Privacy and your data
Admission never gates privacy support. Pending, paused, restricted, and suspended members can request access, export, correction, deletion, and choice changes from the app’s Privacy & data screen, from the business portal, or through the public form.
Your choices
Each choice records purpose, version, and time: terms and privacy notice (required), nearby device location (while using), crossed paths (off by default), event-specific introductions (per event), promotional notifications, personalized ads (off by default). Turning a toggle off stops that use; it doesn’t remove every processing responsibility Sunset has.
Verification
A code to your phone confirms destructive actions and downloads. No identity documents by default. Public knowledge of a phone or a reference is never enough on its own.
Retention defaults (product targets)
| Unsubmitted application drafts | Reminder at 30 days, removed at 90 days unless resumed |
|---|---|
| Declined application review data | Up to 90 days unless a justified exception applies |
| Security / operational logs | Minimized, 90-day rolling retention |
| Closed moderation cases | Reviewed at 180 days unless a specific basis is recorded |
| Minimal admin audit | 12 months, with deletion and exception review |
| Account deletion | Immediate exclusion; removal from active systems within 30 days; a shorter applicable deadline takes precedence |
| Backups | Rolling expiry no more than 90 days; deletions are re-applied if a backup is restored |
| Crossed paths | Coarse presence at most 48 h, unmatched suggestions at most 7 days; no coordinates stored |
California residents: requests are handled within the applicable statutory window from receipt (45 days, extendable once with notice); we record the deadline on the request rather than asserting nationwide coverage.
Deletion
Deleting is different from pausing. Right away you leave discovery, every device is signed out, crossed-paths collection stops, pending requests and proposals are withdrawn, and old cards no longer reveal your profile. Kept narrowly with a purpose: a minimal booking record for the other party’s reservation and vendor support, and a minimal audit entry. Not required: finishing a booking, withdrawing a report, any payment, or a new ID document. Deletion doesn’t cancel or refund an active booking for you.
Can’t sign in? Use the public form for a privacy request; a privacy operator verifies you through the contact you give before anything changes.