Privacy Policy

Last updated: September 30, 2026

Auri Sacra Fames LLC ("we", "us", "our") operates Aurifan (the "Service"), a fan management CRM for content creators, at aurifan.com and app.aurifan.com. This policy explains what personal data we collect, how we use it, who we share it with, and the choices you have.

Information We Collect

• Account information: your name, email address and password (stored only as a salted hash), plus the settings you choose in the app.
• Payment information: handled by Stripe. We receive your subscription status and a customer reference, never your full card number.
• Email notification data: when you connect an inbox, we read only notification emails sent by the platforms you enable (OnlyFans, Fansly, ManyVids, Clips4Sale, FansyMe and PayPal). From those emails we extract fan usernames, display names, amounts, dates and the type of purchase or interaction. Other emails in your inbox are ignored: we check the sender and skip anything that is not from an enabled platform without downloading its content.
• Data you add yourself: notes, custom requests, tasks, message templates, content clips, hashtags and files you import (for example by CSV or from Google Drive).
• Technical data: IP address, browser user agent and session information, used to keep you signed in, prevent abuse and secure the Service. Our servers keep short-lived operational logs.

How We Use Your Information

• To provide the Service: build your fan database, calculate lead scores, revenue and churn alerts, and show your dashboard
• To generate AI suggestions when you ask for them (for example message drafts or bio analysis)
• To process payments and manage your subscription
• To send account and service emails (sign-up, password reset, billing, important changes)
• To provide support, keep the Service secure and fix problems

We do not sell your data, we do not use it for advertising, and we do not use it to train AI models.

Google User Data

If you choose to connect Google services, Aurifan requests:

• Gmail (https://mail.google.com/, plus your email address): used only to sign in to your mailbox over IMAP and read notification emails from the creator platforms you enable, as described above. We do not send, delete or modify your emails.
• Google Drive (drive.file): gives access only to the files you pick in the Google Picker or create with Aurifan, used to attach them to your content library.

Aurifan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described in this policy.
• We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use it for advertising, and we do not sell it.
• No human reads it unless you give us permission (for example for a support request), it is needed for security or to comply with law, or it has been aggregated and anonymised for internal operations.
• We do not use Google user data to train generalised AI or machine-learning models.

Google access tokens are encrypted at rest (AES-256-GCM). You can disconnect Gmail or Drive at any time in Settings, and revoke access from your Google account permissions.

Service Providers We Share Data With

We share data only with providers that help us run the Service, and only what they need:

• Amazon Web Services (USA): hosting of our servers, database and backups.
• Cloudflare: network security, content delivery and bot protection (Turnstile on sign-up). Privacy policy
• Stripe: payment processing. Privacy policy
• Anthropic: AI features. When you request an AI draft or analysis, the relevant details (for example a fan's display name, platform and purchase history, or your bio text) are sent to Anthropic's API to generate the result. If you use your own API key, the request goes to Anthropic under your key. Anthropic does not use API data to train its models. Privacy policy
• Resend: delivery of account and service emails. Privacy policy
• Google: Gmail and Drive connections (see above), and web fonts on our pages.

We may also disclose information if required by law or to protect the rights and safety of our users and the Service.

Data Storage & Security

Your data is stored on servers in the United States. All traffic is encrypted in transit (TLS). Passwords are hashed, and email passwords, API keys and OAuth tokens are encrypted at rest. Each account's data is kept separate from other accounts. If you are outside the United States, your data is transferred to and processed in the United States.

Data Retention & Deletion

• We keep your data while your account exists. How far back your fan data is shown depends on your plan (6 months on Starter, 1 year on Basic, unlimited on Pro).
• When you delete your account in Settings, your account and all associated data (fans, transactions, notes, content, email and Drive connections) are deleted from our live database immediately, and any active subscription is cancelled.
• Copies in our encrypted backups are removed automatically as backups rotate, within 60 days.
• Stripe keeps billing records as required by law.

Your Rights

Wherever you live, you can ask us to:

• Access the personal data we hold about you, or receive a copy of it
• Correct inaccurate data
• Delete your account and data (also available directly in Settings)
• Restrict or object to certain processing
• Withdraw consent, for example by disconnecting Gmail or Drive

If you are in the European Economic Area, the UK or Switzerland, we process your data to perform our contract with you (providing the Service), based on our legitimate interests (security, fraud prevention and improving the Service), or with your consent (connecting Google services). You also have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email contact@aurisacrafames.com. We will respond within 30 days.

Data About Your Fans

The fan data in your account comes from your own platform notifications. You decide what to import and can delete individual records or your whole account at any time. We process this data only on your behalf, to provide the Service to you.

Cookies

We use only essential cookies for sign-in and session management. We do not use advertising or third-party tracking cookies. Cloudflare may set strictly necessary security cookies.

Children's Privacy

The Service is only for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

Changes to This Policy

We may update this policy from time to time. We will post the new version here with a new "Last updated" date and notify you of significant changes by email or in the Service.

Contact Us

For privacy questions or requests, contact us at:

Email: contact@aurisacrafames.com

Auri Sacra Fames LLC
Wyoming, USA

← Back to Aurifan