Privacy Policy

Last Updated: March 2, 2026

This Privacy Policy explains how Fanz LLC, a Delaware limited liability company ("Company," "we," "us," or "our"), operating the Fanzplatform, collects, uses, shares, and protects your personal information when you use our platform ("Platform"). By using the Platform, you consent to the practices described in this Policy. If you do not agree, do not use the Platform.

1. Information We Collect

Information You Provide

Account Information: Name, email address, username, password, profile photo, and account type (Fan, Creator, Staff)
Creator Information: AI character configurations, personality settings, appearance settings, pricing, and payout details
Communications: Messages and conversations with AI Companions, support inquiries, and contact form submissions
Payment Information: Transaction history, Credit purchases and usage. Note: Full payment card details are processed by our third-party payment processors and are not stored on our servers
Verification Information: Tax documentation or identity verification if required for Creator payouts

Information Collected Automatically

Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers
Usage Data: Pages visited, features used, time spent, click patterns, and interaction history
IP Address: We collect and may hash IP addresses for security, fraud prevention, and analytics
Cookies and Tracking: Session cookies, analytics cookies, and similar technologies (see Section 8)
AI Interaction Data: Conversation history, content preferences, and AI response patterns used to personalize and improve the experience
Referral Data: Information about how you arrived at the Platform, including tracking links

Information from Third Parties

Payment confirmations and transaction data from payment processors
Analytics data from service providers
Fraud detection signals from security services

2. How We Use Your Information

We use your information to:

Operate the Platform: Create and manage accounts, process transactions, enable AI Companion interactions, and provide customer support
Generate AI Content: Process your inputs through AI models to generate text responses, images, and other content
Personalize Experience: Customize AI Companion responses and content recommendations based on your preferences and history
Process Payments: Facilitate Credit purchases, Creator payouts, and transaction records
Improve Services: Analyze usage patterns, conduct research, and enhance AI quality and Platform features
Security and Fraud Prevention: Detect, investigate, and prevent fraudulent or unauthorized activity
Legal Compliance: Comply with applicable laws, regulations, and legal processes
Communications: Send service updates, security alerts, and (with consent) marketing messages
Enforce Terms: Enforce our Terms of Service and policies

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your data based on the following legal grounds:

Contract Performance: Processing necessary to provide our services, manage your account, and fulfill transactions
Legitimate Interests: Processing for security, fraud prevention, service improvement, and analytics, where these interests are not overridden by your rights
Consent: Processing based on your explicit consent, such as marketing communications or certain AI personalization features
Legal Obligation: Processing required to comply with applicable laws

4. How We Share Your Information

With Other Users

Your public profile information, username, and content you share are visible to other users. Creators can see Fan interaction data. Once information is shared, we cannot control how recipients use it.

With Service Providers

We share data with trusted third parties including:

Payment Processors: To process fiat and cryptocurrency transactions
AI Service Providers: Language model and image generation providers that process your inputs to generate AI content
Hosting and Infrastructure: Cloud providers that store and serve Platform data
Analytics Services: To understand usage patterns and improve services
Communication Services: Email providers for transactional and marketing communications
Security Services: For fraud detection and prevention

Our service providers are contractually obligated to protect your data and use it only for specified purposes.

For Legal Reasons

We may disclose information when required by law, in response to legal process, to protect our rights, to investigate fraud, or to ensure user safety. We may also share data with law enforcement if we believe content involves illegal activity, particularly content that may involve minors.

Business Transfers

If the Company is acquired, merged, or sells assets, your information may be transferred. We will notify you of any such change.

5. AI-Generated Content and Conversations

Important: Your conversations with AI Companions are processed by third-party AI service providers to generate responses. You should understand:

Your messages are transmitted to AI providers for processing
Conversation data may be used to personalize your experience and improve AI quality
AI-generated images and content are created using third-party generation services
While we implement privacy safeguards, data shared with AI providers is subject to their respective privacy policies
We do not guarantee complete privacy of AI conversations

Do not share sensitive personal information (such as financial account numbers, government IDs, or health information) in AI conversations.

6. Data Retention

We retain your data for as long as necessary to:

Provide our services and maintain your account
Comply with legal obligations (e.g., tax records, fraud prevention)
Resolve disputes and enforce agreements
Improve and analyze our services

Retention Periods:

Account Data: Retained while your account is active and for up to 3 years after deletion for legal compliance
Transaction Records: Retained for 7 years for tax and financial compliance
Conversation History: Retained while your account is active; may be retained in aggregated or anonymized form after deletion
Security Logs: Retained for up to 2 years

Deleted content may persist in backups for a limited time and with recipients who received it.

7. International Data Transfers

We operate globally and may transfer your data to countries outside your residence, including the United States. These countries may have different data protection laws.

For EEA/UK Users: When transferring data outside the EEA/UK, we use appropriate safeguards including:

Standard Contractual Clauses approved by the European Commission
Transfers to countries with adequacy decisions
Other legally approved transfer mechanisms

8. Cookies and Tracking Technologies

We use the following types of cookies:

Essential Cookies: Required for Platform operation, authentication, and security
Analytics Cookies: Help us understand usage patterns and improve services (e.g., Vercel Analytics)
Functional Cookies: Remember your preferences and settings
Tracking Cookies: Session-based cookies for referral attribution

Managing Cookies: You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

Do Not Track: We currently do not respond to Do Not Track browser signals, but we honor Global Privacy Control (GPC) signals where required by law.

9. Data Security

We implement technical and organizational security measures including:

Encryption of data in transit and at rest
Secure authentication systems
Access controls and monitoring
Regular security assessments
IP address hashing for certain use cases

No Guarantee: While we strive to protect your data, no system is completely secure. You are responsible for maintaining the security of your account credentials.

Data Breach Notification: In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

10. Your Rights and Choices

All Users

Access and Update: Review and update your account information through your settings
Marketing Opt-Out: Unsubscribe from marketing emails using the link in any message
Account Deletion: Request account deletion by contacting support@fanz.com

EEA, UK, and Switzerland Residents (GDPR)

You have the right to:

Access: Request confirmation of processing and a copy of your personal data
Rectification: Request correction of inaccurate or incomplete data
Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements
Restriction: Request limitation of processing in certain circumstances
Data Portability: Receive your data in a structured, machine-readable format
Object: Object to processing based on legitimate interests
Automated Decision-Making: Not be subject to solely automated decisions with legal effects
Withdraw Consent: Withdraw consent at any time for consent-based processing
Lodge Complaint: File a complaint with your local data protection authority

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act as amended, you have the right to:

Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
Delete: Request deletion of your personal information
Correct: Request correction of inaccurate personal information
Opt-Out of Sale/Sharing: We do not sell personal information for monetary consideration. We may share data with service providers for targeted advertising—you can opt out by contacting us
Non-Discrimination: We will not discriminate against you for exercising your rights
Limit Sensitive Data Use: Request limitations on use of sensitive personal information

Categories of Personal Information Collected: Identifiers, commercial information, internet activity, geolocation data (IP-based), inferences, and sensitive personal information (account credentials).

Retention: We retain personal information as described in Section 6.

"Do Not Sell or Share My Personal Information": To opt out, contact support@fanz.com or use Global Privacy Control.

Other Jurisdictions

Users in other jurisdictions may have additional rights under local law. Contact us at support@fanz.com to exercise any applicable rights.

How to Submit Requests

To exercise your privacy rights, contact us at support@fanz.com. We may verify your identity before processing requests. We will respond within the timeframe required by applicable law (typically 30 days for GDPR, 45 days for CCPA).

11. Children's Privacy

The Platform is intended for users 18 years and older. We do not knowingly collect personal information from anyone under 18.

If we learn that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact support@fanz.com.

12. Third-Party Links and Services

The Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those services. We encourage you to review the privacy policies of any third-party services you use.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or Platform notice. The "Last Updated" date indicates the most recent revision. Your continued use after changes become effective constitutes acceptance.

14. Contact Us

For privacy questions, concerns, or to exercise your rights:

Email: support@fanz.com

EEA/UK Representative: For GDPR inquiries, contact us at the email above. We will provide information about our representative upon request.

By using Fanz, you acknowledge that you have read and understood this Privacy Policy.