Privacy Policy

This Privacy Policy explains how Walker Capital Management LLC, doing business as FansXO (“FansXO,” “we,” or “us”), collects, uses, shares, and protects information when you use our website, mobile applications, and services (the “Service”).

FansXO is an adult-only platform. We do not knowingly collect information from anyone under 18. See § 7 below.

1. Information We Collect

Information you provide

• Account information. Email address, username, password (hashed), display name, and profile details.
• Verification information. At signup, fans self-attest to being at least 18 years old. Creators complete an identity-verification flow operated by our third-party identity verification provider (currently Veriff), which involves submitting a government-issued ID and a selfie. The verification provider processes those images on its own systems and shares with us only the result data necessary for compliance — such as pass/fail status, decision metadata, and verification session identifiers. FansXO does not directly receive or store the ID document image or the selfie. We may expand the fan verification flow in the future to include third-party age estimation; if we do, this policy will be updated.
• Payment information. Token purchases are processed by third-party cryptocurrency or payment providers (which may include Ramp Network and other future providers). We do not store payment card data. We retain only transaction identifiers, on-chain transaction hashes (where applicable), and the amount of each purchase as needed for accounting, refund handling, and tax compliance.
• Payout information. Crypto wallet addresses (creators), tax forms (W-9 / W-8BEN where applicable), and payout history.
• Content. Messages, photos, videos, and other material you submit through the Service.
• Communications. Emails, chat transcripts with support, and bug reports.

Information collected automatically

• Device & usage data. IP address, browser type and version, device identifiers, operating system, pages viewed, referring URL, and timestamps.
• Cookies & similar technologies. Session cookies for authentication and abuse prevention, and a small number of first-party cookies for fraud and bot detection. We do not use third-party advertising cookies.

2. How We Use Your Information

We use information to:

• Operate, secure, and improve the Service;
• Verify identity and age, prevent fraud, prevent child-sexual-abuse material (CSAM), and enforce our Terms of Service;
• Process Token purchases, creator payouts, refunds, and chargeback disputes;
• Send transactional emails (account, billing, security) and, with your consent, marketing emails you can unsubscribe from at any time;
• Comply with legal obligations including 18 U.S.C. § 2257, tax reporting, sanctions screening, and lawful requests from authorities.

3. How We Share Information

We do not sell your personal information. We share it only as necessary to operate the Service:

• Identity verification. Our third-party identity verification provider (currently Veriff), or a successor we disclose here.
• Payments and payouts. Third-party cryptocurrency or payment providers we engage to process fan token purchases (fiat → USDC) and creator payouts (USDC transfers to creator-designated wallets), which may include Ramp Network.
• Transactional email. Resend (account, billing, and security email delivery).
• Error reporting. Sentry (error and performance monitoring).
• Hosting & infrastructure. Hetzner Online GmbH (servers), Cloudflare, Inc. (network, video streaming, and storage), and other standard cloud subprocessors.
• Legal compliance. Government authorities, courts, or law-enforcement officers when we are legally required to do so, or when we believe in good faith that disclosure is necessary to protect the safety of our users or the public, including reports to NCMEC for suspected CSAM.
• Business transfers. In connection with a merger, acquisition, or sale of all or substantially all of our assets, subject to a confidentiality obligation and notice to you.

4. Data Retention

We retain account, content, verification, and transaction records as long as your account is active and thereafter as required by applicable law (including the record-keeping requirements of 18 U.S.C. § 2257) and as reasonably necessary for tax, accounting, fraud-prevention, and dispute-resolution purposes. Retention periods vary by data type; where the law does not specify, we retain data for the minimum period reasonably necessary for the purposes described in this policy.

5. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Submit requests to privacy@fansxo.app. We will verify your identity before responding.

California residents (CCPA/CPRA): you have the right to know what we collect, the right to delete, the right to correct, and the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share your personal information for cross-context behavioral advertising.

EU/EEA & UK residents (GDPR/UK GDPR): our legal bases for processing are (a) performance of a contract, (b) our legitimate interests in operating and securing the Service, (c) your consent where required, and (d) compliance with legal obligations.

6. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted database storage, password hashing, role-based access controls, and logging of administrative actions. No system is perfectly secure; please use a strong unique password and notify us immediately of any suspected compromise.

7. No Children

The Service is restricted to users 18 and older (or the age of majority in your jurisdiction, if higher). We do not knowingly collect, use, or sell personal information of anyone under 18. If we learn that an account belongs to a person under 18, we will terminate it immediately and take appropriate steps to delete or restrict the associated data, subject to our ability to retain limited information as required by applicable law, to investigate or prevent abuse, to cooperate with NCMEC and law enforcement, or to defend against legal claims.

8. International Transfers

FansXO is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your country. Where required, we rely on Standard Contractual Clauses or other valid transfer mechanisms.

9. Changes

We may update this Privacy Policy from time to time. Material changes will be announced on the Service or by email at least seven (7) days before they take effect.

10. Contact