Privacy Policy

VELVET ELITE LTD is the data controller responsible for your personal data. Our Data Protection contact can be reached at velvetelite@protonmail.com.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Account data: name, display handle, email address and hashed password.

Financial-tracking data: income amounts, dates, categories, source labels, notes, shifts, breaks, targets and reserve allocations. These records are entered manually by you or staff you explicitly authorise. We do not import banking or creator-platform income.

Agency data: workspace membership, invitations, model assignments, permissions, consent and activity records used to enforce and review access.

Technical data: IP address, browser type, device identifiers, pages visited and timestamps, collected via server logs and cookies (see our Cookie Policy).

Current access is free and requires no card or payment details. Historical subscription identifiers, status and billing dates may exist if a paid purchase was previously made. We do not store full card numbers.

We recognise that many of our users work in the adult entertainment industry. The fact that you use VE Vault, and the platform labels you choose, could indirectly reveal information about your occupation. We treat all account data as sensitive, apply strict access controls, and will never sell, share for advertising, or disclose your use of the Service to third parties except as set out in this policy or where required by law.

To provide the Service and manage your account — performance of a contract (Art. 6(1)(b)).

To process subscription payments and keep accounting records — contract and legal obligation (Art. 6(1)(c)).

To secure the Service, prevent fraud and abuse, and analyse aggregate usage — legitimate interests (Art. 6(1)(f)), balanced against your rights.

To send product updates or tips — consent (Art. 6(1)(a)), which you can withdraw at any time in Settings → Notifications.

We use hosting and database services to operate VE Vault and Resend to deliver account and service emails. No new subscription checkout is available during the current free period. Your income entries are not sent to a payment processor to record an external income amount.

An agency can view or manage your activity only after you accept its specified permissions. Staff access is limited by assigned models, role and the permissions you granted. You can revoke that agency access in the app; revocation keeps your own income records.

A voluntary VelvetElite link proves account identity only. It does not share income, balances, payouts or agency permissions, and it does not share passwords.

We do not sell your personal data. We may disclose data where required by law or necessary to protect legal rights. Where personal data is transferred internationally, applicable data-protection safeguards are required.

We keep your account and tracking data for as long as your account is active. When you confirm account deletion, we remove your account, tracking records and support conversations immediately. Download your data beforehand. Account deletion does not automatically erase separate payment-provider, billing or security records. Contact us to request review of those records; some may need to be retained to meet legal obligations or resolve disputes.

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You can exercise most of these directly in Settings, or by emailing us. We will respond within one month.

You have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to address your concerns first.

We use HTTPS for data in transit, hashed passwords and access controls to protect accounts. Keep your credentials private and report suspected unauthorised access promptly.

If a personal-data breach occurs, we assess it and notify the regulator and affected individuals where required by applicable data-protection law.

The Service is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18 and will delete such data if we become aware of it.

We will post any changes to this policy here and, where material, notify you by email. This version was last updated on 3 October 2026.