Legal

Privacy Policy

Last updated: 17 October 2026

This policy explains how your personal data is processed when you use the SlavicPartner platform (the website and the iOS and Android mobile app). The platform is operated in line with the EU General Data Protection Regulation (GDPR).

1. Data controller

The data controller is Global Ads OÜ, a company established in Estonia. You can reach us at support@slavicpartner.com for all privacy related requests. Our data processing is carried out in line with GDPR principles and, for our users in Türkiye, additionally in line with the principles of KVKK (Kişisel Verilerin Korunması Kanunu, Türkiye's Personal Data Protection Law No. 6698).

2. What data do we process?

• Account data: email address, password (stored as an irreversible hash), first name, date of birth, gender, country and city, language preference, marital status and declaration of intent to marry.
• Profile data: photos, your about text, physical characteristics, lifestyle statements, voice intro and privacy preferences. You provide this data so that it can be shown to other members.
• Compatibility test answers: used by the matching algorithm to calculate the compatibility score.
• Messages: your conversations with other members are stored on the platform. For safety, your messages pass through automatic filters against fraud and abuse and are reviewed by our team when needed. If you have allowed AI-powered features, the content of your messages is also sent to our AI service provider for translation and safety checks (details: section 4).
• Identity verification documents: identity document and selfie photo (for members who complete verification). The storage conditions are explained in section 5.
• Payment data: membership and credit payments are taken by the App Store (Apple) or Google Play (Google); your card details never reach us. The store sends us only the purchase and subscription record (product, date, subscription status, transaction number).
• Technical data: session cookie and IP based rate limiting records. When the mobile app is released, a push notification token will also be processed.

3. Purposes of processing and legal bases

• Performance of a contract (GDPR 6(1)(b)): creating your account, matching, messaging, providing membership and credits, and adding purchases made in the app store to your account.
• Legitimate interest (GDPR 6(1)(f)): preventing fraud and fake profiles, security scanning of messages, preventing banned users from returning to the platform, protecting the security of the platform and of our members.
• Consent (GDPR 6(1)(a)): taking part in identity verification, optional features such as the voice introduction, AI-powered features (automatic translation, the profile coach, AI-assisted safety checks), and offer and reminder emails and notifications. You can withdraw your consent in Settings at any time.

4. Safety checks and AI (transparency notice)

SlavicPartner is a serious marriage platform, and protecting members from fraud is one of our core duties. Your messages on the platform are therefore checked by automatic filters (for example requests for money, attempts to move the conversation to other platforms and known scam patterns); these filters run on our own systems. Conversations flagged by the filters and conversations that have been reported may be reviewed by our safety team when needed. The legal basis for this processing is our legitimate interest in keeping members safe (GDPR 6/1-f). Artificial intelligence: automatic translation, the profile coach and AI-assisted safety checks run on a third-party AI service and are used only with your explicit consent (GDPR 6/1-a). If you allow it, your messages, profile text, photos and voice messages are sent to that service for these purposes; if you do not, none of them are sent. Your ID document and verification selfie are never sent to AI. You can withdraw your consent in Settings at any time. AI only suggests and flags; decisions about your account are made by our team. Your messages are not analysed for marketing and are not sold to third parties.

5. Retention of identity documents

The identity document and selfie photo of members who complete verification are not destroyed after verification; they are retained for the duration of the membership. The reason and the legal basis are as follows: fake profiles and fraud are the most serious risk that marriage platforms face. Retaining the documents for the duration of the membership is necessary so that (a) identity can be re-verified when a fraud complaint is made about a member, (b) a person who has been permanently banned cannot return to the platform with a different profile, and (c) lawful requests from competent authorities can be answered (legitimate interest, GDPR 6(1)(f)).

The identity document and verification selfie files are stored together with the technical metadata added by the capturing device (capture date, device information and, if present, location). This metadata is kept solely for fraud detection and for answering lawful requests from competent authorities; it is not shared with third parties. In profile photos, this metadata is completely removed during upload.

This retention is applied in a balanced way: only the authorised team can access the documents, they are never kept in a public area and they are not sent to AI. When you delete your account, your photos, audio and video are deleted immediately; all other data, including your ID document and selfie, is permanently deleted within 30 days at the latest. This short period allows fraud complaints raised at the moment of deletion to be reviewed. In addition, for users banned or suspended for breaking the rules and for accounts with an unreviewed complaint, an irreversible digest of the email address and, where available, the document number is kept to enforce the re-registration block; the unresolved complaint itself is kept for 12 months as a moderation record without your name or document number.

6. Who do we share your data with?

Your data is not sold. It is shared only with the following data processors that are necessary for the service to work, and only to the extent necessary:

• App Store and Google Play (in-app purchases): membership and credit payments, subscription renewals, cancellations and refunds. The store takes the payment; we receive only the purchase record.
• Our artificial intelligence provider (automatic translation, profile coach, AI-assisted safety checks): only for members who have given AI consent are messages, profile texts, photos and voice messages processed for these purposes; ID documents are never sent. Under paid use, the data may not be used to train models.
• Our email infrastructure provider (email): sending verification and notification emails.
• Our database hosting provider (database hosting): hosting the platform data inside the EU (Frankfurt).
• Our file storage provider (file storage): storing photos and identity documents in the EU region.
• Our web hosting provider (web hosting): hosting and serving the website.
• Our notification infrastructure provider (push notifications): delivering notifications once the mobile app is released.

In addition, data may be shared with competent authorities where we are legally obliged to do so.

7. Retention periods

• Account, profile, test answers and messages: for as long as the membership continues.
• Identity documents: for as long as your membership lasts (section 5); after account deletion they are permanently deleted within 30 days at the latest.
• After account deletion: your account is closed right away, your profile is visible to no one and the account can no longer be signed in to. Your photos, audio and video are deleted immediately. The rest of your account data (profile, messages, matches, verification records) is kept restricted for up to 30 days so that fraud complaints can be reviewed; only the authorised team can access it, and it is permanently deleted when the period ends. Payment records continue to be kept without your identity, as accounting rules require. Two limited records are kept in addition. (1) For members who were banned or suspended and for accounts with a complaint not yet reviewed, an irreversible digest of the email address is kept to enforce the re-registration block. (2) Complaints unresolved at the time of deletion are kept for 12 months as moderation records: only the reason, the reporter's explanation, the date and irreversible digests are stored; your name, email address and document number are not part of this record. When the period ends, the record is permanently deleted. The purpose is to prevent anyone from escaping review by deleting the account and returning with a new email address (legitimate interest under GDPR 6/1-f and the establishment of legal claims under 17/3-e). Deleting your account does not stop a subscription bought in the mobile app; cancel it separately in your App Store or Google Play settings.
• Purchase records: for the period required by accounting legislation.

8. Your GDPR rights and how to exercise them

Under the GDPR you have the following rights:

• Access: to learn which of your data is being processed.
• Rectification: correction of incorrect or incomplete data.
• Erasure ("right to be forgotten"): permanent deletion of your account and your data.
• Portability: receiving your data in a machine readable format.
• Objection and restriction: objecting to processing based on legitimate interest.

You can exercise your access and portability rights instantly and by yourself with the "Download my data" button in the Settings → Account section, and your erasure right with the "Permanently delete my account" button in the same section. You can make most corrections yourself in your profile settings; for other requests write to us at support@slavicpartner.com and we will respond within 30 days at the latest. You also retain the right to lodge a complaint with the data protection authority of the country where you reside.

9. Cookies

We use two essential cookies: the session cookie that keeps you signed in (sp_session) and a cookie that remembers your language. In addition, measurement tools run to understand how the site is used; they produce aggregate statistics such as page views, device type and country, do not build an advertising profile and are not linked to your identity. You can block these measurement cookies in your browser settings; the site keeps working as usual.

10. International data transfers

Your data is mainly processed in the EU: our database is in Frankfurt (EU), and photos and identity documents are stored in the EU region of our file storage provider. Some of our service providers (the app stores and our AI, email, web hosting and notification providers) are based in the US. These transfers rely on the safeguards provided for by the GDPR, such as the European Commission's adequacy decisions and the Standard Contractual Clauses (SCC).

11. Data belonging to third parties

• Your trusted person (emergency contact): if you use the safe meeting feature, you provide the name and contact details of the third person you choose. This information is stored only for emergency notification, is not used for any other purpose, and it is your responsibility to inform that person.
• Blocking people you know: if you use the "hide me from people I know" feature, the email addresses you enter are irreversibly hashed on your device and only these digests are sent to us. The addresses themselves never reach our servers; the addresses cannot be recovered from the digests, and the digests are used solely to block visibility. When there is a match, the block is mutual: neither side sees the other. Matching by phone number is not supported.

12. Data breach notification

If we detect a data breach affecting your personal data, in accordance with Article 33 of the GDPR we will notify the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, AKI) within 72 hours at the latest after becoming aware of the breach. If the breach carries a high risk to your rights and freedoms, we will also inform you directly without delay. Breach records are documented together with the measures taken.

13. Data retention for banned accounts

For users whose accounts are permanently banned or suspended for breaking the rules, a minimum data set (an irreversible digest of the email address and the reason for the ban) is retained on the basis of legitimate interest in order to keep the platform secure, to enforce the re-registration block and to be able to assess appeals. slavicpartner.com/itiraz.

14. Changes and contact

If we make a significant change to this policy, we will inform you through the platform. For your questions: support@slavicpartner.com