Privacy Policy

This policy covers prosaccess.com and the ProsAccess iPhone and Android apps. Requests and questions: support@prosaccess.com.

1. Who we are

ProsAccess is a marketplace where adults book video sessions and Group Sessions with independent Pros. XSTATIC ENTERTAINMENT, INC. is the controller of the personal data described here. Pros are separate controllers of what you tell them and of any professional record they keep; this policy does not cover what a Pro does with your information — ask them for their own notice.

ProsAccess is for adults 18 and older. We do not knowingly create accounts for, or collect personal data from, anyone under 18, except the limited participant record a parent or guardian creates under Section 2.4. If we learn we hold other data about a minor, we delete it.

2. What we collect

2.1 Account and profile. Name (first and last), email, password (held only as a hash by our authentication provider), city, profile photo, your role (User, Pro), and your age status — whether you told us you are 18 or older, when, and how (the sign-up selector, the app, or an age range shared by Apple). We do not collect your date of birth. Sign-in with Apple or Google gives us your name and email (or Apple's relay address).

2.2 Pro profile and application. Headline, bio, expertise, services and prices, scheduling settings, social links, portfolio media, Booking Notes, agreement templates you upload, and — if you apply for ProsAccess Verified or a credential — the evidence you supply (documents, licence details, account connections such as Instagram sign-in, attestations from other Pros) and our reviewers' notes and decisions.

2.3 Identity verification. Where we ask you to verify your legal identity (payout onboarding, an age question, an identity claim), a verification provider (Stripe Identity, or Stripe Connect for payouts) collects your document and, where required, a selfie directly. We receive the result (verified or not, reason codes), the document type and country, whether you are an adult, a reference and, for Pros, the verified legal name; we do not record the document number, and we do not keep the date of birth from the document. The provider keeps the document under its own terms. When you set up a Pro profile or apply for ProsAccess Verified, in the app or on the web, you may also upload a photo of a government ID (passport or driver's licence) and take a live selfie, and add a CV and licence or certification documents. We store these files privately; only our review team sees them, to compare the ID with the selfie and review your application; they are never shown on your profile or to other users; and they are deleted as Section 8 describes. The ID photo shows whatever is printed on the document.

2.4 Minor participants (guardians only). If you book for a child or teen you are responsible for: the participant's preferred name, birth date or age band, your relationship, and your acknowledgement. This is private to you; a Pro sees only a booking-scoped view ("Minor participant — booked by you").

2.5 Bookings, payments and payouts. Session details, prices, status, payment outcomes, refunds, disputes, acknowledgements you give at checkout, and for Pros the settlement ledger (gross booking value, fees, earnings, holds, payouts). A Pro's public Session Reliability is computed from these booking records (no-shows, lateness, late cancellations and undelivered time as the Platform recorded them); no new data is collected for it. Card details go directly to Stripe; we never see or store your full card number. For Pros, Stripe collects identity, bank and tax details on its own pages; we receive back status (enabled, restricted, what is missing), never the raw taxpayer or bank identifiers.

2.6 Messages, files and documents. Messages you send, files you attach, messages you post in a Group Session chat, Booking Notes shown to you, documents a Pro sends you and your signatures on them (typed name, time, platform, a hashed connection address and browser/app details, the document's hash), reports you make about content or accounts and the accounts you block, and support correspondence.

2.7 Sessions. Live audio and video pass through our video provider and are not stored unless a recording is made under the Recording and Replay Policy. For every session we keep a non-content record — who joined, when, for how long, from what kind of device or app, and connection quality — to run the session, resolve session issues and disputes, prevent fraud, and compute a Pro's Session Reliability. Recording consent decisions are recorded.

2.8 Phone number and messaging consent. If you verify a mobile number: the number, its country, verification state, your text/WhatsApp consent (with its wording, date and source), STOP/START replies, and delivery records for messages we send (channel, status, provider ids, a masked destination — never the message text).

2.9 Notification data. Push tokens (if you allow notifications; Apple issues them for the iPhone app and Google Firebase Cloud Messaging for the Android app), your notification topics and channel choices, availability alerts and Group Session alerts you subscribe to (which Pro, which channels), and delivery records.

2.10 Usage data. Profiles and categories you open, searches (lower-cased, truncated), cards shown and clicked, active viewing time, screens, app version and platform, video plays, application steps, commerce steps (booking started, checkout, paid, confirmed, completed, cancelled, refunded), "Not interested" signals. Identified by a random device identifier, a session identifier that rotates after 30 minutes, and — when signed in — your account id attached by our server. No advertising identifiers, fingerprinting or cross-app tracking. We do not store IP addresses on usage records; an IP is used transiently for rate limiting and kept for up to one day.

2.11 Location. The city you choose. We store the place — city, region and country, and the city's map point, used to find Pros near you — never your exact position. To find your city, the app and the website send the text you type to our place-search provider (Google Places). If you tap Use my current location, your device shares an approximate position (on iPhone at reduced accuracy), which is rounded to about 1 km and sent to the same provider only to find the city; that position is not stored. For regulated categories we may ask for your state or country at booking to check eligibility.

2.12 Analytics events and telemetry from calls (audio path, quality, interruptions) without content.

2.13 Gift sessions. If you buy a gift session: your name as the purchaser, the recipient's name and email address, your optional message, the Pro and session length, the payment, and the gift's status. If someone buys you a gift session, we receive your name and email address from the purchaser before you have an account, and use them only to email you the gift and let you claim it; the purchaser sees the gift's status (sent, claimed, scheduled, used), and the Pro sees the purchaser's and the recipient's names.

3. How we use it

To run the marketplace (accounts, discovery, scheduling, booking, payment, live sessions, messaging, notifications, replay); to check eligibility (age status, location, category rules); to review Pros and identity claims and to act on reports, disputes, fraud and safety; to personalize discovery (Section 4); to measure and improve the product; to send service messages and the notifications you chose; and to comply with law and defend claims. Legal bases (UK/EEA): contract; legitimate interests (safety, fraud prevention, improvement, personalization — subject to the controls in Section 6); legal obligation; consent where we ask for it (texts, WhatsApp, push), which you may withdraw at any time.

4. Personalization and ranking

Explore ordering, Similar Pros and category suggestions are rule-based: your bookings, declared interests, inferred interests (from categories you choose, profiles you view, cards you click, sessions you book — recent activity weighted more, a topic must recur before it counts), ratings, completed sessions, stature, newness, readiness to be booked and a small shuffle. ProsAccess does not sell placement. Private messages, session audio or video, recordings, documents, identity evidence and verification materials are never used for ranking, recommendations or interests. We infer an interest in a category, never a condition, diagnosis, legal problem or personal characteristic — and because some categories (health, mental health, legal) are sensitive, you can see, reset or switch off inference in Settings → Privacy. Decisions that affect your rights — approving a Pro, suspending an account, deciding a dispute — are made by people.

5. Who we share it with

5.1 Service providers, who process data only on our instructions:

5.2 Other people on ProsAccess. A Pro you book sees your name, photo, booking details, your messages, acknowledgements you gave, documents you signed, and reviews you post. Invited participants in your session see the session details, the Pro and the organizer's name. The host and every seat holder of a Group Session see the messages posted in its chat, with the poster's name. A person you block is not told; a person you report is told what was alleged only as the Booking, Cancellation, Refund and Dispute Policy describes. Other Users see your public content (reviews you write; for Pros, the public profile, portfolio and Group Session listings). Reviews are public. A Pro who subscribed people to Group Session alerts sees only a count.

5.3 Legal and safety. We disclose data where the law or lawful process requires, or where we believe in good faith it is necessary to investigate fraud, enforce our terms or protect anyone's safety.

5.4 Business transfers. In a merger, acquisition or sale of assets, data may transfer subject to this policy.

6. Your choices

• Usage data and personalization — switch off usage-data collection, switch off personalized recommendations, reset personalization, hide a Pro ("Not interested"): Settings → Privacy. Records we must keep to run the marketplace (bookings, payments) continue.
• Notifications — choose topics and channels in Settings → Notifications; reply STOP to texts. Service messages (receipts, refunds, security) are always sent while you have an account.
• Age status — you can view it and ask us to correct it.
• Access, correction, deletion, a copy of your data — write to support@prosaccess.com; we confirm your identity through your account and respond within 30 days. We delete account data on request except what we must keep: transaction and settlement records, records needed for an open dispute or claim, signed agreements a Pro must retain, acceptance records, and anything the law requires. You can also delete your account yourself in Settings › Delete account, in the app or on the web; before you confirm, we show what will be cancelled and refunded and what we must keep.
• What deleting your account does. Your sign-in, profile, photo, contact details, phone numbers, push tokens, notification settings, calendar and social connections, alerts, portfolio media and personalization data are deleted; your usage data is deleted or made anonymous; and nobody can sign in to the account again. Upcoming sessions on either side and Group Sessions you host are cancelled and refunded. Group Session seats you hold are cancelled: a seat paid on the web is refunded by us; a seat bought through the App Store is refunded by Apple, through Apple's refund process, and we tell you how to request it. Pro verification evidence (ID photos, selfies, documents and reviewers' notes) is deleted, unless a hold applies — an open verification case, dispute, chargeback, settlement hold or report about you — in which case it is deleted when the hold ends. We keep, with your name replaced by "Deleted user" (on reviews, "Former User"): bookings, payments, refunds, payouts, disputes and tax records; reviews you wrote; and messages you sent, which stay in the other person's conversation, shown as from "Deleted user", with their attachments. We also keep your acceptance records, age-status declaration and messaging consents, non-content session records for their retention period, and a record of the deletion that holds your email address only in hashed form. Earnings already owed to a Pro are still paid to their Stripe payout account. Recordings are deleted on their own 7-day schedule (Recording and Replay Policy).
• Marketing — we run no advertising programmes and send no marketing texts.

7. Do we sell or share your data for advertising? No.

We do not sell personal information and do not share it for cross-context behavioural advertising, and have not in the preceding twelve months. There is no advertising SDK, pixel, tag manager, advertising identifier, attribution or third-party analytics service in the product.

7A. Cookies, browser storage, Do Not Track and Global Privacy Control

We set no advertising, marketing or third-party analytics cookies and no third party collects information about your activity across other websites or apps through ProsAccess.

What the website and web app store in your browser, all of it first-party and all of it needed to run the product:

• Sign-in. Your authentication session (set by our authentication provider's library, so you stay signed in between pages). It is removed when you sign out.
• Preferences and drafts kept on your device. Your schedule view, your view mode (User or Pro), your ringtone, recent searches, a cached copy of the public category list, your time-zone choice for Group Sessions, a sign-up or age-status step in progress, an Instagram connection in progress, the result of your camera and microphone pre-check, and a one-time marker that stops an error page reloading in a loop. These are conveniences; clearing them loses nothing you cannot set again.
• Where you first found a Pro. If you arrive on a Pro's public page from a shared link, that landing is remembered in your browser so that, if you later create an account, the Pro can be credited for bringing you to ProsAccess (Section 2.10). No third party is involved.
• Usage data. The random device identifier and the 30-minute session identifier described in Section 2.10, a queue of usage events waiting to be sent to us, and your usage-data switch. Switching usage data off in Settings → Privacy stops the collection and clears the queue. The identifier is random, is not an advertising identifier, and is never shared with anyone.

Payments. When you add or use a saved payment method, Stripe's own script runs on that page and may set Stripe's identifiers for fraud prevention, under Stripe's privacy policy; nothing else on ProsAccess loads a third-party script. Checkout itself happens on Stripe's pages.

The iPhone and Android apps keep the same kinds of data on the device (your sign-in, preferences, recent searches and the usage-data identifier and switch) and use no advertising identifier and no app-tracking permission.

Do Not Track and Global Privacy Control. Because we do not track you across sites or apps and do not sell or share personal information, there is nothing for a browser "Do Not Track" or Global Privacy Control signal to switch off, and we do not change what we store or send when we receive one. Your usage-data switch in Settings → Privacy is the control that applies, on every browser and device where you are signed in.

You can clear everything above in your browser's settings; ProsAccess will ask you to sign in again.

8. Retention

How we set these periods. We keep data no longer than the purpose it was collected for requires: to complete the transaction and perform the contract, for the card-network dispute period and the limitation periods that apply to a booking, to prevent fraud and keep the Platform secure, and to meet legal obligations. When none of these applies, the data is deleted or aggregated.

9. Who at ProsAccess can see your data

Access is limited to staff who need it. Administrative access requires a personal sign-in with Google, a second factor and a time-limited elevation, powers are divided by area (applications, documents, bookings, disputes, finance, analytics, identity review), and administrative actions are logged. Identity documents and signed agreements are readable only through logged, purpose-limited access. Staff have no routine way to read your private messages and never read them for personalization or advertising; message content may be accessed only to investigate a specific report, comply with law or protect someone's safety.

10. Security

Row-level access rules on every table, hashed credentials, encrypted transport, private-by-default storage for documents and recordings, a second factor and time-limited elevation for staff, audit logs. No service can promise perfect security and we do not; we commit to least access, to fixing what we find, and to telling you and any regulator that must be told, without undue delay, if a breach affects your personal data and the law requires notification.

11. International processing

We are based in California and our providers process data in the United States. If you use ProsAccess from elsewhere your data is transferred to and processed in the United States. Where a transfer mechanism is required for UK/EEA data we rely on the standard contractual clauses and the UK addendum with our providers.

12. Your rights

Everyone may ask for access, correction, deletion and a copy (Section 6). California residents have the rights to know, delete, correct and to opt out of sale or sharing — we do not sell or share for advertising, so there is nothing to opt out of; we offer no financial incentives for data; we will not discriminate for exercising a right; you may use an authorized agent. Sensitive personal information we collect (a government ID for identity verification, an age status, an interest in a sensitive category) is used only to verify identity and age, prevent fraud, run the feature you asked for, and comply with law. Where we handle information about your use of health or mental-health services we may be treated as a provider of health care under California's Confidentiality of Medical Information Act, and we do not disclose that information without your authorization except as the Act permits. UK and EEA residents additionally have rights to object, to restrict, to portability, to withdraw consent, and to complain to a supervisory authority.

13. Changes and contact

We post changes here with a new version date. Material changes are announced in the product and by email before they take effect, and where required we ask you to accept the new version.

support@prosaccess.com (support, privacy rights and notices) · XSTATIC ENTERTAINMENT, INC., California, USA