Privacy Policy
This policy explains what FanBotify reads, stores and shares, and the choices you have.
What we access through Fanvue
- Your account: Fanvue profile identifiers and the settings you give FanBotify (persona, limits, prices).
- Chats: messages between your account and your fans, to write replies and follow-ups.
- Fans: fan identifiers, names, subscription status and spending, to price offers and prioritise follow-ups.
- Earnings: transactions and amounts, to show revenue and react to purchases.
- Media: your vault and media metadata, to send the paid content you choose.
We also store your FanBotify login and Fanvue OAuth tokens. We never ask for your Fanvue password.
What we store about you as our customer
- Google sign-in: if you sign in with Google we receive your email address, whether Google verified it, and your name (scopes openid, email, profile; Google also sends your profile picture, which we don’t keep). We use them only to create and sign in to your account and to email you. FanBotify's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we don't sell it, use it for advertising, or let people read it except for security, legal reasons or with your consent.
- Contact email: the address you confirm by link, for receipts, reminders before any charge, invoices and the alerts you switch on.
- Payments: your plan, its periods, receipts and invoices. Cards are kept by Stripe; we keep only the Stripe identifiers, the card brand, last four digits and expiry. For crypto, NOWPayments payment identifiers and amounts.
- Proof of your consent: when you choose a plan we record the exact text you agreed to, the terms version, the date and time, the plan, price, period, whether it included the free month, your IP address and your browser's user agent.
Sensitive information
Fan conversations on Fanvue can include intimate or sexual content. FanBotify processes it only to run your workspace, keeps short conversation memory per fan to stay consistent, and never sells it or uses it for advertising.
Who processes the data
- OVHcloud (servers, France), Supabase (database), Redis on our servers (operational state).
- OpenRouter and the AI model providers it routes to, to generate replies. Recent messages and relevant memories for one fan are sent with each request.
- Resend (email alerts) and Telegram (alerts you choose to link).
- Fanvue, the platform your data comes from and where messages are sent.
- Stripe (card payments): stores the card you add. FanBotify keeps only its brand, last four digits and expiry.
- NOWPayments (crypto payments and balance top-ups).
How long we keep it
- Workspace data (persona, settings, fans, conversation memory, tokens): while your workspace is active, deleted within 30 days after you ask.
- Receipts, invoices and the payment records behind them: 10 years, as French accounting law requires.
- Proof of consent: as long as your plan runs, then 5 years (the period during which a claim can be made).
- Server logs: 30 days.
Retention and deletion
We keep workspace data while your workspace is active. To delete it, email team@fanbotify.com from your account email: we disconnect Fanvue, delete your workspace, fan records, conversation memory and tokens within 30 days, and confirm by email. Backups that may still contain it are overwritten on their normal cycle.
Your rights
Depending on where you live (for example under the GDPR) you can ask to access, correct, export or delete your data, or object to processing. Fans who want their data removed can contact the creator or us directly. Write to team@fanbotify.com.
Security
Each creator runs in an isolated worker with its own database access and tokens. Webhooks are signature-verified. Report security issues to team@fanbotify.com (see security.txt).
Changes
We'll update this page and its date when this policy changes, and email you about important changes.
FanBotify is an independent app built on the Fanvue Developer API. Not affiliated with Fanvue.