Privacy, in plain language.
This development notice documents the intended data boundaries. It requires qualified review before any real deployment.
Public data
Approved stage names, general service areas, provider-controlled listing information, consent-backed editorial material, citations and limited verification timestamps may be public.
Restricted data
Identity evidence, precise addresses, legal names not authorized for publication, billing records, encrypted enquiries, private messages and staff notes are excluded from public APIs, HTML, search indexes and analytics.
Control and retention
Accounts can request export, deletion, consent withdrawal and takedown. Legal holds may delay deletion. Media deletion removes local objects and queues derivative, cache, CDN and search propagation.
Development data
All seeded identities are fictional adults aged 25 or older. The repository contains no real identity documents, payment-card information or personal credentials.