Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data.

1. Data we collect

• Account info (email, password hash, role, language)
• Profile (display name, bio, photos, expectations, location)
• Age verification result via Yoti (we never store your ID document)
• Payment metadata (provider, last 4 digits, never your full card)
• Communication metadata for moderation and safety

2. Legal bases (GDPR)

Contract performance, your consent, and our legitimate interest in operating a safe platform.

3. Your rights

Access, rectification, erasure, portability, restriction, objection, and withdrawing consent. Email privacy@bestsugardaddy.top.

4. Retention

Active accounts: until deletion. Deleted accounts: 30-day soft-delete then full purge.

5. Data processors

Supabase (EU), Resend (EU), Sentry (EU), Segpay (US), Yoti (UK), Cloudflare (global). DPAs signed with each.

6. Contact

Privacy queries: privacy@bestsugardaddy.top.