velvet
Draft for counsel review. Bracketed items are placeholders.

Privacy Policy

Effective 2026-10-18

This policy explains what VexSolutions LLC collects when you use VelvetSocial, why, and the choices you have. We designed the site to hold as little about you as possible.

What we collect

Account data: your email address, chosen username, sign-in methods (passkeys, linked social accounts), and security settings.

Age confirmation: whether your check passed, the method used (a verification partner's check or your own declaration), and when it expires. For a partner check we never receive or store your identity document or selfie, and we ask the partner to delete its copy once we have the result. To decide which method applies we resolve your IP address to a US state at the time; we do not keep the location.

Creator and participant records: for creators, and for anyone who accepts a tag to appear in a creator's content, we keep the records 18 U.S.C. 2257 requires: legal name, date of birth, the identity document images our verification partner captured, and the written consent you give when you accept a tag. These live in a separate, access-logged store that only authorised staff can open, each opening is recorded, and they are retained for as long as the law requires, which can be after you close your account.

Activity: communities you join, posts, comments, votes, subscriptions, purchases, and tips.

Payment data: our payment processor, CCBill, handles card details. We store only a token, the card brand and last four digits, and transaction records.

Technical data: IP address, browser, and device information in logs; a random device identifier cookie so we can tell you about sign-ins from a new device and keep suspended accounts from returning; and the cookies needed to keep you signed in.

Usage statistics: Google Analytics records which pages are visited, roughly where from, and on what kind of device, so we can see how the site is used. We send it page addresses without search terms, email addresses, or invitation codes, and we have turned off its advertising and Google signals features. Google explains how it uses this data at policies.google.com/technologies/partner-sites.

How we use it

To run the service: sign you in, show you content you're entitled to, pay creators, and prevent fraud. To meet legal and card-network obligations: age verification, record keeping, complaint handling, and reporting of illegal content to authorities where required. To communicate with you about your account. We do not sell personal data and we do not show third-party advertising inside paid content.

Who we share it with

Service providers that act on our instructions: our age and identity verification partner, our payment processor, our hosting and email providers, content-safety tooling, and Google Analytics for usage statistics. Law enforcement and regulators when legally required. Nobody else.

Creators see your username and your public activity on their pages. They never see your email or payment details.

What's visible without an account

Your profile is private by default. Only signed-in members can see it, and it is hidden from search engines.

If you turn on Public profile in your settings (creators can also choose this when they set up), anyone can see your display name, username, profile photo, cover and bio, including people without an account. Search engines such as Google may list your profile page. Your posts stay blurred for anyone who isn't signed in and entitled to see them. You can turn Public profile off at any time. Your page stops being shown to visitors straight away, and search engines drop it the next time they check, which can take days or weeks. We can't remove copies that search engines or other sites have already made.

Public communities show their name, description, banner and icon to visitors and can appear in search engines. Posts in them stay blurred for visitors. Invite-only communities, post pages and private profiles are never offered to search engines.

Discretion

Emails from us use a neutral sender name. Card charges are billed by our payment processor, CCBill, and appear on your statement as VELVETSOCIAL.

Retention and deletion

Account data is kept while your account is open. When you delete your account we remove personal data within 30 days, except records we must keep by law, such as transaction records and content records required by 18 U.S.C. 2257.

Your rights

Depending on where you live you may have rights to access, correct, delete, or port your data, and to opt out of certain processing. Contact legal@velvetsocial.com to exercise them. We will verify the request came from you before acting.

Cookies

We use strictly necessary cookies for sign-in and security, and Google Analytics cookies to count visits and see how the site is used. We do not use advertising or cross-site tracking cookies. You can block analytics cookies in your browser or with Google's opt-out add-on without affecting the site.

Contact

VexSolutions LLC, VexSolutions #1639, 3333 Preston Road STE 300, Frisco, TX 75034, United States. legal@velvetsocial.com.