Privacy Policy & GDPR Compliance
Last Updated: February 4, 2026 | Effective Date: February 4, 2026
Introduction
OnlyPPV ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Telegram autopilot platform.
By accessing or using OnlyPPV, you acknowledge that you have read and agree to be bound by this Privacy Policy.
1. Information We Collect
Account Information
- Full name and display name
- Email address
- Telegram username
- Country/region
- Account creation date
Telegram Business Credentials
We store encrypted access tokens for your Telegram Business account. Your actual Telegram login credentials are never stored on our servers.
Content & Media
- Uploaded photos, videos, and media files
- Content descriptions and metadata
- Persona configuration settings
- AI personality traits and conversation styles
Age Verification & Content Compliance
Creator Responsibility:
OnlyPPV does NOT collect, store, or maintain performer identity documents, government-issued IDs, age verification records, or performer consent documentation.
What Creators Must Do: You are legally required to verify all performer ages via government-issued identification, maintain age verification records per applicable law (such as 18 U.S.C. § 2257), keep records for the legally required retention period, and provide records to OnlyPPV immediately upon request.
Payment Information
- Telegram Stars transaction history
- Revenue and payout records
- USDT wallet addresses (for crypto payouts)
- PayPal email (if selected for payouts)
Note: Payment processing is handled through Telegram's infrastructure and third-party payment processors. We do not store full credit card details.
Usage Data
- Chat logs with fans (stored for 90 days)
- Analytics data (engagement, views, response times)
- Session data (duration, frequency, timestamps)
- Device information (browser, OS, IP address)
- AI conversation patterns and performance metrics
AI Processing Data
- Messages sent to and from your AI agents
- Sentiment analysis results
- Conversation context and history
- Fan behavioral insights and preferences
2. Legal Basis for Processing (GDPR)
We process your data under these legal bases as defined by the General Data Protection Regulation (GDPR):
GDPR Article 6(1)(b) - Contract Performance
- Account management and authentication
- Content delivery and AI-powered autopilot
- Payment processing and payouts
- Service provision and support
GDPR Article 6(1)(c) - Legal Obligation
- Age verification compliance and tracking
- CSAM detection and prevention (child protection)
- Tax compliance and record-keeping
- Law enforcement requests
- Regulatory compliance requirements
GDPR Article 6(1)(a) - Your Consent
- GDPR consent checkbox during signup
- Marketing communications (if opted in)
- Optional analytics tracking
- Non-essential cookies
GDPR Article 6(1)(f) - Legitimate Interest
We process certain data based on legitimate interest for platform safety and integrity:
- Monitoring for illegal content (CSAM, prohibited activities)
- Fraud detection and prevention
- Account security and abuse prevention
- Service improvement and optimization
Balancing Test:
Our interest: Preventing illegal content distribution, protecting users, legal compliance, service quality
Your rights: Privacy, data protection, confidentiality
Safeguards: Minimal data collection, limited retention (90 days for chat logs), encryption, access controls
GDPR Article 9(2)(g) - Special Category Data (Explicit Content)
We process sexually explicit content based on substantial public interest in preventing child exploitation, including automatic CSAM detection, manual content review when flagged, immediate removal and law enforcement reporting, and platform safety measures.
You gave explicit consent during signup by accepting our Terms of Service.
3. How We Use Your Data
Service Provision
- Creating and managing your OnlyPPV account
- Delivering content to fans through Telegram
- Processing payments and payouts
- Providing customer support
- Enabling AI-powered autopilot conversations
AI Processing
Your content and fan messages are processed by AI models to power the autopilot system. This includes real-time conversation generation, sentiment analysis, intent recognition, and response personalization.
What this means:
- Fan messages are sent to AI providers for processing
- Messages are processed in real-time to generate responses
- AI analyzes sentiment, intent, and conversation context
- Data may be retained by AI providers per their own policies
Your choices:
- Continue using the service with AI processing enabled
- Object to AI processing (may limit functionality) - email support@onlyppv.com
Child Protection
- Age verification tracking and compliance
- CSAM detection via automated scanning
- Abuse monitoring and reporting
- Content removal and account bans
- Law enforcement reporting when required
Legal & Compliance
- Tax compliance and record-keeping
- Fraud prevention and detection
- Platform security and integrity
- Investigating violations
- Responding to legal requests
Platform Improvement
- Analytics and performance monitoring
- Feature development and testing
- User experience optimization
- Service quality improvement
4. Who We Share Your Data With
Essential Service Providers
Telegram
- Purpose: Business API integration, message delivery, payments
- Location: Dubai, UAE
- Data shared: Business tokens, messages for delivery, transaction data
- Note: By using OnlyPPV, you acknowledge that Telegram may not meet full GDPR standards and is headquartered outside the EU.
What We DON'T Do
- We do NOT sell your data to third parties
- No marketing partnerships involving your data
- No data brokers
- No advertising networks
- No Google Analytics or similar third-party tracking
- No Facebook Pixel or cross-site tracking
Law Enforcement
We may disclose data if legally required, including CSAM automatically reported to NCMEC (National Center for Missing & Exploited Children) via automated detection, full cooperation with investigations involving child exploitation, terrorism, or serious crimes, court orders, subpoenas, and lawful government requests, and emergency situations involving imminent harm.
5. Data Retention
| Data Type | Retention Period | Why | Legal Basis |
|---|---|---|---|
| Account information | Until deletion or 180 days of inactivity | Service operation | Contract (Art. 6(1)(b)) |
| Chat logs (creator-fan messages) | 90 days rolling | Dispute resolution, abuse detection | Legitimate interest (Art. 6(1)(f)) |
| Session analytics | 90 days rolling | Service improvement, fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Payment/transaction data | 7 years | Tax compliance (legal requirement) | Legal obligation (Art. 6(1)(c)) |
| Content (uploaded media) | Until deletion by creator | Service delivery | Contract (Art. 6(1)(b)) |
| Agent configurations | Until deletion by creator | Service operation | Contract (Art. 6(1)(b)) |
| CSAM reports & logs | Indefinitely | Law enforcement cooperation | Legal obligation (Art. 6(1)(c)) |
Automated Deletion
- Chat logs: Automatically deleted after 90 days
- Session data: Anonymized after 90 days (identifiers removed, aggregated statistics retained)
- Account data: Deleted within 30 days of account closure (except legally required records)
Why 90 Days for Chat Logs? This is the industry standard for messaging platforms, allowing reasonable dispute resolution window (most occur within 60 days) while balancing operational needs with GDPR's data minimization principle.
6. Your GDPR Rights
You have the following rights under GDPR:
Article 15 - Right to Access
Request copy of your data:
- Available formats: JSON export
- Timeline: 30 days
- Cost: Free
- How: Email support@onlyppv.com with "Data Access Request"
Article 16 - Right to Rectification
Correct inaccurate data:
- Update via account settings (self-service)
- Or email support@onlyppv.com with corrections
- Timeline: Immediate via dashboard, 30 days via email
- Cost: Free
Article 17 - Right to Erasure ("Right to be Forgotten")
Request account deletion:
- Method: Account settings → Delete Account
- Or email: support@onlyppv.com with "Account Deletion Request"
- Timeline: All data deleted within 30 days
- Exception: Tax records kept 7 years (legal requirement)
- Exception: CSAM reports kept indefinitely (legal obligation)
What gets deleted: Account information, agents and content, chat logs and session data, analytics data, personal identifiers
What is retained: Financial records (7 years), CSAM detection logs (permanent), anonymized aggregate statistics
Article 18 - Right to Restrict Processing
Limit how we use data:
- Turn off analytics tracking
- Disable certain data processing
- Email: support@onlyppv.com with "Restrict Processing Request"
- Timeline: 30 days
- Note: May limit service functionality
Article 20 - Right to Data Portability
Download your data:
- Format: JSON (machine-readable, portable)
- Includes: Account info, agents, content metadata, analytics
- Timeline: 30 days
- Cost: Free
- How: Email support@onlyppv.com with "Data Portability Request"
Article 21 - Right to Object
Opt out of certain processing:
- Marketing emails (unsubscribe link in emails)
- Analytics tracking
- AI processing (note: may disable core functionality)
- Cannot object to contract-necessary processing
- Email: support@onlyppv.com with "Processing Objection"
Article 22 - Automated Decision-Making
Your rights:
- We use AI for: Content recommendations, conversation responses, sentiment analysis
- Request human review of automated decisions
- Object to automated decision-making
- Email: support@onlyppv.com
Article 77 - Right to Lodge Complaint
File complaint with data protection authority:
You may file with your local data protection authority or contact us at support@onlyppv.com for guidance.
7. International Data Transfers
Your data is stored and processed in multiple locations:
- Telegram Infrastructure: Global, with primary operations in Dubai, UAE
- AI Processing: AI providers (various locations, potentially including US)
Transfer Safeguards
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- Minimal data sharing (only what's necessary for service operation)
- Contractual data protection obligations with service providers
Note: By using OnlyPPV, you acknowledge that data is processed by Telegram (Dubai) and AI providers (potentially US-based), which may not provide the same level of data protection as EU regulations.
8. Security
We implement industry-standard security measures:
- Encryption at rest: AES-256 for stored data
- Encryption in transit: TLS 1.3 for all data transfers
- Access controls: Role-based access, principle of least privilege
- Monitoring: Security monitoring and logging
- Backups: Encrypted backups with retention policies
- Incident response: Documented procedures for data breaches
Data Breach Notification
In the event of a data breach affecting personal data, we will notify you within 72 hours (GDPR requirement) and provide details of the breach, affected data, and remediation steps.
Contact: support@onlyppv.com
Limitations: No security is 100% guaranteed. While we implement industry-standard protections, we cannot guarantee absolute security against all threats.
9. Children's Privacy
Our Platform is 18+ ONLY:
- We don't knowingly collect data from minors (under 18)
- Age confirmation required during signup
- If we discover a minor, we immediately terminate their account and delete their data
- We investigate how the minor bypassed age verification
If you believe a minor is using our platform: Email support@onlyppv.com with evidence
10. California Residents (CCPA/CPRA)
If you're in California, you have rights under CCPA/CPRA:
- Right to know: What personal information we collect and how we use it
- Right to delete: Request deletion of your data
- Right to opt-out of sale: We don't sell data, so this doesn't apply
- Right to correct: Update inaccurate information
- Right to limit use: Restrict processing of sensitive information
How to Exercise Your Rights
Email support@onlyppv.com with "California Privacy Rights" in the subject line.
Include:
- Your name
- Account email
- Specific request (access, delete, correct, etc.)
- Verification information
Timeline: 45 days (may extend to 90 days with notice) | Cost: Free
Do Not Sell My Personal Information
We do NOT sell personal information to third parties. We never have and never will.
11. Cookies & Tracking
Cookies We Use
Essential Cookies (Required):
- Session cookies (necessary for login)
- Authentication tokens
- Security cookies (CSRF protection)
No Third-Party Tracking
- No Google Analytics
- No Facebook Pixel
- No advertising trackers
- No cross-site tracking
Your Choices
- Manage in browser settings
- Use private/incognito browsing (will disable functionality)
Note: Essential cookies remain necessary for service operation.
12. Policy Changes
We may update this policy anytime:
- Major changes: Posted on this page with updated date and effective immediately
- Continued use after notice = acceptance
Version history:
- Current: February 4, 2026 (Comprehensive GDPR/CCPA update)
13. Contact Us
For Privacy Questions:
Email: support@onlyppv.com | Response: Within 7 business days
For Data Requests (GDPR/CCPA):
Email: support@onlyppv.com | Subject: "[GDPR/CCPA] [Request Type]" | Response: Within 30 days
For Security Issues:
Email: support@onlyppv.com | Response: Within 24 hours for critical issues
For Abuse Reports:
Email: support@onlyppv.com | Response: Within 24-48 hours
By using OnlyPPV, you acknowledge that you have read, understood, and agree to this Privacy Policy.