Privacy Policy

1. Overview

Lasso ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your personal information when you use the Lasso platform.

2. Information We Collect

Account information: email address, display name, age, gender, pronouns, location, and bio.

Reflection data: your responses to the values assessment, which generate your Blueprint (dimension scores and narrative text). If you re-answer questions, we retain your previous responses in a version history so your Blueprint can be recomputed accurately; this history is never visible to other users.

Preferences: gender preferences, age range preferences, and reproductive needs for matching.

Nominations: testimonials and calibration responses you provide when nominating others.

Messages: your messages are encrypted on your device before they reach us. We store only the encrypted text, and we do not hold any key that can decrypt it — so a database breach, a curious employee, or a subpoena of our servers yields ciphertext, not conversations. We want to be precise about the limits of this, because most apps aren't: because Lasso is a website that sends your browser our code, this is not the same guarantee as a dedicated encrypted-messaging app like Signal. You can verify your encryption directly — every conversation shows a "safety number" you and your match can compare out of band to confirm no one is in the middle. See our Security page for the full, plain-language picture. One exception, controlled entirely by you: when you report another user, you may choose to attach your own decrypted copy of recent messages as evidence; only then do those specific messages become visible to our safety team.

Usage data: we record which product steps you complete (for example: started onboarding, completed a Reflection dimension, accepted a match) and a daily "was active" signal, tied to your account, so we can measure whether the product works and where people get stuck. These records contain step names only — never your answers, your messages, or your photos. Raw usage records are deleted after 12 months. We also record when our emails to you are delivered and when you click a link in them (we do not use open-tracking pixels), and we use Plausible for anonymous, cookieless page analytics.

3. How We Use Your Data

• To generate your Blueprint and match you with values-aligned users
• To send transactional emails (match notifications, prompt reminders, support confirmations)
• To enforce safety (reviewing reports, detecting policy violations)
• To improve the platform (aggregate analytics, not individual tracking)

4. What We Don't Do

• We do not sell your personal data
• We do not share your data with advertisers
• We do not read your conversations, and hold no key that could decrypt them (see the Messages section above and our Security page for exactly what this does and doesn't guarantee)
• We do not use your data to build advertising profiles
• We do not share your Blueprint with anyone except accepted match partners

5. Data Sharing

Your profile information (display name, age, pronouns, location, bio) is visible to users you're matched with. Your Blueprint scores are shared with accepted match partners only. We use the following third-party services:

• Supabase: database hosting and authentication (PostgreSQL)
• Vercel: application hosting
• Resend: transactional email delivery
• Plausible: privacy-first, cookieless page analytics (no individual tracking)
• Sentry: error monitoring (technical error reports, not message content)
• Cloudflare Turnstile: bot protection on sign-up and login forms
• Upstash: rate limiting (request counters only)

We do not share your data with any other third parties except when required by law.

6. Data Security

We implement industry-standard security measures including: row-level security on all database tables, client-side message encryption (NaCl/Curve25519) where the decryption key never leaves your device, CSRF protection, content security policies, and input sanitization. All data in transit uses TLS encryption. Our Security page explains our encryption model — and its limits — in plain language.

7. Data Retention

Your data is retained as long as your account is active. When you delete your account, all personal data is permanently removed including your profile, Blueprint, reflections (and their version history), matches, conversations, nominations, and badges. Nomination testimonials you wrote for others are anonymized rather than deleted, to protect the people you vouched for.

7a. Research

We do not use your data for research, publication, or sharing with academic or commercial partners without your separate, explicit, opt-in consent. Agreeing to these terms or this policy does not grant that consent. If we introduce a research program, participation will be a distinct choice you can decline or withdraw at any time without affecting your use of Lasso.

8. Your Rights

You have the right to:

• Access: view all data we hold about you (your profile page and data export)
• Correct: update your profile information at any time
• Delete: permanently delete your account and all associated data (Account → Danger Zone)
• Export: download a complete copy of your data (Account → Export My Data)
• Opt out: unsubscribe from non-essential communications (Account → Email Preferences)

For California residents (CCPA) and EU/UK residents (GDPR): these rights apply as described above. To exercise any right, use the in-app features or contact us at hi@tandemcg.com.

9. Cookies

Lasso uses only essential cookies for authentication session management (Supabase auth tokens). We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

10. Children's Privacy

Lasso is not intended for users under 21 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a minor, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "last updated" date at the top indicates when the policy was last revised.

12. Contact

Questions about your privacy? Contact us at hi@tandemcg.com.