __stripe_sid (Stripe — payment fraud prevention, session, billing pages only).

We may receive information about you from third-party sources, such as social media platforms (if you choose to link an account) and identity verification services, in accordance with applicable law. If we engage analytics providers in the future, we will update this section accordingly.

Some information you provide through MateAlign assessments may reveal or relate to sensitive personal information under applicable privacy law, including data concerning religious or philosophical beliefs, sexual orientation, or health. We process such data only with your explicit consent, which you provide when you voluntarily complete assessments containing such questions. You may withdraw your consent at any time by contacting our Privacy Team at privacy@matealign.com, though withdrawal will not affect the lawfulness of processing carried out before withdrawal. Where required by law, we apply additional safeguards to the processing and storage of special category data, including encryption at rest and strict access controls.

We use your personal information for the following purposes:

• Providing the Service: To create and manage your account, deliver compatibility matching, facilitate sessions and events, and communicate service-related information.
• Improving the Service: To enhance our compatibility algorithms, scoring systems (including the ALIGN™ Insight Engine), user experience, and overall platform performance.
• Communications: To send service-related notifications, event invitations, and (with your consent where required) marketing communications.
• Safety and Security: To detect fraud, enforce our Terms, protect user safety, and maintain platform integrity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
• Research and Development: To train, test, and improve algorithms, machine learning models, and scoring systems using appropriately safeguarded data.
• Aggregated Insights: To create Aggregated Data and De-Identified Data for statistical analysis, industry insights, benchmarking, and product development, as described in our Terms.
• Commercial Matching (Future Product): MateAlign may in the future offer a commercial matching feature that algorithmically compares your compatibility profile against a selected subset of, or the entire, MateAlign user base to identify potential compatible matches. By accepting our Terms and Conditions of Use, you acknowledge and agree to this intended use of your compatibility data. MateAlign will provide at least 30 days' advance notice before activating this feature, and you may opt out at any time by contacting privacy@matealign.com.

We do not sell your Personal Data or share it for cross-context behavioral advertising purposes. We share your information only in the following circumstances:

Compatibility scores, session results, and limited profile information are shared with other participants in your sessions or events as necessary to deliver the Service.

We share data with third-party service providers who assist in operating the Service (e.g., hosting, payment processing via Stripe, email delivery) as well as analytics providers. These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security measures.

We may share Aggregated Data and De-Identified Data (as defined in our Terms) with third parties for statistical analysis, industry insights, benchmarking, and research. This data cannot reasonably identify you. Third-party recipients are contractually prohibited from re-identifying users.

MateAlign may develop and offer Insights Products based on Aggregated and De-Identified Data. These products do not identify individual users and may be licensed, sold, or shared with third parties under contractual restrictions requiring data protection measures and prohibiting re-identification.

We may disclose your information when required by law, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and any choices you may have regarding your information.

If you participate in an Organizer-managed event, certain personal data—including your compatibility reports, session participation data, and limited contact information—may be shared with the Organizer for the purpose of facilitating the event. Organizers are independent data controllers for any processing they conduct outside the Service and are contractually required to: (a) use participant data solely for event-related purposes; (b) implement appropriate security measures; (c) notify MateAlign within 48 hours of any data breach involving participant data; and (d) delete participant personal data within 30 days of the event's conclusion and the expiration of the analytics access window, unless they have obtained your separate, ongoing consent. MateAlign is not responsible for an Organizer's independent processing of your data outside the Service.

Report Delivery Asymmetry: In Organizer-managed events, full compatibility reports generated from your participation are delivered to the Organizer, not directly to you as a participant. The Organizer has sole discretion over what report information, if any, is communicated back to participants. MateAlign does not control or guarantee the delivery of compatibility report results to participants in Organizer-managed events. To obtain a copy of your own compatibility data, you may exercise your data access rights under Section 10.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Upon account termination, you have a 30-day window to request export of your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV). Deleting your account does not automatically delete your personal data. Following account deletion, your personal data is retained indefinitely for the legitimate purposes described in this policy—including fraud prevention, legal compliance, dispute resolution, and aggregate analytics—unless and until you submit a formal data deletion request to privacy@matealign.com. Upon receipt and verification of a deletion request, we will process the deletion within the timeframes specified below.

After account deletion, we may retain certain data as required by law (e.g., financial and transaction records), to resolve disputes, enforce our agreements, prevent fraud, or for other legitimate business purposes. The specific categories of data subject to post-deletion retention and the applicable retention periods are set out in this Section 6. Aggregated Data and De-Identified Data may be retained indefinitely, as they cannot identify you.

The following retention periods apply following receipt of a verified data deletion request:

• Account registration and profile data: deleted within 30 days of verification (subject to any pending data export request).
• Financial and transaction records: retained for seven (7) years as required by applicable tax and accounting laws.
• Support communications: retained for twenty-four (24) months following resolution.
• Server logs and usage data: retained for twelve (12) months.
• Questionnaire responses and compatibility data: deleted within 30 days of verification, except where incorporated into Aggregated or De-Identified Data.

MateAlign implements reasonable technical and organizational safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest;
• Access controls limiting data access to authorized personnel on a need-to-know basis;
• Regular security assessments and audits;
• Employee confidentiality obligations and training; and
• Monitoring and logging of administrative access to user data.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

In the event of a personal data breach involving your personal information, MateAlign will notify affected users without unreasonable delay. The specific notification timelines are as follows:

• Texas Residents: In accordance with the Texas Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521.053), MateAlign will notify affected Texas residents no later than sixty (60) calendar days after discovery of the breach. If the breach affects 250 or more Texas residents, MateAlign will also notify the Texas Attorney General within the same 60-day period.
• California Residents: In accordance with the California Customer Records Act (Cal. Civ. Code § 1798.82), MateAlign will notify affected California residents in the most expedient time possible and without unreasonable delay following discovery of the breach.
• Canadian Residents (Excluding Québec): In accordance with PIPEDA and the Breach of Security Safeguards Regulations (SOR/2018-64), MateAlign will notify the Office of the Privacy Commissioner of Canada and affected individuals of any breach that poses a real risk of significant harm, as soon as feasible after the breach is determined.
• All Other Users: MateAlign will notify affected users without unreasonable delay as a general practice.

MateAlign delivers the Service using the following third-party infrastructure providers that process or have access to user personal data: (i) Supabase (Supabase Inc.) — cloud-hosted PostgreSQL database storing all user personal data; (ii) Vercel (Vercel Inc.) — application hosting platform serving the MateAlign web application; (iii) Hostinger (Hostinger International Ltd.) — domain name registrar and DNS provider for matealign.com (does not process user personal data beyond DNS routing). Each infrastructure provider is contractually required to notify MateAlign of any confirmed or suspected security incident affecting MateAlign user data within forty-eight (48) hours of discovery.

MateAlign is based in the State of Texas, United States. If you are located outside the United States, your personal information will be transferred to and processed in the United States.

For transfers of personal data from Canada (excluding the Province of Québec, which is not a market in which MateAlign currently operates), MateAlign implements contractual safeguards with its processors as required by the Personal Information Protection and Electronic Documents Act (PIPEDA). If you have questions about international data transfers, please contact us using the details in Section 16.

The Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a person under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the address in Section 16, and we will work to remove the information from our systems.

When MateAlign discovers or has reason to believe that a registered user is under 18 years of age, the following data-handling steps apply:

• (a) Account Suspension and Data Preservation. The account is immediately suspended upon discovery. All personal data associated with the account is preserved during the assessment and parental notification period. No data is deleted during this stage.
• (b) Parental Notification. Where the user appears to be between 13 and 17 years of age and contact information for a parent or legal guardian is available, MateAlign will attempt to notify the parent or guardian within five (5) business days of suspension.
• (c) Data Deletion. Unless MateAlign is required by law to retain the data for a longer period, all personal data associated with the Minor Account will be permanently deleted from production systems within thirty (30) days of account suspension. Deletion extends to backup systems within the next standard backup rotation cycle.
• (d) COPPA. For any account holder who appears to be under 13 years of age, MateAlign will immediately escalate the matter to its Privacy/Legal team and will comply with all applicable COPPA requirements in handling such accounts.
• (e) Retained De-Identified Data. Following deletion of personal data, MateAlign may retain Aggregated or De-Identified Data derived from the account's activity where that data cannot reasonably be used to identify the individual.

If you are a parent or guardian and wish to request immediate deletion of data associated with a minor account, contact privacy@matealign.com.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your personal data in a structured, commonly used, machine-readable format.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email or by contacting us at privacy@matealign.com. MateAlign will honour opt-out requests within ten (10) business days of receipt, in compliance with the U.S. CAN-SPAM Act. For users located in Canada, opt-out requests will be honoured promptly and without delay, in compliance with Canada's Anti-Spam Legislation (CASL). Service-related communications (e.g., account notifications, security alerts, billing receipts) are not marketing communications and cannot be opted out of while your account remains active.

To exercise any of the above rights, contact us at the address provided in Section 16. We will respond to verified requests within 30 days (or 45 days for CCPA or Texas TDPSA requests), with one permitted extension of up to 45 days where reasonably necessary. We may need to verify your identity before fulfilling your request.

If you are a California resident, the following additional provisions apply under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address); personal information under California Civil Code Section 1798.80(e); characteristics of protected classifications (age, gender); internet or electronic network activity; geolocation data; and inferences drawn from the above.

MateAlign does not sell or share (as those terms are defined under the CCPA/CPRA) your Personal Information for cross-context behavioral advertising purposes.

As a California resident, you have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information (not applicable, as we do not sell or share); limit the use and disclosure of sensitive personal information to uses that are necessary to perform the services you have requested; and not be discriminated against for exercising your rights.

Regarding the right to limit sensitive personal information: The core service MateAlign provides is algorithmic compatibility matching. Questionnaire responses that may reveal sensitive personal information are used solely to generate the compatibility scores and match outputs that constitute that service. MateAlign does not use sensitive personal information for advertising, sale to third parties, or any purpose beyond delivering the matching service you signed up for. If you do not wish your sensitive personal information to be used in compatibility matching, your option is to delete your account by contacting privacy@matealign.com.

You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority and your identity.

MateAlign does not currently offer the Service in the Province of Québec. If you are located in Canada outside Québec, the following additional provisions apply under the Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy Officer. MateAlign has designated a Privacy Officer responsible for overseeing compliance with PIPEDA and applicable provincial privacy legislation. The Privacy Officer can be reached at privacy@matealign.com.

Your Rights Under PIPEDA. You have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) withdraw consent for certain processing, subject to legal or contractual restrictions; and (d) file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca if you believe we have violated PIPEDA.

Cross-Border Transfers. Your personal information is transferred to and processed in the United States, where it may be subject to access by US government authorities under US law. MateAlign has implemented contractual safeguards with its US-based processors as required by PIPEDA.

If you are a resident of Texas, the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, provides you with the following rights with respect to your personal data:

• (a) Right to Access. You have the right to confirm whether MateAlign is processing your personal data and to access that data in a portable, readily usable format.
• (b) Right to Correction. You have the right to correct inaccuracies in your personal data, taking into account the nature of the data and MateAlign's purposes for processing it.
• (c) Right to Deletion. You have the right to request deletion of personal data you have provided to MateAlign or that MateAlign has collected about you.
• (d) Right to Opt Out of Profiling. MateAlign's compatibility matching algorithm generates scores and match suggestions; it does not produce legal effects. If you wish to opt out of algorithmic compatibility matching entirely, you may delete your account at any time by contacting privacy@matealign.com. You may also request human review of any specific compatibility determination.
• (e) Right to Appeal. If MateAlign declines to act on a rights request, you have the right to appeal by contacting privacy@matealign.com with the subject line "TDPSA Rights Appeal." MateAlign will respond to your appeal within 60 days. If your appeal is denied, you may submit a complaint to the Texas Attorney General's office.
• (f) Sensitive Data. The TDPSA treats certain categories of personal data as sensitive, including data revealing racial or ethnic origin, religious beliefs, mental or physical health conditions, sexual orientation, immigration status, and financial information. MateAlign may process sensitive data solely to deliver the compatibility matching service you have requested. MateAlign does not process such data for sale, targeted advertising, or any purpose beyond the service itself.

To exercise any of the rights described above, contact us at privacy@matealign.com. MateAlign will respond to verified requests within 45 days, with one permitted extension of an additional 45 days where reasonably necessary.

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through the Service.

We may update this Privacy Policy from time to time. We will provide at least 30 days' advance notice of material changes by posting the updated Privacy Policy on our website and by email.

Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes.

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact us at:

MateAlign Email: support@matealign.com Address: 2100 14th St Ste 107 #2255 Plano, TX 75074 Data Protection Inquiries: privacy@matealign.com

By clicking "Accept" during the account registration process, or by otherwise using the MateAlign Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.