Privacy Policy

Last updated: August 1, 2026

Your privacy is our priority. We collect only the minimum data necessary to operate the service and protect it to bank-grade standards.

1. Data We Collect

1.1 Personal Information

  • Email address and/or phone number
  • Display name (optional)
  • Date of birth (for age verification)
  • Payment data — processed through secure payment providers; we do not store card numbers
  • Government-issued ID documents (creators only, encrypted, stored in a private bucket)

1.2 User-Generated Content

  • Text prompts submitted for AI generation
  • Chat logs (messages with other users or AI assistant)
  • Uploaded images, video, and audio files
  • AI-generated content (images, video, text)

1.3 Technical Data

  • IP address
  • Device type, model, operating system, browser version
  • Cookies and session identifiers
  • On-site activity data (timestamps, pages visited, interactions)
  • Approximate geolocation (country / city level)

2. Special Category Data — Explicit Consent (GDPR Art. 9)

Because NeuroFans is an adult platform, your activity here (content viewed, purchased, or published) can reveal information about your sexual orientation or sex life — a "special category" of personal data under GDPR Article 9. We process this data only with your explicit, separate consent, collected as its own checkbox at signup (not bundled into general Terms acceptance). You may withdraw this consent at any time by deleting your account (§7 below).

3. How We Use Your Data

  • Service delivery — authentication, content generation and delivery, payment processing.
  • Moderation — enforcing the Terms of Service and Acceptable Use Policy.
  • Service improvement — AI model training and analytics using anonymised data only.
  • Communication — support, notifications; marketing only with your explicit consent.
  • Legal compliance — including disclosure to authorities in response to lawful requests.
  • Fraud prevention — detecting and blocking abuse.

4. Who We Share Data With

We do not sell your personal data to third parties. We may share data with:

  • Payment providers (NOWPayments, Paxum) — solely for payment processing; governed by their own privacy policies.
  • Technical subprocessors (hosting, CDN, AI infrastructure, analytics) — all bound by data-processing agreements.
  • Law enforcement / courts — only in response to valid legal requests or court orders.

5. Creator Identity Records (18 U.S.C. §2257)

US federal law requires platforms hosting sexually explicit content to retain proof of age and identity for every creator for 7 years (5 additional years after account closure). Creator KYC (government ID + selfie) is therefore mandatory before publishing. These records are never public and are stored separately from the public profile in an encrypted, access-controlled bucket.

6. Data Retention

6.1. Data is kept for as long as needed to provide the service, or as required by law — but no less than 3 years from the last login.

6.2. Payment records are retained for a minimum of 5 years to comply with tax regulations.

6.3. Creator KYC records are retained per §5 above regardless of account deletion.

6.4. Content that violates the Terms may be deleted by moderators without prior notice.

7. Your Rights (GDPR / CCPA)

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion ("right to be forgotten"). KYC records are exempt per §5.
  • Restriction — ask us to limit processing in certain circumstances.
  • Portability — receive your data in a machine-readable format (JSON).
  • Withdraw consent — withdraw consent to special-category data processing at any time.
  • Lodge a complaint — with the competent data-protection supervisory authority.

To exercise any of these rights, contact support@neuro-fans.com. We respond within 30 days.

8. Data Storage Location

All data is hosted on servers in the European Union (Frankfurt, Germany) under EU jurisdiction and GDPR. Payment data is handled by our payment partners in accordance with their own policies.

9. Security

We apply the following technical and organisational measures:

  • AES-256 encryption of data at rest.
  • TLS 1.3 (HTTPS) encryption of data in transit.
  • Strict need-to-know access control for all staff.
  • Two-factor authentication for all administrative access.
  • Regular security audits and penetration testing.

10. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising trackers by default. See our Cookie Policy for details.

11. Changes to This Policy

We may update this Policy at any time. The current version is always available at /legal/privacy. Continued use of the Platform after an update constitutes acceptance.

12. Contact

All data-protection enquiries: support@neuro-fans.com