Privacy Policy
Last updated: June 13, 2026
This Privacy Policy explains how Tluxus ("Tluxus", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use the Tluxus platform (the "Platform"). It also describes your privacy rights, including under the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act as amended by the CPRA ("CCPA"). By using the Platform you consent to the practices described here.
1. Information We Collect
Information you provide
- Account data: name or display name, email address, password (hashed), and role (creator, chatter, admin).
- Creator & content data: content you upload, messages, pricing, and settings you configure.
- Age & identity verification: confirmation that you are 18+, and, where required for compliance, government-issued identification and 2257 records.
- Payment data: transactions are processed by third-party payment processors; we receive limited details such as transaction status and amount. We do not store full payment-card numbers.
- Communications: messages you send to support at [email protected].
Information collected automatically
- Device and usage data (IP address, browser type, pages viewed, timestamps);
- Cookies and similar technologies used for authentication, security, and preferences.
2. How We Use Your Information
- To provide, operate, secure, and improve the Platform;
- To process transactions and remit creator payouts;
- To verify age and identity and to comply with legal obligations (including 18 U.S.C. § 2257);
- To prevent fraud, abuse, and illegal content, and to enforce our Terms;
- To communicate with you about your account, support requests, and service updates.
3. Legal Bases for Processing (GDPR)
Where the GDPR applies, we process personal data on the following legal bases:
- Contract: to provide the Platform and fulfil our agreement with you;
- Legal obligation: to comply with applicable laws and record-keeping requirements;
- Legitimate interests: to secure the Platform, prevent fraud, and improve our services;
- Consent: for certain cookies and optional communications, which you may withdraw at any time.
4. How We Share Information
We do not sell your personal information. We may share it with:
- Service providers (hosting, analytics, payment processing) under contract and only as needed to provide the Platform;
- Other users as inherent in the service (e.g., a creator's authorized chatters can view assigned conversations);
- Legal & safety recipients when required by law, court order, or to protect rights, safety, and to report illegal content to authorities and NCMEC.
5. International Data Transfers
We may process and store information in countries other than your own, including the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Data Retention
We retain personal data for as long as your account is active and as needed to provide the Platform, comply with legal obligations (including 2257 record-keeping and financial records), resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymized.
7. Your Rights Under the GDPR
If you are in the EEA or UK, you have the right to:
- Access, correct, or delete your personal data;
- Restrict or object to certain processing;
- Data portability;
- Withdraw consent at any time (without affecting prior processing);
- Lodge a complaint with your local data-protection authority.
8. Your Rights Under the CCPA/CPRA
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose;
- Request deletion of your personal information;
- Correct inaccurate personal information;
- Opt out of the "sale" or "sharing" of personal information — note that we do not sell your personal information;
- Limit the use of sensitive personal information;
- Not be discriminated against for exercising these rights.
To exercise any GDPR or CCPA right, email [email protected]. We will verify your request and respond within the timeframes required by applicable law. You may use an authorized agent where permitted.
9. Cookies
We use strictly necessary cookies for authentication and security, and optional cookies for preferences and analytics. You can control cookies through your browser settings; disabling some cookies may affect Platform functionality.
10. Security
We use technical and organizational measures to protect personal data, including encryption of sensitive data at rest, hashed passwords, and role-based access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Platform is strictly for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it promptly. Report concerns to [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.
13. Contact Us
For privacy questions or to exercise your rights, contact our data protection contact at [email protected] or via our contact page.