Privacy Policy

Velvet Escape is an interactive romance entertainment platform. Because our Service involves private conversations, personal preferences, and AI-generated content, privacy is central to how we operate.

This Privacy Policy describes what information we collect, how we use it, how long we retain it, and how you can control, export, and delete it.

By using the Service, you consent to the data practices described here. This Policy should be read alongside our Terms of Service.

Account information: email address, password (stored as a one-way hash), age verification status, and account creation date.

Profile data: preferred name, display name, biography, and preferences you set during onboarding (relationship goals, romance styles, cultural preferences, intensity).

Conversations: messages you send and AI-generated responses, along with metadata such as timestamps, character IDs, and provider information.

Memories: structured data extracted from your conversations (such as your favorite drink, important dates, or boundaries), which characters use to personalize the experience.

Relationship state: trust, chemistry, affection, milestones, and other relationship progression data tied to your interactions with each character.

Story progress: choices you make in interactive stories, scene progress, and story event history.

Payment information: transaction records processed through our authorized payment provider. We do not store full card numbers.

Usage data: messages sent, features used, timestamps, device information, and service interactions for analytics and cost management.

Support and reports: support requests and content reports you submit.

To provide the Service: generate AI responses, maintain memory and relationships, and personalize your experience.

To operate the Service: authentication, billing, entitlement management, and usage tracking.

To improve the Service: aggregate analytics, cost monitoring, and product development.

To communicate with you: account notifications, support responses, and service updates.

To ensure safety: moderation, reporting, and compliance with legal obligations.

We do not sell your personal data to third parties.

Where the General Data Protection Regulation (GDPR) applies, we process your data based on:

• Contract: to provide the Service you requested.

• Consent: for optional data like memories and certain analytics.

• Legitimate interests: for security, fraud prevention, and service improvement.

• Legal obligation: to comply with applicable laws.

You have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of prior processing.

We retain your data while your account is active and for a reasonable period after deletion as required by law or for legitimate business purposes such as safety, fraud prevention, and dispute resolution.

Conversations and memories are retained until you delete them or your account.

Usage and analytics data may be retained in aggregated, de-identified form beyond account deletion.

Payment records are retained as required by tax and financial regulations.

You may request deletion of specific data at any time through the Service or by contacting us.

Access: you can view your conversations, memories, preferences, and account data through the Service.

Export: you can export your data at any time.

Correction: you can edit your profile, preferences, and memories at any time.

Deletion: you can delete individual messages, conversations, memories, characters, and your entire account.

Memory control: you can view, edit, delete, pin, or forget any memory through the Memory Control Center.

Withdrawal: you can disable proactive messages, control notification preferences, and change privacy settings.

Objection: where applicable, you may object to certain processing of your data.

Portability: you may receive a copy of your data in a structured, machine-readable format.

To exercise these rights, use the tools within the Service or contact us through the Support page.

We share data with authorized service providers who help us operate the Service:

• AI providers: to generate character responses, stories, and other content.

• Payment processors: to handle billing and subscriptions.

• Hosting and database providers: to store and serve your data.

These providers process data on our behalf under agreements that require confidentiality and data protection.

We may disclose data when required by law, court order, or to protect the rights, safety, or property of our users and the Service.

Velvet Escape uses row-level security (RLS) to isolate each user's data. One user cannot access another user's conversations, memories, relationships, or account data.

Access to user data is scoped to the authenticated user at the database level, not just the frontend.

We encrypt data in transit and at rest where supported by our infrastructure.

No method of transmission or storage is completely secure. We cannot guarantee absolute security but we take reasonable measures to protect your data.

Your data may be processed in countries other than your own. Where required by law, we implement safeguards such as standard contractual clauses to protect your data during international transfers.

By using the Service, you consent to these transfers where applicable.

Velvet Escape is an adults-only Service. We do not knowingly collect data from anyone under 18.

Age verification is required before access to interactive content. If we learn that a user is under 18, we will delete their account and data.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. Continued use after changes take effect constitutes acceptance of the revised Policy.

For privacy questions, data requests, or to exercise your rights, contact us through the Support page or at the contact information provided in the Service.