This Privacy Policy explains how TrueFan collects, uses, and protects your personal data. We comply with the EU General Data Protection Regulation (GDPR).
1. Data controller
TrueFan, Copenhagen, Denmark. Contact: legal@truefan.dk.
2. Data we collect
- Account data: email, name, date of birth, handle, password hash.
- Verification data (creators): creators are verified in person. We keep the signed creator agreement and a record of who met the creator and when. We do not store a copy of the ID.
- Payment data: processed by Stripe; we never store full card numbers.
- Content data: posts, messages, and metadata you upload.
- Usage data: IP address, device type, app interactions - used for security and aggregated analytics.
3. Legal bases
- Performance of contract (providing the Service).
- Legal obligation (tax, anti-fraud, age-verification).
- Legitimate interest (security, fraud prevention, aggregated analytics).
- Consent (marketing emails, non-essential cookies).
4. Storage and hosting
All personal data is hosted within the European Union (Frankfurt region). Backups are encrypted. We do not transfer personal data outside the EU except to sub-processors with Standard Contractual Clauses in place (e.g. Stripe US).
5. Sub-processors
- Supabase (hosting, database, authentication) - EU region.
- Stripe (payments, identity verification) - EU/US with SCCs.
- Mux (video streaming) - EU region.
- Resend (transactional email) - EU region.
- AWS (content moderation) - EU region.
6. Retention
Account data is kept while your account is active, plus up to 6 years for financial records. Signed creator agreements are kept as long as the law requires. You may request deletion at any time, subject to legal retention duties.
7. Your rights
You may: access, rectify, delete, restrict, port, or object to our processing of your data. Contact legal@truefan.dk. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
8. Cookies
See our Cookies Policy.
9. Children
The Service is not directed to minors. We do not knowingly collect data from anyone under 18.
10. Changes
We will notify you of material changes by email.