Privacy Policy

1. Scope and responsibility

This Policy applies to the Get a Murshid websites, applications, account services, communications, and marketplace features (the “Platform”). The operator of Get a Murshid is responsible for the personal information described here. It does not cover a third party’s independent practices, including a Murshid’s use of information outside the Platform or external services you choose to use.

When Murshids independently collect or use Seeker information outside our instructions, they are responsible for complying with applicable privacy and confidentiality obligations.

2. Information we collect

Guidance requests can reveal sensitive information, such as religious or philosophical beliefs, health, finances, relationships, or immigration circumstances. Do not provide sensitive information that is not necessary for the service. Where law requires consent for sensitive information you choose to submit, you may withdraw that consent, subject to information we must retain for legal claims or completed transactions.

3. How and why we use information

• Provide the contract: create accounts, show profiles, match users, process purchases, schedule services, deliver meeting access, track service status, and administer refunds and payouts.
• Communicate: send verification codes, booking updates, deadlines, reminders, receipts, support replies, safety notices, and optional notifications.
• Safety and legitimate interests: authenticate users, prevent fraud, enforce policies, investigate reports, protect payouts, secure systems, debug errors, and improve reliability.
• Consent: publish optional public content, send optional communications, use optional location or connected-account features, and process information where consent is the appropriate legal basis.
• Legal obligations: maintain transaction records, respond to lawful process, enforce rights, handle tax or financial reporting, and comply with payment and consumer-protection requirements.

We do not make decisions producing legal or similarly significant effects solely through automated profiling. Automated systems may support fraud checks, access controls, deadlines, refunds, notifications, and content protection. Material disputes and ambiguous attendance cases may be reviewed by people.

4. How we disclose information

We disclose information only as reasonably needed in these circumstances:

• Between marketplace participants: names, profile information, booking details, service content, and necessary contact or meeting information are shared with the Seeker or Murshid involved. When a Seeker chooses to share age context for a direct question or call, the Murshid receives only a derived age range—not the Seeker's date of birth. Public profiles and reviews are visible according to their settings. An answer to a paid question becomes visible on a Murshid's public profile only where the Seeker allowed public sharing when asking AND the Murshid then publishes it; it appears without the Seeker's name, and its text is not otherwise redacted.
• Service providers: hosting, storage, email, notifications, payments, fraud prevention, support, and meeting providers process information for us under applicable contractual restrictions.
• Safety and legal process: we may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, or establish and defend legal claims.
• Business change: information may be transferred in a merger, financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and notice where required.
• At your direction: we disclose information when you connect a service, make content public, authorize a recipient, or otherwise request the disclosure.

We do not sell personal information for money and do not share it for cross-context behavioral advertising. If those practices change, we will update this Policy and provide legally required choices before starting them.

5. Payments and connected services

Stripe processes card entry, charges, refunds, disputes, identity/onboarding information, and Murshid payouts. Stripe’s independent handling is described in its Privacy Policy. We retain transaction references, amounts, states, and receipt information needed to operate and account for the marketplace.

If you connect Google or Zoom, we receive and store tokens and account details needed to create or manage authorized meeting features. Your use is also subject to the provider’s policies. You may disconnect a provider, but doing so can prevent future meeting creation and may not delete records already required for completed bookings.

Infrastructure and notifications may be provided through services such as Amazon Web Services and Firebase. These providers may process technical, file, or device-token data to deliver their functions.

6. Cookies, local storage, and similar technologies

We use strictly necessary cookies to maintain authentication, session security, verification, and role-based access. We also use browser local or session storage for preferences, basic account display information, and short-lived checkout or onboarding state. These technologies are needed for requested Platform functions and security; disabling them may prevent login or checkout from working.

We do not currently use third-party advertising cookies or cross-site behavioral advertising trackers. If we introduce optional analytics or marketing technologies, we will provide notice and consent controls where required.

7. Retention and security

We retain account information while an account is active and for a reasonable period afterward. Retention is based on the purpose for collection, transaction and tax requirements, payment-provider obligations, safety and fraud needs, dispute and limitation periods, backup cycles, and legal requirements. For example, transaction, refund, payout, dispute, and enforcement records may be retained longer than ordinary profile content. We delete or de-identify information when it is no longer reasonably needed, unless law permits or requires continued retention.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encrypted transport, restricted file access, secure authentication cookies, and monitoring. No system is completely secure. You are responsible for protecting your credentials and promptly reporting suspected compromise.

8. International data transfers

The Platform and its providers may process information in countries other than where you live. Those countries may have different privacy laws. Where required, we use recognized safeguards for restricted transfers, such as adequacy decisions, contractual protections, or another lawful transfer mechanism. Contact us to request more information about safeguards applicable to your information.

9. Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to:

• know whether and how we process your personal information;
• access or receive a portable copy of certain information;
• correct inaccurate information;
• delete information;
• restrict or object to certain processing;
• withdraw consent without affecting earlier lawful processing;
• opt out of sale, sharing, targeted advertising, or qualifying profiling—although we do not currently conduct these activities;
• appeal a denied request where applicable; and
• complain to your local privacy or data-protection authority.

You can update certain profile and communication settings in your account. For another request, use our contact page and write “Privacy request” in the subject. We may verify your identity and authority before acting. Authorized agents may submit requests where local law permits. We will not discriminate against you for exercising an applicable right.

10. Regional disclosures

EEA, United Kingdom, and similar jurisdictions

Our principal legal bases are performance of our contract, compliance with legal obligations, consent where requested, and legitimate interests in operating, securing, improving, and enforcing the Platform. You may object to processing based on legitimate interests and lodge a complaint with the authority where you live or work.

California and other U.S. state privacy laws

The categories collected during the preceding 12 months are described in “Information we collect”; the business purposes and recipients are described above. We do not sell personal information or share it for cross-context behavioral advertising, and we do not knowingly do so for people under 18. We use sensitive information only for permitted Platform, safety, payment, or legal purposes—not to infer characteristics for advertising.

These state-law rights apply only where the relevant law covers us and the particular information. We may retain information exempt from a request, including records needed to complete transactions, detect fraud, maintain security, comply with law, or establish legal claims.

11. Age requirement

The Platform is intended only for people aged 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. We may remove accounts that do not meet the age requirement.

12. Policy changes and contact

We may update this Policy as the Platform or law changes. We will revise the date above and provide additional notice before a material change where required. We will not use previously collected information for a materially incompatible new purpose without appropriate notice or consent.

To ask a privacy question, exercise a right, or report a concern, use our contact pageand include “Privacy” in the subject. The Platform operator will respond through the contact details you provide.