Privacy Policy

1. What we collect

• Account details — name, email, optional phone and username, and your role (client, artist, or business).
• Your address, if you save one (clients) — used to show businesses near you. We convert it to map coordinates once, using the OpenStreetMap geocoder.
• Bookings and appointment history — services, dates, and which business.
• Reviews, messages, photos and profile content you post.
• Business information — for artist/business accounts: business name, address, services, prices, hours, amenities, portfolio photos.
• Support tickets and anything you send us there.
• Basic technical data — session cookies, and logs that help us keep the site secure and working.

What we deliberately do NOT collect: card numbers. Payments and deposits run through each business's own payment account (Helcim), so your card details go to the payment processor — never to MFA's servers. We also send no marketing text messages.

2. Location

If you tap "use my location," your browser asks your permission first and we use the position to sort nearby businesses — we don't store it. The only location we keep is the address you choose to save on your profile, which you can change or clear anytime.

3. How we use your information

• Running bookings: confirmations, reminders, changes and cancellations (email and, if you turn them on, phone push alerts).
• Showing you relevant businesses near you, and showing businesses their own clients.
• Keeping the marketplace safe: content moderation, bot protection, fraud prevention.
• Support — answering you within 72 hours.

4. Who sees what

• Businesses you book with see your name, contact details for the booking, your appointment history with them, and your reliability record (below).
• Your reliability record — a limited appointment record shared across businesses on MFA: marks for missed/late-cancelled appointments (max two per business, fading after ~18 months) and kept appointments that repair it. You can see your own record in full, it's used only for booking protection inside MFA, and it is never sold or shared outside the platform.
• The public sees what's meant to be public: business profiles, portfolios, and published reviews (with your first name as a client reviewer).
• Service providers that make the site work, each receiving only what their job needs: Helcim (payments — each business's own account), Google (Maps & Places on pages that show maps, and Sign in with Google if you choose it), Cloudflare Turnstile (bot checks on forms), OpenStreetMap/Nominatim (one-time address geocoding), and Google Analytics if enabled (anonymous usage statistics).
• Nobody else. We do not sell or rent personal information, and we don't share it with advertisers. Advertisers on MFA buy a clearly-marked spot — never your data.

5. Business details shown from Google

Unclaimed listings can display photos, hours and addresses delivered live from Google in your own browser. That information is © Google; the only thing MFA stores is the place reference ID.

6. Cookies and notifications

• We use session cookies to keep you signed in and the site secure. We don't run third-party advertising cookies.
• Push alerts are opt-in — your device asks first — and can be turned off in your browser or device settings anytime.
• Booking emails are part of the service; any marketing email includes an unsubscribe link.

7. Your rights and controls

• Export: download your full data free, anytime — clients and businesses both.
• Correct: edit your details on your profile page whenever you like.
• Delete: ask Support to delete your account and we will, keeping only what the law requires us to keep (like records of completed transactions).
• California residents have the right to know what we collect, request deletion, and not be discriminated against for asking — that's everything on this page, and we honour it for everyone, not just Californians. We do not sell personal information, so there's nothing to opt out of.

8. How long we keep things

• Account and booking data: for as long as your account exists.
• Reliability marks: fade after about 18 months on their own.
• After deletion: gone, except records we're legally required to retain.

9. Security

Connections are encrypted (HTTPS), passwords are stored hashed — never readable — and payment card data never touches our servers by design. No system is perfectly secure; if a breach ever affects your data, we will notify you as the law requires.

10. Age

Made For Artist is for adults: you must be 18 or older to hold an account and book paid services, or use the platform with a parent or legal guardian. The site is not directed at children under 13, and we delete any such account we find.

11. Changes and contact

When this policy changes we update the date at the top, and notify account holders about meaningful changes. Questions or requests: contact@madeforartist.com or madeforartist.com/support — we reply within 72 hours.