Privacy Policy

Last updated: May 10, 2026

This Privacy Policy explains how ISM Studio LLC (“we,” “us,” or “our”) collects, uses, shares, and protects information when you use Erotic Effect (the “Platform”).

1. Information We Collect

We collect the following categories of information:

• Account information. Email address, username, password (stored as a salted hash), date of birth, and country.
• Creator verification information. Government-issued photo ID, a selfie matched to the ID, tax forms (W-9 / W-8BEN), and payout banking information. This is collected and processed by our identity-verification vendor and our Payment Processor.
• Content. Photos, videos, audio, text, and metadata you upload, send, or receive.
• Payment information. Card details and billing data are collected and processed directly by CCBill, LLC. We receive only tokenized references and transaction status — we do not store full card numbers.
• Usage and device information. IP address, browser type, device identifiers, pages viewed, referrer, timestamps, and interaction events.
• Cookies and similar technologies. See “Cookies” below.
• Communications. Messages you send to support, and (where applicable to platform safety) messages exchanged on the Platform.

2. Age Verification and Face-Scan Data

Access to the Platform requires age verification. Our age-verification flow runs at abovetheage.com and uses an on-device face-analysis library (vladmandic/human) to estimate age from a single camera capture.

What happens locally: the camera frame is processed in your browser. The library produces a numeric age estimate; the raw image and any biometric template are not transmitted to our servers and are discarded when the page is closed.

What we store: the verification outcome (pass / fail), a timestamp, and a hashed device fingerprint used to issue a verification cookie. We do not store the captured image, do not retain a biometric template, and do not use face data for identification.

Creators undergo a separate, more rigorous identity-verification process operated by our verification vendor, including ID review and liveness check. That data is retained as required to comply with 18 U.S.C. § 2257 and related law (see “Retention”).

3. How We Use Information

• To create, operate, and secure your account;
• To process payments and pay creators;
• To verify age, identity, and eligibility;
• To enforce our Terms and detect fraud or abuse;
• To provide customer support and respond to your requests;
• To comply with legal obligations (including 2257 records, tax reporting, subpoenas);
• To analyze and improve the Platform;
• To send transactional and (where you opt in) marketing communications.

4. How We Share Information

• Payment Processor. CCBill, LLC, for payment processing, fraud detection, and dispute handling.
• Identity-verification vendor. For creator KYC, ID checks, and liveness verification.
• Hosting and infrastructure providers. Cloud providers, content-delivery networks, email senders, and analytics providers, under contractual confidentiality and data-protection obligations.
• Law enforcement. When legally required (subpoena, court order, or other lawful process), or when we believe in good faith that disclosure is necessary to prevent imminent harm.
• NCMEC. If we detect content that depicts or sexualizes a minor, we are required by law (18 U.S.C. § 2258A) to report to the National Center for Missing & Exploited Children (NCMEC). We will preserve evidence and cooperate with investigations.
• Successors. In a merger, acquisition, financing, or sale of assets, information may be transferred subject to confidentiality terms and this Policy.

We do not sell your personal information for money, and we do not use sensitive personal information for cross-context behavioral advertising.

5. Cookies and Tracking

We use cookies and similar technologies for essential functions (authentication, age-verification gate, fraud prevention) and for basic analytics. You can disable non-essential cookies through your browser or, where required by law, through an in-product preferences control. Disabling essential cookies may break login or age verification.

6. Data Retention

• Account data: retained while your account is active and for up to five (5) years after closure for fraud prevention, accounting, and dispute resolution;
• 2257 records (creator IDs, content custodian records): retained for the period required by 28 C.F.R. § 75.4 — at minimum seven (7) years from the date of last sale or transfer of the related content;
• Transaction records: retained for at least seven (7) years for tax and audit purposes;
• Server and access logs: retained for up to one (1) year;
• Age-verification face-scan data: not retained (see Section 2);
• NCMEC-reportable evidence: preserved as required by 18 U.S.C. § 2258A.

7. Your Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete information; restrict or object to certain processing; receive a portable copy of your information; and not be discriminated against for exercising these rights.

Residents of California (CCPA / CPRA), Virginia, Colorado, Connecticut, Utah, and other U.S. states with comprehensive privacy laws have rights under those laws. Residents of the EU/UK have rights under GDPR / UK GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, email support@eroticeffectstudios.com. We may need to verify your identity before responding. Some rights are limited where retention is required by law (e.g., 2257 records).

8. International Transfers

We are based in the United States. If you access the Platform from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses with our service providers.

9. Security

We implement administrative, technical, and physical safeguards to protect information, including encryption in transit and at rest, access controls, and audit logging. No system is perfectly secure; if you believe your account has been compromised, contact support@eroticeffectstudios.com immediately.

10. Children’s Privacy

The Platform is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If we learn that a minor has registered or that any content depicts a minor, we will:

1. Immediately delete the account and any related content;
2. Preserve evidence as required by law;
3. Report to NCMEC and cooperate with law enforcement; and
4. Investigate to identify other related accounts or content.

If you believe a minor is using the Platform or appears in content, report immediately to trust-and-safety@eroticeffectstudios.com.

11. Changes to This Policy

We may update this Policy. Material changes will be announced by email or in-app notice and take effect thirty (30) days after posting. The “Last updated” date at the top reflects the current version.

12. Contact

Privacy questions or requests: support@eroticeffectstudios.com.
Trust & Safety reports: trust-and-safety@eroticeffectstudios.com.