PRIVACY POLICY

1. Introduction

Welcome to OnlyFansAPI, a service provided by Fans Holdings OÜ ("Company", "we", "us", or "our"). Our registered address is Tornimäe tn 5, Harju maakond, Kesklinna linnaosa, 10145, Tallinn, Estonia, and our VAT ID is EE102827084.

We are committed to protecting your privacy and ensuring transparency in the collection, use, and sharing of personal data. This Privacy Policy outlines how we process your data in compliance with the General Data Protection Regulation (GDPR) (EU 2016/679) and other applicable data protection laws.

By using onlyfansapi.com ("Website"), you agree to the terms outlined in this Privacy Policy. If you do not agree, please do not use our service.

2. Data We Collect

We collect and process the following categories of personal data:

Account Information: Name, email address, username, and payment details when you register or subscribe.
Technical Information: IP address, browser type, device information, cookies, and usage data.
Transaction Data: Payment and purchase history related to our services.
Communication Data: Messages, support requests, and any correspondence with us.
Usage Data: Information on how you interact with our API and Website.

We do not process or store any adult content, nor do we collect special category data under GDPR.

3. How We Use Your Data

We process your personal data for the following lawful purposes:

To Provide Our Services: Processing requests, managing accounts, and enabling access to our API.
To Improve and Secure Our Services: Analyzing usage data, preventing fraud, and maintaining system security.
To Process Payments: Facilitating transactions and ensuring billing accuracy.
To Communicate With You: Providing customer support, responding to inquiries, and sending essential service notifications.
To Comply With Legal Obligations: Meeting regulatory requirements, preventing unlawful activities, and ensuring compliance with GDPR.

4. Legal Basis for Processing

We process your personal data under the following legal bases:

Performance of a Contract - To provide you with our services.
Legitimate Interests - To improve, secure, and optimize our services.
Legal Obligations - To comply with regulatory and legal requirements.
Consent - Where applicable, for optional services such as marketing communications.

5. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy:

Account Information - Retained as long as the user has an active account.
Transaction Data - Retained for 7 years for tax and compliance reasons.
Technical and Usage Data - Retained for 12 months for security and analytics.
Communications Data - Retained for 6 months unless required for legal claims.

Once the retention period expires, we securely delete or anonymize your data.

6. Data Sharing & Third Parties

We do not sell or rent your personal data. However, we may share it with:

Payment Processors - To handle payments securely.
Hosting & Infrastructure Providers - To ensure website functionality and security.
Legal & Regulatory Authorities - When required to comply with legal obligations.
Analytics & Security Services - To monitor, detect, and prevent fraudulent activities.

All third-party processors comply with GDPR and provide adequate data protection safeguards.

7. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure it is protected by:

Adequacy Decisions - Where the destination country has GDPR-equivalent laws.
Standard Contractual Clauses (SCCs) - Ensuring EU-level data protection standards.
Other Legal Mechanisms - Such as explicit user consent where required.

8. Your GDPR Rights

Under GDPR, you have the following rights:

Right to Access - Request a copy of your personal data.
Right to Rectification - Request corrections to inaccurate data.
Right to Erasure - Request deletion of your personal data under specific conditions.
Right to Restriction of Processing - Limit how we process your data.
Right to Data Portability - Request transfer of your data to another service provider.
Right to Object - Object to processing based on legitimate interests.
Right to Withdraw Consent - Withdraw consent for marketing or optional services.
Right to Lodge a Complaint - File a complaint with a data protection authority.

To exercise any of these rights, contact us at hello@onlyfansapi.com.

9. Cookies & Tracking Technologies

We use cookies and similar technologies for:

Essential Functionality - To enable core services like authentication.
Analytics & Performance - To track and improve user experience.
Security & Fraud Prevention - To protect against threats.

You can manage cookie settings through your browser or opt-out where applicable.

10. Security Measures

We implement industry-standard security measures to protect your data, including:

Encryption - Securing data in transit and at rest.
Access Controls - Restricting access to authorized personnel only.
Regular Audits - Monitoring and improving security protocols.
Data Anonymization - Where applicable, to enhance privacy.

Despite our efforts, no system is completely secure. Users should take personal precautions to protect their data.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in regulations or our practices. Significant updates will be communicated via email or on our website. Continued use of our service constitutes acceptance of any modifications.

12. Contact Information

For any questions or data-related requests, contact us at:

Fans Holdings OÜ

Tornimäe tn 5, Harju maakond, Kesklinna linnaosa, 10145, Tallinn, Estonia

Email: hello@onlyfansapi.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority.

This Privacy Policy complies with GDPR, EU data protection laws, and industry best practices.