Fanfy LTD Privacy Policy
Last Updated: September 2024
1. Introduction
Welcome to Fanfy LTD ("Fanfy," "we," "us," or "our"). We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy describes how we collect, use, store, and disclose your information when you use our website located at fanfy.ai (collectively, the "Service").
By accessing or using our Service, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
We collect various types of information to provide and improve our Service to you.
A. Personal Information
- Account Information
- Registration Data: When you create an account, we collect your username, email address, password, and date of birth.
- Google Sign-In: If you sign up using Google, we collect your Google account information, such as your email address and profile name.
- Contact Information
- Email Address: Used for account verification, transactional communications, and updates.
B. Usage Data
- Interaction Logs
- Records of your interactions with AI chatbots and avatars.
- Your personal interactions with the AI are confidential.
- We do not share your conversations with third parties without your explicit consent.
- Preferences and Settings
- Information about your selected preferences, including SFW or NSFW mode.
C. Technical Data
- Device Information
- IP address, browser type, operating system, and device identifiers.
- Log Data
- Details about your access and use of the Service, including timestamps, pages viewed, and referral URLs.
D. Financial Information
- Payment Details
- Payment method information collected and processed by our third-party payment processors (we do not store full credit/debit card numbers).
E. Cookies and Similar Technologies
- We use cookies and similar tracking technologies to enhance your experience, analyze usage, and for marketing purposes. See Section 5 for more details.
3. How We Use Your Information
We use the collected information for various purposes:
A. Service Delivery
- Account Management
- To create, maintain, and manage your account.
- Interactive Features
- To enable you to interact with AI chatbots and avatars.
B. Transaction Processing
- Subscriptions and Purchases
- To process payments for subscription plans and credit packages.
C. Communication
- Transactional Messages
- To send confirmations, invoices, technical notices, updates, security alerts, and support messages.
- Marketing Communications
- To inform you about promotions, offers, and events (you can opt out at any time).
D. Personalization
- Customized Experience
- To tailor the content and features according to your preferences.
E. Analytics and Improvements
- Service Enhancement
- To analyze usage patterns and improve the Service.
F. Legal Compliance
- Regulatory Obligations
- To comply with applicable laws, regulations, and legal processes.
- Enforcement
- To enforce our Terms of Service and other agreements.
4. How We Share Your Information
We may share your information with:
A. Service Providers
- Cloud Hosting and Storage
- We use Amazon Web Services (AWS) EC2 and S3 for hosting and data storage.
- Database Management
- We use MongoDB for our database needs.
- Payment Processors
- Third-party payment processors handle all transactions (e.g., Payabl, PayPal).
B. Analytics Providers
- Usage Analytics
- Third-party services that monitor and analyze the use of our Service.
C. Legal and Compliance
- Law Enforcement
- If required by law or in response to valid requests by public authorities.
- Business Transfers
- In connection with a merger, sale, or acquisition of all or a portion of our business.
D. With Your Consent
- We may disclose your information for any other purpose with your explicit consent.
5. Cookies and Tracking Technologies
A. Types of Cookies Used
- Essential Cookies
- Necessary for the Service to function properly.
- Performance Cookies
- Collect information about how you use the Service to improve performance.
- Functional Cookies
- Remember your preferences and settings to enhance your experience.
- Advertising Cookies
- Used to deliver relevant advertisements and marketing campaigns.
B. Purpose of Cookies
- Authentication
- To keep you logged in and maintain your session.
- Preference Storage
- To remember your settings and personalization choices.
- Analytics
- To understand how you interact with the Service and to improve it.
C. Managing Cookies
- Browser Settings
- You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
- Opt-Out Options
- Some features of the Service may not function properly if cookies are disabled.
6. Data Security
A. Security Measures
- Encryption
- Data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) or Transport Layer Security (TLS) protocols.
- Access Controls
- Access to personal data is restricted to authorized personnel who need it to perform their job duties.
- Regular Audits
- We perform regular security audits and assessments to identify and mitigate potential vulnerabilities.
B. Data Storage
- Servers
- Data is stored on secure servers hosted by AWS in data centers that comply with industry standards for security and data protection.
- Backup and Recovery
- Regular backups are performed to prevent data loss and ensure quick recovery in case of system failure.
C. No Absolute Security
- While we strive to protect your personal data using commercially acceptable means, no method of transmission over the internet or electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
7. Data Retention
A. Retention Periods
- Account Information
- We retain your account information for as long as your account is active or as needed to provide you with the Service.
- Transaction Data
- Financial and transactional records are retained for legal, regulatory, and tax compliance purposes.
B. Deletion of Data
- Account Deletion
- You may request the deletion of your account and personal data by contacting us at privacy@fanfy.ai. We will process your request in accordance with applicable laws.
- Anonymized Data
- We may retain anonymized or aggregated data that does not identify you personally for analytical and research purposes.
8. Your Rights and Choices
A. Access and Correction
- Right to Access
- You have the right to request a copy of the personal data we hold about you.
- Right to Rectification
- You can correct or update your personal data at any time through your account settings.
B. Deletion and Restriction
- Right to Erasure
- You can request the deletion of your personal data under certain circumstances.
- Right to Restrict Processing
- You may ask us to limit the processing of your personal data in specific situations.
C. Data Portability
- Right to Data Portability
- You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
D. Objection
- Right to Object
- You may object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
E. Withdraw Consent
- Marketing Communications
- You can opt out of receiving marketing emails by following the unsubscribe instructions included in these emails or by adjusting your account settings.
F. Exercising Your Rights
- Contact Us
- To exercise any of your rights, please contact us at support@fanfy.ai
- Verification
- We may require you to verify your identity before responding to your request to protect your privacy and security.
13. Contact Us
If you have any questions, concerns, or inquiries about this Privacy Policy or our data practices, please feel free to contact us:
- Email: support@fanfy.ai
- Mailing Address: Fanfy LTD 124 City Road London, United Kingdom EC1V 2NX
14. Data Protection Measures
We implement various security measures to safeguard your personal data.
A. Technical Safeguards
- Encryption
- We use industry-standard encryption protocols (SSL/TLS) to protect data transmitted between your device and our servers.
- Data at rest is encrypted to prevent unauthorized access.
- Secure Coding Practices
- Our development team follows best practices in secure coding.
- Regular code reviews and security assessments are conducted to identify and mitigate potential vulnerabilities.
15. Consent Management
We are committed to providing you with control over your personal data and how it is used.
A. Obtaining Consent
- Registration
- By creating an account on our Service, you acknowledge that you have read and agree to our Terms of Service and this Privacy Policy.
- During registration, we may request your explicit consent for specific data processing activities.
- Cookies
- We display a cookie consent banner when you first visit our Service to inform you about our use of cookies and similar technologies.
- You have the option to accept all cookies or manage your cookie preferences.
B. Withdrawing Consent
- Opt-Out
- You may withdraw your consent at any time by:
- Deleting your account through your account settings.
- Adjusting your preferences in your account or cookie settings.
- Effect of Withdrawal
- Please note that withdrawing consent may affect your ability to access certain features of the Service.
- Some functionalities may become unavailable if the necessary personal data cannot be processed.
16. Third-Party Services
Our Service may include links to or integrations with third-party services.
A. Service Providers
- Google Sign-In
- We offer the option to sign up or log in using your Google account.
- Authentication services are provided by Google and are subject to Google's Privacy Policy.
- By using Google Sign-In, you authorize us to access certain information from your Google account.
- Payment Processors
- Financial transactions are handled by third-party payment processors such as Stripe or PayPal.
- We do not store your full credit/debit card details on our servers.
- These processors adhere to strict data security standards, including PCI DSS compliance.
B. Links to Other Sites
- External Links
- Our Service may contain links to external websites or services not operated by us.
- These links are provided for your convenience and do not signify our endorsement of such websites.
- No Responsibility
- We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.
- We encourage you to review the privacy policies of any third-party sites you visit.
17. Compliance with Laws
We comply with applicable data protection laws and regulations.
A. General Data Protection Regulation (GDPR)
- Data Controller
- For users in the European Economic Area (EEA), Fanfy LTD acts as the data controller of your personal data.
- Legal Bases for Processing
- Consent: When you have given clear consent for us to process your personal data for a specific purpose.
- Contractual Necessity: Processing necessary for the performance of a contract with you or to take steps to enter into a contract.
- Legitimate Interests: Processing necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests.
B. California Consumer Privacy Act (CCPA)
- California Residents
- If you are a California resident, you have specific rights under the CCPA, including:
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You may request the deletion of personal information we have collected from you.
- Right to Opt-Out: You may opt out of the sale of your personal information (Note: We do not sell personal information).
- Exercising Your CCPA Rights
- To exercise your rights under the CCPA, please contact us at support@fanfy.ai.
C. Children's Online Privacy Protection Act (COPPA)
- Children's Privacy
- We comply with COPPA, which restricts the collection of personal information from children under 13 years of age.
- Our Service is not intended for children under 13, and we do not knowingly collect personal data from them.
- If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly.
18. User-Generated Content
We value your contributions and interactions on our Service.
A. Content Creation
- AI Interactions
- When you interact with our AI chatbots and avatars, your conversations are stored securely.
- We use this data to enhance and improve the performance of our AI models and the overall Service.
B. Content Monitoring
- Privacy of Interactions
- Your personal interactions with the AI are confidential.
- We do not share your conversations with third parties without your explicit consent.
- Data Usage
- Aggregated and anonymized data may be used for analytical purposes to improve the Service.
- Such data does not identify you personally.
19. Advertising and Marketing
We may use your information to provide personalized advertising and marketing content.
A. Personalized Advertising
- Use of Data
- We may use cookies and similar technologies to collect information about your activities on our Service and other sites to provide you with targeted advertising.
- This includes data such as your interactions with the Service, preferences, and demographic information.
- Third-Party Advertising Partners
- We may collaborate with third-party advertising networks to display ads on our Service or manage our advertising on other sites.
- These partners may use cookies and similar technologies to collect information about your activities.
B. Opt-Out Options
- Ad Preferences
- You can adjust your advertising preferences in your account settings.
- Options may include opting out of personalized ads or limiting the use of your information for advertising purposes.
- Opting Out of Third-Party Networks
- Visit the Network Advertising Initiative's (NAI) opt-out page or the Digital Advertising Alliance's (DAA) opt-out page to opt out of interest-based advertising.
20. Data Minimization
We adhere to the principles of data minimization and purpose limitation.
A. Necessary Data Only
- Limited Collection
- We collect only the personal data that is necessary to provide and improve the Service.
- We avoid collecting data that is not relevant to the purposes outlined in this Privacy Policy.
B. Purpose Limitation
- Specified Use
- We use your personal data solely for the purposes described in this Privacy Policy.
- We do not process your data in a manner that is incompatible with these purposes without your consent.
21. Updates and Notifications
We may communicate with you regarding important information about the Service.
A. Communication
- Email Notifications
- We may send you emails to inform you about updates, new features, promotions, and other relevant information.
- You can manage your email preferences through your account settings or by following the unsubscribe instructions in the emails.
B. Mandatory Communications
- Service Announcements
- Certain communications are essential for the operation of the Service and your account, such as:
- Security alerts
- Legal notices
- Policy updates
- You may not opt out of receiving these mandatory communications.
22. Language
This Privacy Policy is written in English. In the event of any conflict or discrepancy between the English version and any translated version, the English version shall prevail.
23. Acceptance of This Policy
By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Service. If you do not agree with any part of this policy, please discontinue using our Service immediately.
Effective Date
This Privacy Policy is effective as of the date indicated at the top of this document.
Thank you for taking the time to read our Privacy Policy. We are committed to safeguarding your personal information and ensuring transparency in how we handle it.