Privacy Policy

Last updated 16 September 2026

Palasor is a local matchmaker. There is no public gallery of profiles. This page explains which data we use on the website, the Android and iOS app and WhatsApp, why we use it, who we share it with, and how to delete your account. It applies if you sign up, join the waitlist, use Calculate body count, or register a venue at palasor.com/business.

Controller

The data controller is Palasor, Viadana (MN), Italy. Contact: hello@palasor.com.

Services covered

This policy covers palasor.com, the Palasor Android and iOS app, WhatsApp messages with Palasor, the venue portal (/business), and related tools (sign-up, waitlist, matching, photos, blocked contacts, venue QR). We do not sell your data and we do not show ads.

Why we process data

To create and run your account, record your stated age, enrol you in a zone, propose a meeting, message you on WhatsApp, relay a few messages before and during the meeting, register a partner venue, improve the product, and meet legal duties. Legal bases: your consent (sign-up, matching, special-category data, body count, venue account), performance of the contract (providing Palasor or the venue portal), and legitimate interest (safety, abuse prevention, aggregated product analytics). You can withdraw consent at any time; we then stop that use, without affecting processing already carried out.

What we collect

Contact details: email and WhatsApp number, used by Palasor and never shared with your match. We keep the messages needed to relay the introduction. Matching profile: name, date of birth (we calculate age), photos, zone or town, interests, habits, values, place types, what you are looking for, relationship status, current life, availability, height, pace, dealbreakers and intro text. If you leave a LinkedIn or public social profile, Palasor may read it to understand you better; those links stay private. Waitlist: name, email and town. Blocks: numbers you type in; we do not import your address book. Venue accounts: contact name, email, phone, venue details, logo, website and the consents you give at registration. Technical data: account id, product events, errors and, on the app, an install id for software updates. We do not publish member directories.

Special-category data

Gender and who you want to meet can reveal sexual orientation. The questionnaire may include origin, religion, political views, children, lifestyle, and — only if you choose to save it in Calculate body count — information about sexual life. We use this only for matching or for that optional experiment, with explicit consent. We do not use it for advertising.

Who we share it with

With your match, only when a meeting is proposed: name, age, photos and a short introduction. We do not give them your email or phone number. A partner venue does not receive names, photos, numbers or other personal data of Palasor members: it only sees aggregated counts of meetings assigned to that place. Processors: EU database (Supabase); photos and logos on Google Cloud in non-public objects; WhatsApp/Meta to deliver messages; Resend for verification email; PostHog (EU) for product analytics and errors, not ads; OpenRouter and AI models for match copy and for reading a public profile you gave us; Google Vision, in production, to check that a profile photo contains a face. They process data to provide their service to us, not for Palasor marketing of their own.

Photos and face checks

Profile photos stay private and are shown only to your match. A venue logo may appear on the QR code the owner prints and displays on site. In production we may use Google Vision only to check that a face is present, not to verify identity documents. Calculate body count stays on your device: we do not upload photos or landmarks.

Cookies, SDKs and identifiers

On the website we use PostHog (EU) to understand how the product works and to record errors. We do not use advertising cookies, remarketing, or the Google advertising ID (AD_ID) on Android. The app may use an install identifier (Expo Updates) to deliver software updates. We do not sell data to brokers.

Age and 18+

Palasor is for people aged 18 or over. At sign-up we store your date of birth and the moment you confirm you are at least 18. In this phase we do not check ID documents. A false statement is grounds for immediate deletion of the account and data. If we learn a user is a minor, we delete the data.

Calculate body count

Face scanning stays on your device: we do not upload photos or landmarks. If you choose to save a sample, we store only age, detected age band, the estimate and — only if you enter it — the number of partners you declare. No name, email, IP or photo. The real number is special-category data (sexual life): we keep it only with your explicit consent, without a precise timestamp in the table. To ask for deletion of a sample, write to hello@palasor.com: without an identity we cannot link the row to you, and we can only consider an aggregated or table-wide deletion.

Where data is stored and transfers

The main database is in the European Union (Supabase). Photos are stored on Google Cloud. WhatsApp, Google and some AI models used via OpenRouter may process data outside the EEA, based on the safeguards those providers offer (including standard contractual clauses). The browser and the app talk to Palasor, not directly to the database.

How long we keep it

Up to 12 months after your last drop, or until you ask us to delete it. Wednesday at 19:00 is the match deadline, not the deletion of your account. A venue account lasts while the place is listed; consent records (version and date) are kept for the life of the relationship and, after closure, only as long as strictly needed for disputes or legal duties. Technical logs and product events are kept only as long as needed for security and improvement, usually no more than 12 months. After account deletion we may keep only what is needed for disputes or legal duties, for as long as strictly necessary.

Your rights and account deletion

You can ask for access, rectification, restriction, objection, portability or deletion. To delete your member account and data, use the form below with the same email and WhatsApp number used at sign-up, or write to hello@palasor.com. For a venue account, write to hello@palasor.com from the same email used at registration. Deletion covers your profile, preferences, photos and related matching data, except any legal retention. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or your local supervisory authority.

Children

The service is not for anyone under 18 and we do not knowingly collect children's data. If you think a minor signed up, write to hello@palasor.com: we will check and delete.

Venue accounts

If you register a venue at /business we process the contact person's data and the place details to create the account, generate the QR code and show you aggregated meeting counts for that venue. Legal bases: performance of the contract and consent to this policy. The venue does not become a controller of Palasor members' data and does not receive the identity of people who meet there. You can update details in the portal or ask for deletion at hello@palasor.com.

Changes

If this policy changes in a material way, we update the date at the top and, where required, we tell you by email or in the app. Continued use after publication means you have seen the new version, without affecting consents that the law requires us to collect again.

Delete my data

Enter the email and WhatsApp number from sign-up. If they match, we delete your profile, preferences, photos and account.