Privacy Policy

We collect information you give us directly, information generated as you use the Service, and limited information from third parties when you sign in through them.

a. Information you provide

• Account credentials. Your email address and a password (stored as a one-way hash — we never see your plaintext password).
• Identity and contact details. Your legal name, preferred name, date of birth, gender, height, phone number, and mailing address.
• Profile and matching information. Religious identity and observance, kashrut and Shabbat practice, family background and parental Jewish status, education, occupation, lifestyle preferences, relationship history and goals, partner preferences, and a written bio. Some of this information is sensitive — you choose what to share.
• Photos. Up to six photos you upload to your profile.
• Disclosures. Acknowledgements you check before submitting your application (age, marital status, photo currency, etc.).
• Communications with us. Messages you send to support, replies to matchmaker outreach, and free-text notes you write for your matchmaker.

b. Information we generate

• Service activity. Profile status, questionnaire progress, match assignments, and timestamps.
• Technical data. IP address, browser type, device identifiers, and basic request logs collected by our hosting provider for security and reliability.
• Cookies. A small session cookie that keeps you signed in, and any cookies set by anti-abuse tooling (e.g., bot challenges).

c. Information from third parties

• Google Sign-In. If you sign in with Google, we receive your name, email address, and Google account ID — only what you authorize in Google's consent screen.
• Payments. We do not collect payment details on the Service. Joining the database is free; if you purchase a paid coaching tier, payment is arranged directly with our team (currently via Zelle), and we receive the details that accompany the transfer — such as your name and the amount. Earlier payments were processed by Stripe, which collected card and billing details directly; for those we received only a payment confirmation and the last four digits of the card.

• Run the matchmaking service. Build your profile, share it with our matchmakers, identify and suggest compatible matches, and facilitate introductions.
• Account administration. Authenticate you, keep records of payments you arrange with our team, send transactional emails (account confirmations, match notifications, password resets), and respond to support requests.
• Service improvement. Understand how the Service is used so we can improve it. We do not sell your data.
• Marketing communications. Occasional updates from our team. Every marketing email includes an unsubscribe link, and unsubscribing has no effect on transactional emails you need to receive.
• Security and legal compliance. Detect fraud and abuse, enforce our Terms of Service, and respond to lawful requests.

We share information only as described below. We do not sell your personal information.

• Bsheret matchmakers and staff. Authorized matchmakers and administrators on the Bsheret team can view your full profile to facilitate matchmaking.
• Potential matches. Your profile becomes visible to another member only when a matchmaker marks an introduction as “visible to users.” You are not searchable by other members on your own.
• Service providers. Vendors that operate the platform on our behalf: hosting and database (Vercel and Neon), file storage for photos (Vercel Blob), email delivery (Resend), and bot/abuse protection (Cloudflare). These providers process information only to deliver their service to us. Stripe, which processed card payments before we moved to direct billing, retains records of those past transactions under its own privacy policy.
• Legal and safety. When required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to protect the rights, safety, or property of Bsheret, our members, or the public.
• Business transitions. If Bsheret is involved in a merger, acquisition, or sale of assets, your information may be transferred — we'll notify you and any successor must honor this policy.

Photos you upload are stored in our file-storage provider (Vercel Blob) and are visible to Bsheret matchmakers. They are shared with another member only after a matchmaker has assigned the match and marked it visible. We recommend the photos you upload be recent (within the past 12 months) and accurately represent how you currently appear.

We use a single first-party session cookie to keep you signed in, and Cloudflare may set anti-bot cookies when you submit forms. We do not use third-party advertising cookies and we do not run cross-site tracking. You can clear cookies in your browser at any time; doing so will sign you out.

We keep your information for as long as your account is active and as long as we need it to provide the Service. Specifically:

• Active profiles — retained until you ask us to delete them.
• Paused / archived profiles — retained so you can return at any time. You may ask us to delete them.
• Payment records (including records of past payments processed by Stripe) — retained for as long as required by applicable tax and accounting laws.
• Email engagement records (including unsubscribe state) — retained so we honor your preferences indefinitely.

We use industry-standard safeguards: passwords are stored as bcrypt hashes (never plaintext), traffic is served over TLS, our database is hosted in encrypted-at-rest environments, and access to member data is limited to staff who need it. No system is perfectly secure — if we ever become aware of a security incident that affects you, we will notify you in accordance with applicable law.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your information, and to receive a copy in a portable format. You can:

• Edit most of your profile directly in the member portal.
• Unsubscribe from marketing emails using the link at the bottom of any such email.
• Ask us to delete your account and associated data by emailing hello@bsheret.com.
• Withdraw consent at any time. Some features (like matchmaking) may not be available if you withdraw consent to process your profile data.

We'll respond to verified requests within a reasonable time (generally within 30 days).

The Service is intended for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, please contact us and we will delete it.

Bsheret is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have different data-protection laws than your country of residence.

Bsheret does not perform background checks or independently verify claims made by applicants, including identity, marital status, or halachic status. Our matchmakers review profiles to facilitate introductions, but this is not a substitute for your own judgment and does not constitute identity or background verification. We encourage members to approach proposed introductions thoughtfully, to proceed at their own pace, and to exercise appropriate care when meeting anyone for the first time. Please refer to our Terms of Service for the full limits of our service.

We may update this policy from time to time. The effective date at the top of the page will change when we do. For material changes, we'll notify you by email or with a prominent notice on the Service before the changes take effect.

Questions, requests, or complaints? Email us at hello@bsheret.com.