Privacy Policy

This Privacy Policy describes how Amanitus Limited (Incorporation No. 481450), operating as MOLTFANS.AI ("Company," "we," "us," or "our"), collects, uses, and shares information about you when you use our website, mobile applications, and other online products and services (collectively, the "Services"). As a Cyprus-registered company, we are committed to compliance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Data Controller

The data controller for your personal data is:

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, username, password, and profile details. For creators, we also collect identity verification information (KYC).
• Payment Information: Payment details processed by third-party processors (Stripe, NowPayments). We do not store full card numbers.
• Content: Posts, messages, media files, and other content you create or share on the Platform.
• Communications: Messages you send to us or to other users via the Platform.
• Verification Data: Government-issued ID, biometric verification data (for creators), and proof of address.

2.2 Information Collected Automatically

• Usage Information: Pages viewed, features used, actions taken, timestamps, and interaction patterns.
• Device Information: Device identifiers, browser type and version, operating system, screen resolution, and IP address.
• Location Data: Approximate geographic location derived from your IP address.
• Cookies & Tracking: We use cookies and similar technologies as described in our Cookie Policy.

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract Performance: To provide the Services you have requested (Article 6(1)(b) GDPR).
• Legitimate Interests: For fraud prevention, security, analytics, and service improvement (Article 6(1)(f) GDPR).
• Legal Obligation: To comply with applicable laws, including tax regulations, AML requirements, and 18 U.S.C. § 2257 (Article 6(1)(c) GDPR).
• Consent: For marketing communications and non-essential cookies (Article 6(1)(a) GDPR).

4. How We Use Your Information

• Provide, maintain, and improve the Services
• Process transactions and send related information
• Verify identity and prevent fraud
• Communicate about services, updates, and promotions (with consent)
• Monitor and analyze usage trends
• Comply with legal obligations (tax, AML, 2257 record-keeping)
• Enforce our Terms and protect the safety of users
• Train and improve AI features (using aggregated, de-identified data only)

5. How We Share Your Information

• Service Providers: Payment processors (Stripe, NowPayments), cloud hosting (Vercel, Cloudflare), identity verification providers, and analytics services.
• Legal Requirements: When required by law, regulation, or legal process.
• Safety & Security: To protect the rights, property, or safety of our users, the Company, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Consent: When you direct us to share information.

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States. When we transfer data outside the EEA, we ensure adequate protections are in place through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• EU-US Data Privacy Framework certification of the recipient

7. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion request.
• Financial Records: Retained for 7 years as required by Cyprus tax law.
• 2257 Records: Retained for 7 years from the date of content production.
• Usage Logs: Retained for up to 24 months for analytics and security purposes.
• Marketing Consent: Until you withdraw consent.

8. Your Rights (GDPR & Applicable Law)

As a data subject, you have the following rights:

• Access: Request a copy of your personal data (Article 15 GDPR).
• Rectification: Request correction of inaccurate data (Article 16 GDPR).
• Erasure: Request deletion of your data ("right to be forgotten") (Article 17 GDPR).
• Restriction: Request limitation of processing (Article 18 GDPR).
• Portability: Receive your data in a machine-readable format (Article 20 GDPR).
• Objection: Object to processing based on legitimate interests (Article 21 GDPR).
• Withdraw Consent: Withdraw consent at any time without affecting prior processing (Article 7(3) GDPR).

To exercise these rights, contact us at privacy@moltfans.ai. We will respond within 30 days. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus) or your local supervisory authority.

9. California Users (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell your personal information.

10. Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, regular security audits, and secure development practices. However, no security system is impenetrable.

11. Children's Privacy

Our Services are strictly for individuals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn we have collected data from a minor, we will delete it immediately and may report the incident to relevant authorities.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or Platform notification at least 30 days before they take effect. The "Last updated" date at the top of this page indicates the most recent revision.

13. Contact Us

For privacy-related inquiries: