Legal

Privacy Policy

Last updated:

1. Who We Are

ModelsVault ("we", "us", "our") is an agency management platform for webcam content creators and their agencies. Our registered business address and data controller contact is available at [email protected].

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at https://modelsvault.com and any associated services.

2. Information We Collect

Account information: Name, email address, password (hashed), and agency or business details you provide during registration.

Identity verification documents: Government-issued ID (front and back) submitted during agency verification. These are stored securely and used solely for compliance verification.

Platform credentials: API keys, tokens, or login credentials for third-party webcam platforms you connect. These are encrypted at rest.

Earnings and transaction data: Earnings figures, payout records, and platform statistics synced from connected platforms.

Usage data: Log data, IP addresses, browser type, pages visited, and actions taken within the platform for security and analytics purposes.

Payment information: Billing is handled entirely by Stripe. We do not store card numbers or full payment details. We receive a Stripe customer ID and subscription status.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the ModelsVault platform
  • Verify agency identity and comply with legal obligations
  • Process subscription payments via Stripe
  • Sync earnings data from connected webcam platforms
  • Send transactional emails (account verification, trial reminders, subscription receipts)
  • Detect and prevent fraud, abuse, or security incidents
  • Improve and develop new platform features
  • Respond to support requests

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:

  • Contract performance: Processing necessary to provide the services you signed up for
  • Legal obligation: Identity verification and compliance with applicable laws
  • Legitimate interests: Security monitoring, fraud prevention, and platform improvement
  • Consent: Marketing communications (where applicable and separately obtained)

5. Data Sharing and Third Parties

We share data only with the following categories of third parties:

  • Stripe: Payment processing and subscription management
  • Webcam platforms: Data is fetched from platforms you explicitly connect (Stripchat, OnlyFans, Cam4, LiveJasmin, etc.) using credentials you provide
  • Email delivery: Transactional emails sent via our email gateway
  • Hosting infrastructure: Cloud hosting providers under data processing agreements

All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

  • Account data: retained for the duration of your subscription plus 90 days after cancellation
  • Identity documents: retained for the minimum period required by applicable law (typically 5 years)
  • Earnings and transaction records: retained for 7 years for accounting and legal compliance
  • Log data: retained for 90 days

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data (subject to legal retention obligations)
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Restriction: Request that we restrict processing of your data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies and Tracking

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies. Analytics cookies (if any) are subject to your consent via our cookie banner.

9. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest for sensitive credentials, bcrypt password hashing, and regular security reviews. However, no method of transmission over the internet is 100% secure.

10. International Transfers

Your data may be processed in countries outside your own. Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

11. Children's Privacy

ModelsVault is intended solely for adults aged 18 and over. We do not knowingly collect data from individuals under 18. If you believe a minor has provided us with personal data, contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-platform notice. Continued use of the platform after changes constitutes acceptance.

13. Contact Us

For any privacy-related questions or to exercise your rights, contact our Data Protection contact at: [email protected]