Privacy Policy

1. What we collect

Account information: your email address and, optionally, your name and phone number.
Request information: the treatment you describe, its category and your ZIP code.
Usage information: pages visited, quote and booking-link clicks, and device/browser data needed to keep the service secure and fast.
Clinic information: business details, injector credentials, licenses, insurance documents and reviews submitted for verification.

2. How we use it

We use this information to match your request with nearby verified clinics, display quotes, operate notifications, measure marketplace performance (for example click and booking-conversion rates), prevent fraud and abuse, and improve the service.

3. What we share, and with whom

Your contact details are shared only with the clinic whose quote you select — never with every bidder. Clinics see your treatment request and general location, not your identity, until you choose them. We do not sell personal information. We share data with service providers that help us run the platform (hosting, authentication, analytics) under confidentiality obligations, and where required by law.

4. Booking tracking

When you open a clinic's booking link, we record the click (with a reference code and UTM parameters) so clinics and patients can see which quotes convert. Where a clinic connects its scheduler, we may receive a confirmation that an appointment was booked. We never see or store your payment details — payment happens entirely on the clinic's own systems.

5. Health-related sensitivity

Treatment requests can reveal health-related preferences. We treat this data with extra care: it is visible only to clinics eligible to bid on your request, it is never used for advertising profiles, and it is deleted when you delete your account.

6. Cookies and storage

We use strictly necessary cookies and browser storage for sign-in sessions and to remember in-progress requests. We do not use third-party advertising cookies.

7. Your choices and rights

You can view and edit your profile, change notification preferences, and delete your account at any time from Account settings. Deleting your account removes your personal information and requests, subject to records we must keep for legal or fraud-prevention reasons. Depending on your state, you may have additional rights (access, correction, portability); contact us to exercise them.

8. Data security and retention

We use encryption in transit, row-level access controls and least-privilege access internally. Verification documents are stored in a private area accessible only to our review team via short-lived links. We retain data only as long as needed to operate the service or meet legal obligations.

9. Children

MedSpa Match is not directed at anyone under 18, and we do not knowingly collect their data.

10. Changes and contact

We may update this policy and will revise the date above. Questions or requests can be sent through our Contact page.