Privacy policy

VelvetVote is currently an independent prototype operated from South Australia, Australia. Privacy questions and requests are handled through velvetvote.support@gmail.com.

• Account data, including email address, a salted password hash when you set a password, role, verification status, session records, and security events. We do not store your original password.
• Creator application data, including display name, biography, approved tags, profile image, official activity links, optional private review photos, ownership notes, and review status.
• Survey data, including selected preferences, expected price, non-binding support intent, and submission time.
• Technical and security data, such as a one-way device identifier, IP-derived hosting logs, browser information, rate-limit records, and error logs.
• Messages and evidence you send when you contact support, report content, request deletion, or appeal a decision.

Adult-content preferences and information about sexual interests may be sensitive information. Please do not submit identity documents, financial details, or unnecessary intimate information through surveys or ordinary support email.

Optional review photos and ownership notes are available only to administrators. They are never added to public profiles; a profile image becomes public only after creator approval.

If you turn on personalized creator suggestions, we use your recent survey participation and shared creator tags to suggest relevant public profiles. Confirmed creator introductions may add a limited ranking signal; creators never receive your individual activity or another creator’s fan list. You can turn suggestions off in Find creators.

• Provide email-and-password or email-code sign-in, password recovery, creator onboarding, surveys, results, profile-image delivery, and account support.
• Prevent duplicate responses, abuse, unauthorized access, spam, and fraud.
• Review creator profiles and enforce safety, consent, copyright, and acceptable-use rules.
• Respond to privacy, safety, legal, copyright, and email-delivery requests.
• Understand aggregate demand without treating stated intent as money collected or a binding promise.

Creator invitations require prior agreement from the recipient. We ask users to make deliberate choices before submitting profile or survey information. Where sensitive information, identity checks, age assurance, payment data, or adult-media uploads are introduced later, VelvetVote will provide a separate notice and obtain any additional consent required before collection.

You may choose not to complete an optional survey field. You may request access, correction, account closure, or deletion by contacting support. Some information may be retained where reasonably required for security, dispute handling, legal compliance, or backup integrity.

VelvetVote currently uses service providers for hosting, database storage, object storage, and transactional email. These may include Vercel, a managed PostgreSQL provider, Amazon Web Services, and their subprocessors. Data may therefore be processed in Australia, the United States, or another location used by those providers.

Providers receive only the data reasonably needed for their function. VelvetVote does not sell personal information and does not use survey responses for third-party advertising.

Verification codes expire after 10 minutes and private creator invitations expire after seven days. Server-side sessions can expire or be revoked. Other account, profile, survey, complaint, and security records are retained only while reasonably needed for the prototype, safety, disputes, or legal obligations, then deleted or de-identified where practical.

We use access controls, hashed tokens, private object storage, least-privilege service credentials, encryption provided by infrastructure services, and manual administrator review. No online service can promise absolute security.

VelvetVote is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. Report suspected underage use immediately without sending or attaching illegal imagery.

Send privacy complaints to support with enough detail for us to investigate. We will acknowledge and respond within a reasonable period. If an Australian privacy complaint remains unresolved, you may be able to contact the Office of the Australian Information Commissioner at oaic.gov.au.

We will date material changes to this policy. New payment, identity-verification, age-assurance, or media-hosting features will not silently rely on this prototype notice; they require updated disclosures and controls before launch.