1. Introduction
MysticsPortal, Inc. ("we", "us", or "our") operates the MysticsPortal platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform as a practitioner, a client (seeker), or a visitor.
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Information you provide directly
- Account registration data: name, email address, password
- Business information: practice name, description, services, pricing
- Payment information: processed securely by Stripe; we never store card numbers
- Client (seeker) records you create on the platform
- Communications: messages sent to us via email or in-app chat
Information collected automatically
- Usage data: pages visited, features used, session duration
- Device data: IP address, browser type, operating system
- Cookies and similar tracking technologies (see Section 6)
3. How We Use Your Information
We use personal data to:
- Provide and maintain the Service
- Process payments and send receipts
- Send transactional emails (booking confirmations, reminders)
- Provide customer support
- Improve product features based on usage patterns
- Send marketing emails where you have given consent (opt-out at any time)
- Comply with legal obligations
4. Sharing Your Information
We do not sell your personal data. We may share data with:
- Stripe — payment processing
- Supabase — database and authentication infrastructure
- Postmark / Resend — transactional email delivery
- Vercel — application hosting
- Law enforcement when required by applicable law
5. Data Retention
We retain account data for as long as your account is active and for up to 90 days after deletion to allow for recovery. Payment records are retained for 7 years as required by financial regulations. Anonymised analytics data may be retained indefinitely.
6. Cookies
We use strictly necessary cookies for authentication and session management. We may use analytics cookies (e.g., Plausible Analytics) that do not track individuals across sites. You can disable non-essential cookies in your browser settings without affecting core functionality.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Data portability (receive a copy of your data)
To exercise any of these rights, email hello@mysticsportal.com.
8. Security
We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and SOC 2-compliant infrastructure. However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately.
9. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us at hello@mysticsportal.com.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you by email and/or a prominent notice in the platform at least 14 days before any material changes take effect.
11. Contact
Questions about this policy? Contact our Data Protection team at hello@mysticsportal.com or write to: MysticsPortal, Inc., 340 Pine Street, Suite 800, San Francisco, CA 94104, USA.