This Privacy Policy explains how Massage Air ("Massage Air", "we", "us" or "our"), operated by the owners and shareholders of the Massage Air service, collects, uses, stores, shares and protects personal information when you visit massageair.ai, sign up as a therapist, or use any of the client-facing sites we publish your listing on, including MassageDirectory.ai, Massage Specials and massagetherapist.me (together, the "Services"). We process personal information in line with the Protection of Personal Information Act 4 of 2013 ("POPIA") and other applicable law.
1. Who is responsible for your information
The owners and shareholders of Massage Air act as the "responsible party" (as defined in POPIA) for personal information processed through the Services. Where we use service providers to process information on our behalf, they act as "operators" and are bound by written agreements requiring them to protect your information.
2. Information we collect
2.1 Information you give us
- Identity and contact details: first name, surname and cell phone number.
- Location details: suburb, city, province, map coordinates, and, if you travel to clients, a travel base (such as a shopping centre) and travel radius.
- Work details: whether you work from a salon, travel to clients, or both; the times of day you work; and your start and finish times.
- Photographs of yourself that you upload, and edited versions we create from them.
- Any messages or information you send us when you contact us.
2.2 Information we collect automatically
- Technical information such as IP address, device type, browser type, operating system and approximate location derived from your IP address.
- Usage information such as pages viewed, actions taken, dates and times of access, and referring pages.
- Security information, including records of sign-in attempts and one-time code requests, which we use to prevent abuse.
- Cookies and similar technologies that are strictly necessary to keep you signed in and to keep the Services secure.
2.3 Information from third parties
We use mapping and places services to convert a suburb into a location and to find nearby shopping centres. We may receive public business information about places from these providers. We may also receive information from payment providers once billing is enabled.
3. How we use your information
- To create, publish, maintain and display your listings on the Services.
- To verify your cell number and let you sign in, using one-time codes sent by SMS.
- To send you service messages, such as your listing links, status updates and important notices.
- To edit and enhance the photos you upload so they present you professionally.
- To help clients find therapists near them, including by showing your suburb and an approximate service area.
- To operate, maintain, secure, troubleshoot and improve the Services.
- To detect, prevent and respond to fraud, abuse, security incidents and other harmful activity.
- To comply with legal obligations and enforce our Terms of Service.
4. Lawful grounds for processing
We process personal information where you have consented, where processing is necessary to carry out actions for the conclusion or performance of a contract with you, where we are required to comply with an obligation imposed by law, where processing protects your legitimate interests, or where processing is necessary for pursuing our legitimate interests or those of a third party to whom the information is supplied, provided those interests are not overridden by your rights.
5. What appears publicly
Your listings are designed to be seen by members of the public. Your first name, photographs, suburb, service type, approximate service area and working times may be shown on the client-facing sites. We do not publish your exact map coordinates or your travel base coordinates. We will not publish your surname or cell number unless the listing format you choose requires it and we have told you beforehand.
6. Sharing your information
We do not sell your personal information. We share it only as follows:
- With the client-facing sites listed above, which are part of the Services, so your listings can be displayed.
- With service providers who host our systems, store files, send SMS messages, provide mapping data, or process payments, under appropriate confidentiality and security obligations.
- With professional advisers, such as auditors and lawyers, where reasonably necessary.
- With law enforcement, regulators or courts where required by law or to protect rights, property or safety.
- With a successor entity in connection with a merger, acquisition, restructuring or sale of all or part of the Services, subject to this Policy.
7. Cross-border transfers
Some of our service providers store or process information outside South Africa. Where this happens, we take reasonable steps to ensure the recipient is subject to a law, binding corporate rules or a binding agreement that provides an adequate level of protection substantially similar to POPIA, as required by section 72 of POPIA.
8. How we protect your information
- All data is transmitted over encrypted connections.
- Our database denies direct public access. Information is read and written only through controlled server processes.
- Photographs are kept in private storage and are shown only through short-lived, signed links.
- One-time codes are stored only in hashed form, expire after ten minutes, and are limited in attempts and frequency.
- Administrative access is protected and rate-limited.
No method of transmission or storage is completely secure. If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as required by section 22 of POPIA.
9. How long we keep information
Because pausing and switching back on is a core feature, we keep your listing and photographs while your account exists, including while it is paused or removed, so it can be restored. We keep security logs for as long as reasonably needed to protect the Services. We may keep certain records for longer where the law requires it. If you ask us to permanently erase your information, we will do so unless we are legally required or permitted to retain it.
10. Your rights
Subject to POPIA, you have the right to:
- Ask whether we hold personal information about you and request access to it.
- Ask us to correct, update or delete inaccurate, irrelevant, excessive, out-of-date, incomplete, misleading or unlawfully obtained information.
- Object to processing on reasonable grounds, and object to direct marketing at any time.
- Withdraw consent where processing is based on consent, without affecting processing that has already taken place.
- Lodge a complaint with the Information Regulator of South Africa.
You can update most of your details yourself by signing in at massageair.ai/me. For other requests, contact us through the Services. We may ask you to verify your identity before acting on a request.
11. Cookies
We use a small number of strictly necessary cookies to keep you signed in and to protect the Services. These cookies are encrypted, cannot be read by browser scripts, and expire automatically. We do not use advertising cookies on massageair.ai.
12. Children
The Services are intended for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.
13. Third-party links
The Services may contain links to sites we do not control. We are not responsible for the privacy practices of those sites, and we encourage you to read their policies.
14. Changes to this Policy
We may update this Policy from time to time. The "last updated" date shows when it last changed. If changes are significant, we will tell you by SMS or through the Services before they take effect. Continued use of the Services after changes take effect means you accept the updated Policy.
15. Contact
Questions or requests about this Policy or your personal information can be sent to the owners and shareholders of Massage Air through the contact options made available in the Services.