Information we collect
We collect account and contact information, profile details and visibility choices, messages, pitches, uploaded files, applications, transactions, and information you choose to submit. Technical and usage information may include page activity, device details and request information used to operate and protect the service.
Why we use information
We use information to provide membership services, connect members, respond to inquiries, process requested transactions, provide AI responses, maintain records, prevent abuse and meet legal obligations. Optional processing preferences can be managed in the Data Rights Center. AI messages and attachments you send are processed by the AI service to produce your requested response. Do not submit sensitive information about another person without permission.
Optional bank connections through Plaid
Connecting a bank is optional. With your explicit consent, Plaid provides account details (including routing and account numbers where available), institution information and account-holder names for account verification. The current connection requests Plaid Auth and Identity, not transaction history or ongoing balance monitoring. You authenticate with Plaid or your bank; Melanin Valley does not receive your bank-login credentials.
We retain an encrypted access token to maintain the connection, encrypted bank numbers, masked account details, verification results and a dated, versioned consent record. Bank data is used for the connection and verification you request, not marketing. Connecting a bank is not authorization for an ACH debit, recurring transfer or other movement of money. Those require a separate supported payment service and authorization; they are not activated by Plaid Link.
Review Plaid’s End User Privacy Policy. You can revoke the connection with Remove beside your linked bank on the bank page, or contact us. Removal requests revocation with Plaid and deletion of the stored access token. Financial records that must be retained may remain. You can also manage connections through Plaid Portal.
Service providers and disclosures
Our services use Lovable Cloud for hosting and account/data services, an AI gateway and its model providers for AI requests, Wix for catalog/membership and forms integrations, Stripe for supported payments, Google services for connected forms, spreadsheets and team email, and LeadConnector for the communication widget. Plaid receives information necessary for bank linking. External partner links and booking services have their own privacy policies. Providers receive information necessary for their service; sharing with members depends on your profile settings, posts, messages and share links. We may disclose information where required by law or necessary to investigate abuse and protect users. We do not sell bank-connection data or use it for advertising.
Cookies and browser storage
We use browser storage for sign-in sessions, preferences, saved conversation state and popup/checklist progress. Analytics and embedded services may process usage information and use their own cookies. Your privacy settings govern the platform’s optional analytics; third-party tools have their own controls.
Security
Bank numbers and Plaid access tokens are encrypted with AES-256-GCM in application storage. Access tokens are handled only on the server, not returned to your browser. Protected bank-link actions require a verified account session and two-step verification. Production connections use HTTPS. No system can guarantee absolute security. Written security policies are not certifications or evidence of a completed independent audit.
Retention and deletion
We retain information as needed to provide services, manage active connections, resolve disputes and satisfy applicable financial, security and legal requirements. You may request deletion or a retention explanation. Removing a Plaid connection revokes access and deletes its stored token; removal does not automatically erase historical transaction records or data held independently by Plaid or your bank. Backup or legally retained records may remain until applicable retention requirements end.
Your choices and rights
You can correct your profile, choose its visibility, change optional processing preferences, and request access, export, correction, restriction or deletion in the Data Rights Center. Rights and exceptions depend on your jurisdiction. You may contact us without signing in through the Support page or at info.melaninvalley@gmail.com. We may need to verify your identity before acting on a request.
Children and international processing
Bank-linking and financial services are for adults. Do not provide a child’s bank credentials. Contact us if information about a child was submitted without appropriate authority. Our providers may process data outside your location, where legal protections may differ; contact us for information about your circumstances.
Changes and contact
We will update this page and its effective date when practices change. Material changes affecting bank-data consent require a renewed notice before further authorization. For privacy questions, use info.melaninvalley@gmail.com or Support.