Privacy Policy

Effective date: October 26, 2026

Fanmidas ("we", "us") is an independent app for Fanvue creators. It is not made by, affiliated with, or endorsed by Fanvue. This policy explains what data Fanmidas uses when a creator connects their Fanvue account, why, how long we keep it, and how to have it exported or deleted.

1. Data we use

• Your Fanvue account: your Fanvue user ID, display name and handle, and the OAuth access and refresh tokens Fanvue issues when you connect.
• Conversations: messages your fans send you and the replies sent from your account, so that replies follow the conversation.
• Fans: each fan's Fanvue user ID, display name and handle, spending totals, tips and purchases, online status, and any notes you add.
• Your vault: item titles, IDs and the prices you set, so the assistant only offers items you have priced.
• Usage records: how many replies were sent and which conversations were flagged for you, to show your plan usage and alerts.

2. How we use it

• To write and send replies in the persona you choose.
• To offer vault items at the prices you set.
• To flag conversations that need you, such as custom requests or meet-up questions.
• To count replies against your plan.

We do not sell your data, and we do not use your messages or media to train AI models.

3. Who processes it

• Fanmidas: stores your data on our own server.
• AI model provider: to write a reply, the conversation and your persona settings are sent to a third-party AI model provider through its paid API. Under its terms, the provider does not use this content to train its models.
• Cloudflare: provides our domain, HTTPS connections and support email forwarding.
• Telegram: only if you connect Telegram alerts, alert messages are delivered to you through Telegram.
• Fanvue: messages are sent and received through Fanvue, which keeps its own copy under its own policies.

Your data may be stored and processed in countries other than your own, including outside the EEA and the UK, where data protection laws may differ. A list of the service providers we use is available on request at [email protected].

4. How long we keep it

• Chat messages are kept for 365 days and then deleted automatically. The deletion runs once a day.
• Other data is kept while your account is connected.
• If you disconnect, the assistant stops right away and your data is kept for 30 days, so you can reconnect and pick up where you left off. After that it is deleted, including from our backups.
• We keep daily backups for up to 7 days. Older backups are overwritten automatically.

5. Your rights and deleting data

Under the GDPR you can ask to access, export, correct or delete your data, and you can object to its use. Email [email protected]; we respond without undue delay.

• Creators — disconnect: choose "Disconnect" in your dashboard. The assistant stops right away and your data is deleted after 30 days, as described above. To delete it straight away, also tick "Also delete my data now": we then delete your data from our systems immediately, including our backups (our delete-tenant routine).
• Fans — export or delete: a fan, or the creator on their behalf, can ask us to export or delete that fan's data. We delete it from our live database straight away (our delete-fan routine); copies in our rolling backups are overwritten within 7 days.
• Data that Fanvue holds on its own platform is covered by Fanvue's privacy policy, not ours.

6. Security

• OAuth tokens are encrypted at rest with Fernet (AES-128 with HMAC-SHA256 authentication).
• Our logs record internal IDs and event types only. Message text, names, handles and tokens are not written to logs.
• All pages and connections use HTTPS, and only the operator of Fanmidas can access stored data.

7. Security incidents

If we find a breach involving Fanvue user data, we will notify Fanvue at [email protected] and the affected creators without undue delay.

8. Changes and contact

We will update the effective date above when this policy changes. Questions: [email protected].