Privacy Policy
Last updated June 8, 2026
Notice to users
This Privacy Policy governs your access to and use of thegaymassage.com (the "Site"). This Site is a digital directory operated by The Gay Massage ("Company," "we," or "us"). By accessing the Site, you acknowledge that you have read, understood, and agreed to be bound by this Privacy Policy. If you do not agree to these terms, you must immediately cease all use of the Site.
1. Scope of data collection
We collect information that is strictly necessary for the operation of our directory and the protection of our legal interests. We categorize data into the following tiers:
- A. User-Provided Data (Providers): To facilitate your listing, you must provide "Professional Profile Data," which includes but is not limited to: name/handle, geographic location (neighborhood), service descriptions, rates, professional bio, hours of operation, and contact information (phone, email, WhatsApp).
- B. User-Generated Content: We collect all text, images, and media uploaded by you, including profile photos, service descriptions, and any reviews or ratings submitted by clients.
- C. Client/User Data: Clients browse the directory without creating an account. When a client chooses to leave a review or rating, they are identified by a self-selected "Handle" only, preserving their anonymity. Provider account credentials (email/password) are managed via our third-party authentication provider, Clerk.
- D. Automated Technical Data: We automatically collect metadata, IP addresses, device identifiers, and browser types through cookies and tracking technologies for the purposes of security, analytics, and site optimization.
2. The "sensitive data" disclosure and protections
Because this platform serves a community with specific orientation-based needs, we acknowledge that certain data may imply Sensitive Personal Information, specifically regarding sexual orientation or gender identity.
- Strict Purpose Limitation: We do not "profile" users for marketing purposes based on orientation; rather, we facilitate the connection requested by the user.
- Enhanced Protection: Any data identified as "Sensitive" under the NY SHIELD Act or GDPR/CCPA will be subject to heightened encryption and access controls. We do not sell sensitive personal data to third parties for the purpose of discriminatory profiling.
3. Data sharing and third-party disclosures
You hereby grant us a non-exclusive, royalty-free, worldwide license to host, display, and distribute your content. We share your data only under the following circumstances:
- Service Providers: To the extent necessary to operate the Site (e.g., Vercel for hosting, Clerk for authentication, Supabase/Neon for database management).
- Legal Mandate: When required by law, court order, or government regulation (including compliance with FOSTA-SESTA requirements).
- Business Transfers: In the event of a merger, acquisition, or sale of assets.
WE DO NOT SELL YOUR PERSONAL DATA TO THIRD PARTIES FOR MONETARY COMPENSATION.
4. Data retention and deletion
We retain your data only as long as is necessary to fulfill the purposes outlined in this Policy, or as required by law.
- Account Deletion: Users may request deletion of their accounts by contacting support@thegaymassage.com.
- Legal Hold: Notwithstanding user requests, we reserve the right to retain certain data for a period required by statute (e.g., tax records, litigation holds, or regulatory compliance).
5. Regulatory compliance and jurisdictional rights
While our primary market is New York, the Site is globally accessible. We intend to comply with applicable privacy frameworks, including:
- NY SHIELD Act: Implementing reasonable safeguards for "Private Information."
- CCPA/CPRA (California): Providing rights of access, deletion, and "opt-out" of certain data processing.
- GDPR (EU): Adhering to strict data minimization and lawful basis principles.
6. California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to submit a "Request to Know" (to learn what personal information we hold about you) and a "Request to Delete" (to have us delete it), subject to legal exceptions.
To exercise these rights, email support@thegaymassage.com with your request. We will verify your identity and respond within the timeframes required by the CCPA/CPRA. As stated above, we do not sell your personal information.
8. Limitation of liability regarding data
While we implement industry-standard security measures, no method of electronic transmission or storage is 100% secure. We do not warrant that our data collection methods are immune to all risks. You use the Site at your own risk regarding any potential data breach.
9. Minors (COPPA compliance)
The Site is intended for users 18 years of age or older. We do not knowingly collect personal information from children under the age of 13 (or 16, depending on jurisdiction). If we discover a minor has provided us with personal data without parental consent, we will delete it immediately.
10. Data breach notification (NY SHIELD Act)
In the event of a breach of "Private Information" as defined by the New York SHIELD Act, Company will notify affected individuals and relevant state agencies in accordance with statutory requirements and industry-standard timelines.
11. Amendments
We reserve the right to modify this Privacy Policy at our sole discretion. Changes will be effective immediately upon posting. Continued use of the Site constitutes acceptance of the revised terms.
12. Contact and legal notices
All inquiries regarding this Privacy Policy, including requests for data access or deletion, should be directed to: support@thegaymassage.com.