Privacy Policy

1. Personal Information We Collect

We collect only the personal information strictly necessary to provide and operate our conversation services:

• Account Credentials: Account Credentials: First name, last name, email address, optional WhatsApp/phone number, language preference, and securely hashed passwords.
• Booking Details: Booking Information: Selected conversation format, session duration, preferred date and time, and any optional topic notes provided by you.
• Payment Receipts: Payment Verification Receipts: Uploaded bank transfer receipts, proof screenshots, and transaction references (YSM-PAY-XXXXXX). We do not collect or store credit card numbers.
• Security & Logs: Security & Technical Logs: IP address (strictly for rate-limiting and brute-force prevention), browser user agent, and secure session identifiers.

2. How We Use Your Information

Your personal data is used solely for the following legitimate purposes:

• To organize, schedule, and host your 1-on-1 human conversation or language practice calls.
• To match and verify your manual bank transfer payments against your unique booking reference.
• To send essential transactional notifications (booking confirmation, payment receipt approval, reminder emails).
• To protect our platform and user accounts against fraud, spam, and security vulnerabilities.

3. Zero Third-Party Advertising & No Data Selling

We value your privacy deeply. We DO NOT sell, rent, monetize, or disclose your personal data to third-party data brokers, marketing networks, or commercial advertisers. We run zero behavioral advertising trackers or third-party ad networks on YourSelfAndMe.

4. Data Security & Storage Standards

We employ strict security measures to protect your information, including 256-bit SSL/TLS HTTPS transport encryption, bcrypt password encryption, parameterized database queries, CSRF token validation, and hardened storage permissions for payment proof files.

5. Your Rights Under GDPR & International Privacy Laws

You possess comprehensive rights regarding your personal data under the General Data Protection Regulation (GDPR):

• Right of Access: Right to Access: You may request a copy of all personal information we hold about you.
• Right of Rectification: Right to Rectification: You may update or correct your profile information at any time via your user dashboard.
• Right to Erasure ("Right to be Forgotten"): Right to Erasure ('Right to be Forgotten'): You may request complete deletion of your account and personal data by contacting support@yourselfandme.com.
• Right to Data Portability: Right to Portability: You may request your data in a structured, commonly used, and machine-readable format.

6. Cookies & Session Storage

We use only strictly necessary first-party cookies ('YourSelfAndMe_Session') to keep you securely authenticated and preserve your selected language preference. We do not use advertising, marketing, or cross-site tracking cookies.

7. Data Protection Inquiries & Contact

For questions about this Privacy Policy, data requests, or to exercise your GDPR rights, please reach out to our dedicated privacy team anytime at support@yourselfandme.com.