Privacy Policy

01

FanHubb ("we," "us," or "our") operates joinfanhubb.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our platform. By using FanHubb, you agree to the collection and use of information in accordance with this policy.

02

Information You Provide

• Account information: name, email address, username, password, profile photo, bio
• Payment information: billing details processed securely by Stripe. We do not store your full card number.
• Content: drops, messages, broadcasts, co-signs, and any content you post on the platform
• Communications: messages you send to creators or our support team
• Tax information: W-9 or equivalent forms required for creators earning over $600/year

Information Collected Automatically

• Usage data: pages visited, features used, clicks, time spent on platform
• Device information: IP address, browser type, operating system, device identifiers
• Cookies and tracking: session cookies, preference cookies, analytics data
• Help Center: how often each answer is opened, so the most popular answers show first. It isn’t linked to your account; your IP address is kept only as a scrambled code for up to 2 days so each answer is counted once a day
• Link and QR code counts: the links and QR codes creators share carry a short tag, so a creator can see how many times their links were opened or their codes scanned, and how many follows and payments came from them. Each open is counted once a day using a scrambled code made from your IP address and browser (not your IP address itself), and no cookie is set. While you browse that creator’s page, the tag stays with the visit so a follow or payment can be counted toward it. Creators see only totals, never who opened a link
• Transaction data: tip amounts, subscription history, payout records
• Message activity: when you last opened each paid-message conversation, used to show the other person a “Seen” read receipt
• Earnings records: a record of each payment, refund and fee on a creator account, used for earnings statements and income verification letters. A creator may add their legal name and mailing address for these documents; they are never shown on the creator’s profile. When Stripe has verified a creator’s identity, Stripe shares their verified legal name with FanHubb. We show it to the creator under Statement details and fill it in as the name on these documents; the creator can change it. Anyone holding a document’s verification code can view that document’s holder name, period and figures on FanHubb’s verification page, so creators should share their documents and codes only with people they choose. Each time a document is checked on the verification page, we record the date and time of the check (not who checked it, their IP address or their location) and show that history to the document’s holder
• Milestones: milestones you reach (for example 100 followers or becoming a SuperFan of a creator). A creator’s follower, tip and years-on-FanHubb milestones appear on their public profile; amounts earned never do
• Spotlight: when you hide a slide in the Spotlight on your Home, we remember it so it stays hidden for the time shown. When you’re signed in and open a creator’s link (a shared link or QR code, or from another site), we remember that for 30 days so that creator can appear in your Spotlight; it isn’t shared with the creator except as part of their total number of fans. We count how many times FanHubb’s own Spotlight slides are seen, pressed and hidden in total; those counts aren’t linked to you
• Payout country: the country you choose when you set up payouts with Stripe, used to create your Stripe account there and pay you in your local currency
• Booking joining links: when you book a creator’s time, your joining link opens through FanHubb. Each time it’s opened we record the date and time, your IP address and a short description of your device and browser. The creator you booked sees the time and the device description (not your IP address). We use this to settle problems with a booking and as evidence if a payment is disputed. We don’t see or record anything that happens on the call itself, which runs on the creator’s chosen service (Zoom, Google Meet, FaceTime or other).

03

• To create and manage your account
• To process payments, tips, and payouts
• To prevent fraud and protect creators: we record the IP address and a device identifier (the fh_dev cookie) for sign-ins and payments, receive limited card details from Stripe (never the full card number) and the result of your bank's card check, and keep a record of your access to what you buy. We use this information to detect and prevent fraud and misuse, and may stop cards, email addresses and devices from paying on FanHubb
• To respond to refund requests, payment disputes and chargebacks: FanHubb may share relevant records of the payment, your account and your purchase with the card issuer, through Stripe. "What's this charge?" shows only the creator, item, date and amount of a matching payment, never who paid
• To send transactional emails — verification, password reset, tip notifications, payout confirmations
• To enforce our Terms of Service and Community Guidelines. Photos and videos you upload are checked for explicit content by software that runs in your own browser (the files aren’t sent to anyone else for this). Uploads it flags, uploads that couldn’t be checked, and a sample of others are reviewed by FanHubb staff. For videos, three still frames are kept with the video for that review and deleted with it. Files Fan Pro members attach to paid messages are visible only to them, the creator and FanHubb staff, and are deleted 90 days after the creator replies or the message closes.
• To prevent fraud, abuse, and unauthorized access
• To improve our platform and develop new features
• To comply with legal obligations including tax reporting
• To communicate platform updates and important notices

04

We share data with the following trusted third parties to operate our platform:

• Stripe: payment processing, identity verification, payouts. Subject to Stripe's Privacy Policy.
• Google reCAPTCHA: fraud and bot prevention on signup forms. Subject to Google's Privacy Policy.
• Cloudflare R2: storage for photos, videos and files people upload or buy.
• Our email provider: sends account emails, receipts and alerts.
• Bluehost: web hosting and server infrastructure. Data is stored on US-based servers.
• Browser push services (for example Apple, Google and Mozilla): if you turn on phone notifications, the notification is sent through your browser’s push service. Its contents are encrypted so only your device can read them.
• Stripe Tax: where sales tax or VAT applies, Stripe uses your billing location to work out the tax on a purchase.

05

We retain your personal information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or compliance purposes — typically 7 years for financial records.

We keep encrypted backups of the database so FanHubb can recover from a failure. They’re kept for up to 12 months, then deleted. Data deleted from your account leaves the backups as they expire, and is never restored except to recover the service.

What we may keep after you delete something

When you delete something or close your account, it comes off FanHubb. Some information has to stay, and only for as long as it’s needed:

• Payments and taxes. Records of payments, refunds, payouts, disputes and taxes, for as long as the law requires (usually 7 years). After an account is closed they’re kept under “Deleted user”, without the name, email or photo.
• Safety. Reports, moderation decisions and account restrictions, and the details needed to keep someone who was removed from FanHubb from coming back (such as an email address, a card, a device or an IP address).
• Open matters. Anything involved in an open report, dispute, chargeback, investigation or legal request, until it’s resolved; and anything we must keep or report by law.
• What other people have. Messages you sent stay with the person you sent them to. People who bought something keep access to it for the time they were told when they bought it.
• Backups. Up to 12 months, as above.
• Totals. Numbers that don’t identify anyone, like how many sales a day had.

06

Sometimes our Trust & Safety team needs to confirm it’s really you: for example when you’re locked out of your account, someone else took it over, a payout is on hold, you make a data request, you appeal a decision, someone is pretending to be you, or a report says you may be under 18. This applies to fans and creators.

• What we ask for: a photo of you, taken now, and a photo of your ID card, passport or driver’s license. You may cover the ID number. We only ask by email, with a link that works for 5 days and only for you, and every check has its own case number (for example IDC-100427). We will never ask for your password.
• How we check it: a member of our Trust & Safety team compares the photos by eye: that the face matches the ID, the name matches your account, you’re 18 or older, the ID isn’t expired and it looks real. No face recognition or outside identity service is used, and your photos aren’t sent to anyone outside FanHubb.
• Face found: when you take the photo of yourself with your camera, the page checks that a face is in the frame so it can take the photo for you. This runs only on your device; nothing from your camera leaves your device until you choose to send the photo.
• Who sees it: only FanHubb staff who have been given access to review ID checks. Each time a photo is viewed it’s logged. The photos are stored privately and can’t be opened from the website.
• How long we keep it: everything (the photos, the ID details and the check) is deleted within 30 days of the decision. If you don’t send your photos before the link runs out, the check is deleted. Only the decision (approved or declined, the date and the case number) stays on your account’s history.

You can choose not to send an ID check. If you don’t, we may not be able to give you back access, release a held payout or finish your request. Questions? Contact Support.

07

California Residents (CCPA)

California residents have the right to know what personal information we collect, request deletion, opt out of sale or sharing (we do not sell or share data), and non-discrimination for exercising these rights. You can record an opt-out any time in Your privacy choices, and we treat a Global Privacy Control signal from your browser as one.

European Residents (GDPR)

EEA residents have rights to access, correct, delete, restrict processing of, and port your personal data. To exercise these rights, contact Support (choose “My account”) or email legal@joinfanhubb.com.

All Users

You may update your account information through your dashboard or request account deletion through our Support page.

08

We protect your information with encrypted connections (TLS), hashed passwords (bcrypt), secure sign-in sessions, optional two-step sign-in (required for staff, and for creators to use Cash Out Now or change payout details), an email whenever your account is used on a new device, limits on repeated sign-in attempts, and nightly encrypted backups. No method of transmission over the Internet is 100% secure.

09

We use cookies to maintain your login session and remember your preferences. For full details see our Cookie Policy.

10

FanHubb is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover we have collected information from a minor, we will delete it immediately.

11

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a prominent notice on our platform. Continued use of FanHubb after changes constitutes acceptance.

12

To see, correct or delete your data, contact Support and choose “My account”. We confirm it’s you by email and finish within 30 days. You can also email legal@joinfanhubb.com.