This Privacy Policy explains how Fanvy collects, uses, stores, and shares information when you use our website, apps, and services at fanvy.ai. We wrote this policy in plain language so you can understand what happens to your data and what choices you have.

Fanvy is currently privately operated by an individual based in Ukraine. Formal legal entity registration is in progress. If you have questions, requests, or complaints related to privacy, you can contact us anytime at legal@fanvy.ai.

1. Introduction

Fanvy provides a CRM and AI chatbot platform for Fanvue creators and agencies. To provide this service, we process account information, platform integration data, communications metadata, and analytics data. We only collect data that is reasonably needed to run, secure, and improve Fanvy.

This policy applies when you create an account, connect Fanvue profiles via OAuth, use AI reply features, receive alerts, browse our website, or communicate with support. It also applies when third parties process personal data on our behalf as service providers.

We are committed to privacy-by-design principles. That means we aim to reduce data collection where possible, limit access by role, encrypt sensitive credentials, and retain data for defined periods instead of indefinitely.

2. Information We Collect

Account and profile information

When you register for Fanvy, we collect:

Name
Email address
Password (stored as a secure hash, never in plain text)
Phone number (optional)

We use this information to create your account, authenticate access, deliver transactional communications, and provide customer support.

Fanvue integration and OAuth data

When you connect a Fanvue account, we receive OAuth credentials and related connection metadata from Fanvue API. OAuth tokens are encrypted at rest in our systems. We use them only to fetch authorized data and perform actions you initiate through Fanvy.

We also process data synchronized from Fanvue, including message threads and subscriber information that your Fanvue account can access. This is generally read-only in Fanvy and is used to power inbox workflows, suggestions, and account analytics.

Message and subscriber data

To provide AI-assisted replies and unified inbox functionality, we process message content and related metadata (timestamps, sender/recipient IDs, account references). We also process subscriber profile and performance data made available through Fanvue APIs.

Message content may be transmitted to AI providers when you use AI features. We configure providers and prompts to support business use cases and avoid unnecessary data transfer.

Usage, device, and analytics data

When you interact with Fanvy, we collect technical and usage information such as:

Pages viewed and feature usage events
Approximate device/browser information
Session identifiers and performance diagnostics
Attribution and conversion events for marketing

We use analytics to understand product performance, maintain reliability, and improve features. Where required by law, we ask for consent before setting non-essential tracking cookies.

Payment and billing information

Fanvy offers subscription payments through Plisio (crypto payments). We do not store card details. We receive limited billing data required to validate payment status, subscription lifecycle, and fraud/risk controls. Refund rules for crypto payments are described in our Refund Policy.

3. How We Use Information

We process personal data for the following purposes:

To provide and maintain Fanvy services, account access, and security controls
To process Fanvue integrations and sync authorized data
To generate AI-assisted message suggestions and automation outputs
To send transactional notices (security alerts, receipts, system updates)
To improve product usability, monitor performance, and detect abuse
To measure campaigns and optimize customer acquisition
To comply with legal obligations and enforce our Terms

We do not sell your personal information. We do not allow third parties to use your private account data for their own unrelated advertising purposes.

4. Legal Basis for Processing (GDPR Art. 6)

If you are in the EEA, UK, or similar jurisdictions, we rely on one or more of these legal bases:

Contract — processing needed to provide the Fanvy service you requested.
Consent — processing based on your choices, such as optional analytics/marketing cookies.
Legitimate interests — security, fraud prevention, product improvement, and service reliability.
Legal obligation — compliance with applicable laws and lawful requests.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing done before that withdrawal.

5. How We Share Information

We share personal data with subprocessors only when necessary to run Fanvy. Key categories and providers include:

Fanvue API — account connection and authorized data access.
OpenAI and Anthropic — AI reply generation and related model processing.
Telegram Bot API — notification delivery when enabled.
Brevo — transactional email delivery.
Plisio — payment processing and subscription status.
Google Analytics 4 and Google Tag Manager — analytics and tag orchestration.
Meta Pixel / Facebook tools — campaign measurement and conversion tracking.
Sentry — error monitoring (planned rollout).
Hetzner (Germany) — infrastructure hosting for our PostgreSQL database and application workloads.

We may also disclose information if required by law, to protect rights and safety, or as part of a business reorganization. If ownership structure changes, we will provide notice where required.

6. International Transfers

Fanvy stores core service data in the EU (PostgreSQL on Hetzner infrastructure in Germany). Some processors, including AI providers and analytics/ad partners, may process data outside your country, including in the United States.

For cross-border transfers, we use appropriate safeguards under applicable law, which may include Standard Contractual Clauses (SCCs), contractual commitments, and technical controls such as encryption and access restrictions.

You can request more details about transfer safeguards by contacting legal@fanvy.ai.

7. Data Retention

We retain personal data for as long as needed to provide Fanvy and comply with legal obligations. Retention periods are based on data type and purpose.

Account data: retained while your account is active, then deleted or anonymized within 30 days after account deletion, unless legal retention is required.
Application and security logs: retained for up to 90 days for abuse prevention, troubleshooting, and incident response.
Billing records: retained as required by tax/accounting obligations and payment dispute handling.
Cookie and analytics identifiers: retained based on cookie settings and provider retention controls.

Note: Certain backups may persist briefly past normal deletion windows due to storage rotation schedules.

8. Your Privacy Rights

GDPR and similar rights

Depending on your location, you may have the right to:

Access personal data we hold about you
Correct inaccurate or incomplete information
Request deletion of your personal data
Request portability of data you provided to us
Restrict certain processing
Object to processing based on legitimate interests
Withdraw consent where processing depends on consent

CCPA/CPRA rights

If you are a California resident, you may request to:

Know what categories of personal information we collect and why
Access specific pieces of personal information
Delete personal information, subject to legal exceptions
Correct inaccurate information
Opt out of certain sharing/sale contexts (where applicable)
Receive equal service and pricing without unlawful discrimination

Fanvy does not knowingly sell personal information in the traditional data-broker sense. We still provide rights-based controls to support compliance and user trust.

9. How to Exercise Your Rights

To submit a privacy request, email legal@fanvy.ai with enough information for us to verify your identity and locate your account. You can also include your preferred response format.

We may ask follow-up questions to protect account security and prevent unauthorized disclosures. We respond within legal timelines, and usually faster for straightforward requests.

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Fanvy is intended for adults and businesses. You must be at least 18 years old to use our services. We do not knowingly collect personal data from children under 18.

If we learn that we collected information from someone under 18 without valid authorization, we will remove the data as soon as reasonably possible.

11. Cookies and Tracking

We use essential, analytics, and marketing cookies to run Fanvy and understand service performance. You can learn more in our Cookie Policy, including cookie names, purposes, and control options.

For optional cookies, where required, we rely on your consent choices and provide controls through browser settings and consent tooling.

12. Changes to This Policy

We may update this Privacy Policy when our services, legal obligations, or processing practices change. If changes are material, we will provide additional notice (for example by email or in-app notice) where required by law.

The date at the top of this page shows when this policy was last updated. Continued use of Fanvy after updates means the revised policy applies, unless local law requires a different process.

13. Contact

If you have privacy questions, requests, or complaints, contact us at legal@fanvy.ai.

We aim to respond quickly, clearly, and in good faith to privacy matters. Protecting creator and agency data is central to how we build Fanvy.