Skip to content
FansTraffic
Apply to sell Start for Free
Start for Free Apply to sell

Privacy Policy

Effective Date: December 19, 2025

FansTraffic.ai (“we”, “us”, “our”, or the “Company”) is dedicated to safeguarding your privacy in accordance with applicable data protection laws, including the GDPR, CCPA/CPRA, the UK Data Protection Act 2018, and other relevant international frameworks. This Privacy Policy explains how we collect, process, use, disclose, store, and protect personal data when you access our website at fanstraffic.ai (the “Website”), use our AI-powered services to generate and direct targeted traffic to fan-based subscription platforms (the “Services”), or otherwise interact with our platform.

By accessing, registering for, or using our Services, you consent to the terms of this Privacy Policy. If you do not agree, please stop using our Services. This Policy forms part of our Terms of Service and may be updated from time to time; changes will be posted here and notified where feasible.

For GDPR purposes, FansTraffic.ai is the data controller for personal data processed in connection with our Services. Our Data Protection Officer (DPO) can be contacted at dpo@fanstraffic.ai.

Table of Contents

  1. Definitions and Key Terms
  2. Information We Collect
  3. How We Collect Information
  4. Legal Basis for Processing
  5. How We Use Your Information
  6. Sharing and Disclosure
  7. Data Retention
  8. Data Security
  9. International Transfers
  10. Cookies & Tracking
  11. AI-Specific Processing
  12. Your Rights
  13. Children’s Privacy
  14. Third-Party Links & Integrations
  15. Data Breach & Incident Response
  16. Changes to This Policy
  17. Contact Information

1. Definitions and Key Terms

To ensure clarity, the following terms are used:

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation on personal data such as collection, storage, use, or deletion.
  • Sensitive Personal Data: Data revealing racial or ethnic origin, political opinions, religious beliefs, health, sexual orientation, or biometric data — we generally do not collect this unless voluntarily provided.
  • Anonymized Data: Data irreversibly altered to prevent re-identification.
  • Pseudonymized Data: Identifiers replaced so re-identification requires additional information held separately.
  • AI Processing: Use of machine learning algorithms to analyze data for traffic optimization.

2. Information We Collect

We collect information necessary to operate and improve our Services, including:

a. Personal Data You Provide Directly

  • Account & Profile Information: Name, email, username, password (stored securely), date of birth (for age verification), and payment details (processed via PCI-compliant providers).
  • User Content: URLs to your fan platforms, prompts for AI campaigns, uploaded files (images), and related metadata.
  • Communication Data: Support tickets, survey responses, and chat/email interactions.
  • Marketing Preferences: Opt-in consents for newsletters and promotions.
  • Platform Data: If you link services (e.g., OnlyFans), we may process earnings, subscriber, and transaction metadata.

b. Automatically Collected Data

  • Log Data: IP addresses, user agent, request timestamps, HTTP status codes, and interaction logs.
  • Device Info: OS, device identifiers (hashed), screen resolution, and connectivity type.
  • Usage Analytics: Session duration, features used, funnels, and campaign performance.
  • Location: Coarse geolocation from IP for fraud detection and routing; precise GPS only if explicitly provided.

c. Inferred or Derived Data

  • Behavioral Insights: Inferences about preferences and engagement drawn by our models.
  • Aggregated Data: Non-personal summaries for internal analysis.

d. Third-Party Sources

  • Partners & Integrations: Data from marketing networks, payment processors, and linked social accounts.
  • Public Data: Anonymized datasets from open sources for model improvement (only if not linked to individuals without consent).

We minimize collection to what is necessary and do not process Sensitive Personal Data unless essential and with explicit consent.

3. How We Collect Information

  • Direct Input: Web forms, APIs, and dashboards over HTTPS.
  • Automated Technologies: Server logs, JavaScript trackers, and pixels.
  • Third-Party Tools: Analytics platforms integrated via secure APIs.
  • AI Inference: Real-time processing by our models; minimal metadata logged for debugging.

Under GDPR and similar laws, our legal bases include:

  • Consent: For marketing or training on user content (revocable).
  • Contractual Necessity: To perform our contract with you (e.g., process payments).
  • Legitimate Interests: Security, fraud prevention, and service improvement (balanced against your rights).
  • Legal Obligations: Compliance with subpoenas, tax reporting, and other legal duties.

5. How We Use Your Information

  • Service Provision & Optimization: AI algorithms to route traffic, A/B testing, and personalize dashboards.
  • Transaction Processing: Secure handling of subscriptions and payments via third parties.
  • Communications: Transactional and marketing emails (with unsubscribe options).
  • Analytics & Research: Aggregated and de-identified analysis for product improvement.
  • Security & Fraud Detection: Anomaly detection to protect accounts and the platform.
  • Compliance & Legal Defense: Retaining logs for auditing and legal purposes.
  • AI Model Improvement: With consent, anonymized interactions may be used to improve models.

We do not use data for automated decision-making with legal effects without human oversight.

6. Sharing and Disclosure of Your Information

We disclose information under strict controls to:

  • Service Providers: Cloud hosts, analytics, payment processors, and AI compute vendors under data processing agreements.
  • Affiliates & Partners: For joint services or marketing under NDAs.
  • Legal & Regulatory Bodies: When required by law using secure channels.
  • Business Transfers: In mergers or acquisitions, with anonymization where possible.
  • Aggregated Sharing: Non-personal industry benchmarks and insights.

We do not “sell” personal data as defined by CCPA but may share data for targeted advertising with opt-out mechanisms. All recipients are vetted for GDPR adequacy.

7. Data Retention Policies

Retention is based on data type, purpose, and legal requirements:

  • Account Data: Retained while active and for 7 years for tax compliance where applicable.
  • Usage Logs: Retained for 90 days for security, then anonymized.
  • Payment Records: Retained up to 10 years per financial regulations, stored encrypted.
  • AI Training Data: Ephemeral unless opted-in; deleted after 30 days when not needed.

8. Data Security Measures

We deploy multi-layered security measures including:

  • AES-256 encryption at rest and TLS 1.3 in transit.
  • Role-based access control (RBAC), penetration testing, and employee training.
  • SIEM monitoring, WAFs, and intrusion detection systems.
  • An incident response plan aligned with NIST guidelines.

9. International Data Transfers and Safeguards

Data may be processed in the US, EU, or other regions. For transfers from the EEA/UK/Switzerland we rely on mechanisms such as:

  • EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and Binding Corporate Rules (BCRs).
  • Transfer Impact Assessments and supplementary technical measures where needed.

10. Cookies, Tracking Technologies, and Analytics

We use:

  • Session cookies for authentication.
  • Persistent cookies for preferences (up to 2 years).
  • Third-party trackers like analytics with IP anonymization enabled.
  • Beacons/pixels for email opens and ad retargeting; manage via browser settings or our consent banner.

11. AI-Specific Data Processing and Privacy Considerations

Our AI uses modern model architectures to predict traffic patterns. User inputs may be used for fine-tuning only with consent and after pseudonymization. We perform fairness audits and provide an opt-out for training data at privacy@fanstraffic.ai.

12. Your Privacy Rights and Choices

  • Access/Portability: Request a copy of your data in machine-readable format.
  • Rectification/Deletion: Update or delete data subject to verification.
  • Objection/Restriction: Object to processing for marketing or restrict processing during disputes.
  • Opt-Out of Sales/Sharing: Use Do Not Sell link or send a GPC signal.
  • Withdraw Consent: You can withdraw consent at any time without affecting prior processing.

Exercise rights by contacting privacy@fanstraffic.ai. We aim to respond within 30 days.

13. Children’s Privacy and Age Restrictions

Our Services are for users 18 and older. We do not knowingly collect information from children under 13 and comply with COPPA where applicable. Parental requests should be sent to privacy@fanstraffic.ai.

Links to fan platforms or tools are governed by their policies. We are not responsible for their privacy practices.

15. Data Breach Notification and Incident Response

In the event of a data breach we will notify affected users within 72 hours where required by law, describe the nature of the breach, the data affected, and remediation steps we are taking.

16. Changes to This Privacy Policy

We may update this Policy; material changes will be notified 30 days in advance where feasible. You can request archived versions by contacting us.

17. Contact Information and Complaints

Email: privacy@fanstraffic.ai

Address: Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia

Thank you for entrusting FansTraffic.ai with your data. We commit to responsible stewardship through ongoing privacy impact assessments and ethical AI practices.