Suiter privacy notice (beta)

DRAFT for Adam and a lawyer to review. This is not legal advice, and it is not ready to publish. It is written from the data map. Some sentences describe what Adam has decided rather than what the code does today. Each of those depends on a gap in the data map, listed here so none is published before it is true:

sentence	true once
"kept with your name and number taken out"	the exam case files harvested from traces are anonymised too (gap 1); a deleted member's chats are anonymised, and logs and spans carry only a coded tag (gap 4, closed for the agent)
"what you said to a match is removed from their chat too"	a partner's history loses the member's id (gap 2); the relayed words themselves are already removed
"we keep a record of when you agreed and what you were shown"	the consent record holds its time and wording (gap 6)
the retention periods	the sweep's CronJob is deployed, and a job deletes old sign-ups (gaps 7 and 10); the periods themselves are Adam's (2026-09-30), for the lawyer to check
"Suiter will register with the ICO before opening to the public"	true now (Adam, 2026-10-05: the fee is paid before public roll-out, the beta is friends and family only); replace with the registration number once paid
"we delete your sign-up"	the live agent is given the Supabase key (gap 10)

Placeholders in square brackets are facts only Adam can fill in. The Google Cloud, Microsoft and Amazon Web Services rows and the sentence on their transfers were added on 2026-10-05 from the DPIA (item 6): processors the code sends member data to that this notice did not name. Adam approved them on 2026-10-05.

The page at suiter.love/privacy (packages/web/app/privacy/page.tsx) renders this notice, word for word, when the site is built, so the next deploy publishes it as it stands, this banner included. The page's old hand-written copy, which the pack's README shows is out of date, is kept in packages/web/archive/legal/.

Last updated: [date]

Who we are

Suiter is a matchmaking service run by Suiter-AI Ltd, a company registered in England and Wales (company number 17247079), whose registered office is at 82a, Suite A, James Carter Road, Mildenhall, IP28 7DE, United Kingdom. We are the controller of your personal data: we decide what is collected and why. You can reach us at hello@suiter.love. Suiter will register with the Information Commissioner's Office before opening to the public.

Suiter is in an early, invite-only beta. You talk to Juliet, our AI matchmaker, on WhatsApp. During the beta, a small Suiter team reads conversations to check Juliet is getting things right, and a person steps in when something needs one.

What we collect

What you tell Juliet. Your name, age, gender, where you live, your height and religion (you can skip both), your work if you mention it (Juliet never asks, and it goes on your profile in your own words, beside your name), and what you share about yourself: your personality, interests, values, lifestyle, languages, habits (such as smoking, drinking, diet, exercise), whether you have or want children, your education, your pets, your politics if you mention them, and your past relationships if you talk about them.

Who you are looking for. The people you are drawn to, your dealbreakers, the ages and distance you want, and the kind of relationship you are after.

Your photos. The photos you send, and a written description of them made by an AI model.

Your conversation. Your messages and voice notes (which we turn into text), Juliet's replies, the buttons you tap, and anything you send with /feedback.

Your WhatsApp number. It is how we know it's you, and how we reach you. WhatsApp also sends us the name on your WhatsApp profile with each message. We do not store it; Juliet may offer its first name back to you ("shall I call you Maya?"), and it becomes your name only if you tap Yes.

What Juliet makes from it. Your profile, written with you and shown to you before anyone else sees it; Juliet's short notes on you as a matchmaker; the messages of yours she remembers (an event and its day, a person or pet, a feeling, a liking), which you can see by asking "what do you remember about me?" and remove by saying "forget that", and which are never used for matching; and, once matching is switched on, who you are introduced to and how it went.

Before you tap "I'm in". Nothing is recorded before you agree. If you send messages before tapping it, Juliet reads them once, when you tap it, for your basics (such as your name and where you live) and to check you are 18 or over.

If you signed up on suiter.love. Your phone number, and your name and whether you are in London if you gave them. [Adam: whether older sign-ups also hold the first form's answers: age, gender, who you were looking for, your work and your dating life.]

If you visit suiter.love. Your IP address and browser, which every website receives. Only if you say yes on the cookie banner: which pages you view, and a recording of your visit with form fields hidden (PostHog). Without cookies: page counts and loading speed (Vercel). If something breaks, an error report (Sentry).

Safety information. If something you say suggests you or someone else may be at risk, or that you may be under 18, a note of what was said goes to a person at Suiter.

Sensitive information, and your explicit consent

Some of what you may tell Juliet is what the law calls special category data, and we only use it with your explicit consent:

• your religion or beliefs (including faith as a value, or a halal or kosher diet);
• your sexual orientation, which your gender and the gender of the people you want to meet can reveal;
• your sex life, where you tell us about your relationships or the kind of relationship you want;
• your political opinions, if you share them;
• your health, such as drug use, if you share it;
• your racial or ethnic origin, if your photos or your description of yourself reveal it.

AI providers, some of them in the US, process this information to run Juliet (see who we share it with). You give that consent when you tap I'm in after reading what Juliet will ask. You can skip any question, and you can withdraw your consent at any time by saying delete me (see below). Withdrawing does not make what we did before unlawful, but without this information we cannot match you, so withdrawing ends your membership. We keep a record of when you agreed and what you were shown.

How we use it, and why we are allowed to

We do not sell your data. We do not use it for advertising. We do not show anything about you to another member without your agreement, and your phone number is never on your profile.

AI and automated decisions

Juliet is an AI. AI models read your messages to reply to you, to pick out facts about you, and to describe your photos. Juliet does not make decisions about you that have legal or similarly significant effects on her own: matching is not switched on yet, and when it is, you choose yes or no to every introduction. Two things are automatic: if you tell Juliet you are under 18, she stops the conversation and a person checks; and a photo the automatic check refuses waits for a person to look at it. [Lawyer: confirm this meets UK GDPR Article 22.]

Who we share it with

We use these companies to run Suiter. They process your data on our instructions, under contracts that require them to protect it.

The Suiter team can see your conversation and record to run the beta safely. We will share information with the police or other authorities where the law requires it, or where someone is at risk of serious harm.

Sending data outside the UK

Some of the companies above are in the US or the EU. In the EU: Meta (Ireland), Hetzner (Germany), NextBit (Spain), PostHog and Sentry (Germany), which UK adequacy regulations cover. In the US: Meta, Cloudflare, OpenRouter, DeepInfra, CoreWeave, TypeSafe, Groq, Slack, Vercel and Google. Microsoft, a US company, runs Juliet's reply model in the EU; Google Cloud and Amazon Web Services are US companies whose AI models may run in the US. Grafana Labs stores our monitoring data in London but is a US company. For the US we rely on the UK Extension to the EU-US Data Privacy Framework where the company is certified, or on the UK's International Data Transfer Addendum to the standard contractual clauses where it is not. [Lawyer: confirm the mechanism for each company.] You can ask us for a copy of the safeguards.

How long we keep it

Deleting your data

Say delete me to Juliet on WhatsApp, or email hello@suiter.love. We will pause any introductions straight away and delete your data within 30 days (one month at most). We delete:

• your profile, your answers, and Juliet's notes on you;
• your photos;
• any match you are in (they are told it has ended, not why);
• what you said to a match through Juliet, from their side of the chat too;
• what Juliet remembers of you.

We also delete your sign-up from suiter.love, if you made one. [Adam: the note of it the team got on Slack when you signed up is not deleted by this; delete it by hand, or say so here.]

We keep our past conversations with you, and examples taken from them, to check and improve Juliet, with names and numbers taken out and nothing linking them back to you; they are deleted 24 months after they were written. We keep what you sent with /feedback the same way, with nothing linking it back to you, and do not delete it. What your matches were already sent stays with them. We keep the record that you consented (when, and which wording), as above. Our backups hold your data for up to about a day afterwards, and monitoring logs until they expire.

Your rights

You have the right to:

• see the data we hold about you, and get a copy;
• correct anything that is wrong (you can also just tell Juliet, or remove a fact from your profile card);
• delete your data, as above;
• withdraw consent at any time;
• object to what we do on the basis of legitimate interests, or ask us to restrict it;
• take your data with you in a common format.

Email hello@suiter.love to use any of them. We will reply within one month. It is free.

If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

Under 18s

Suiter is for adults only. If we learn someone is under 18, we stop the conversation, keep no photos, and a person checks. Within 30 days of the stop we delete the profile, photos and conversation, and keep only a coded note of the number and the date for up to 12 months, so the same number cannot simply start again.

Keeping it safe

Your data is stored on a server we control in Germany, reached only over encrypted connections, with access limited to the Suiter team. Your photos open only through a link that expires after an hour. Our monitoring logs name you by a coded tag, never your number or what you said. [Adam: confirm, and describe what the lawyer asks for: encryption at rest, who has access, how breaches are reported.]

Changes

If we change this notice in a way that matters, Juliet will tell you on WhatsApp before it takes effect.