Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect the following types of information:

  • Account data: Email address and password (hashed) for registered users and model accounts.
  • Profile data: Display name, age, gender, bio, contact details, and any optional attributes provided by model advertisers.
  • Media: Photos and videos uploaded by model advertisers, stored securely on Cloudinary.
  • Usage data: IP addresses (for analytics and fraud prevention), pages visited, and contact interaction events.
  • Payment data: Transaction IDs and plan metadata. We do not store card numbers — payments are processed by Razorpay.

2. How We Use Your Information

  • To provide, operate, and improve the Service
  • To show you relevant listings based on location
  • To detect and prevent fraud, spam, or abuse
  • To process payments and manage subscriptions
  • To send transactional emails (e.g., verification status updates)

3. Data Sharing

We do not sell your personal data. We may share data with:

  • Cloudinary — for media storage and delivery
  • Razorpay — for payment processing
  • Law enforcement if required by applicable law

4. Cookies & Tracking

We use session cookies for authentication (via NextAuth). We do not use third-party advertising cookies or tracking pixels. IP addresses are logged transiently for analytics and are not linked to personal identities for regular visitors.

5. Data Retention

Account and profile data is retained as long as the account is active. You may delete your account at any time by contacting us. Profile views and analytics data older than 12 months may be purged automatically.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Withdraw consent where processing is consent-based

To exercise these rights, contact us at privacy@mlistings.com.

7. Security

We use industry-standard measures including HTTPS, password hashing (bcrypt), and access-controlled databases. No system is completely secure; we encourage you to use a strong, unique password for your account.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or via a banner on the platform.

HomeTerms of Service