Trust Center
This page is maintained by the Massage Trades team to answer common security and privacy questions about the Massage Trades platform. It is editable project content and is not an independent certification or audit.
Accounts are created with email/password or Google sign-in. Sessions are managed by our authentication provider using short-lived tokens and secure refresh rotation. Passwords are never stored in plain text.
Access to your own data requires being signed in. Administrative actions are restricted to designated staff accounts.
We collect the information you enter into your profile (name, contact info, practice locations, any optional professional credential information, bio, modalities) and records of trade activity and messages you send through the platform. We use this to match members, run the credit/trade system, and provide support.
Avatars are stored in private storage and are not publicly listable.
Database access is governed by row-level security: each member can only read and modify their own records, with narrowly scoped exceptions (for example, viewing a trade partner's profile during an active trade). Sensitive profile fields such as credit balance and account standing can only be changed by server-side logic.
The app runs on Lovable Cloud, which provides managed hosting, database, authentication, and storage. Data is transmitted over HTTPS. Backups and platform-level security patches are handled by the platform provider.
We rely on a small set of vendors to operate the service: Lovable Cloud (hosting, database, auth, storage), Stripe (payments), Resend (transactional email), and Geoapify (address lookup). Each receives only the data needed to perform its function.
We send transactional emails for account confirmation, password recovery, trade notifications, and account messages. You can unsubscribe from non-essential emails using the link in any message.
You can edit your profile information at any time from your account settings. To request deletion of your account and associated personal data, contact us using the address below.
If you believe you have found a security vulnerability, please email support@massagetrades.com with details so we can investigate. Please do not publicly disclose the issue until we have had a chance to address it.
Questions about this page or about how we handle your data? Email support@massagetrades.com.