Privacy Policy

How we handle your data

Privacy Policy

Last updated: August 26, 2025

1. Introduction

Welcome to Fantoom, a content monetization platform that helps creators sell access to their digital content. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, whether as a content creator or customer.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • First and last name
  • Username (optional)
  • Profile picture (if provided)

2.2 Creator Information

For creators setting up payouts via Stripe Connect:

  • Banking information for payouts
  • Tax identification information
  • Identity verification documents
  • Business information (if applicable)

2.3 Content Data

  • Digital content files (images, videos)
  • Content titles and descriptions
  • Pricing information
  • Content metadata

2.4 Transaction Information

  • Purchase history and amounts
  • Payment method information (processed by Stripe)
  • Transaction timestamps
  • Earnings and payout records

2.5 Usage Data

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent
  • Interaction patterns with content

3. How We Use Your Information

  • Platform Operation: To provide content monetization services
  • Payment Processing: To facilitate transactions between creators and customers
  • Content Delivery: To securely store and deliver purchased content
  • Account Management: To maintain your account and provide support
  • Analytics: To improve platform performance and user experience
  • Communication: To send important updates about your account or transactions
  • Compliance: To meet legal and regulatory requirements
  • Security: To protect against fraud and unauthorized access

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers for:

  • Payment processing and creator payouts
  • Authentication and user management
  • Secure content storage and delivery
  • Platform hosting and infrastructure

4.2 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal obligations
  • Protect our rights and property
  • Prevent fraud or abuse
  • Ensure user safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction, subject to applicable privacy laws.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit and at rest
  • Secure cloud storage with private access
  • Time-limited access tokens with expiration
  • Regular security audits and updates
  • Limited access to personal data by employees
  • Secure API communications

6. Content Access and Sharing

Content Protection: All creator content is stored privately and never publicly accessible. Customers receive time-limited access (5 minutes) through secure, signed URLs after purchase.

Preview Content: We generate blurred previews of images and thumbnails for videos to protect creator content while allowing customers to preview before purchase.

7. Your Rights and Choices

7.1 Account Control

  • Update your profile information at any time
  • Delete your content and posts
  • Deactivate or delete your account
  • Download your data upon request

7.2 Data Rights (GDPR/CCPA)

  • Right to access your personal data
  • Right to correct inaccurate information
  • Right to delete your data (subject to legal requirements)
  • Right to data portability
  • Right to object to certain processing

8. Data Retention

  • Active Accounts: Data retained while your account is active
  • Deleted Accounts: Most data deleted within 30 days
  • Transaction Records: Retained for 7 years for tax and legal compliance
  • Content: Deleted when you remove posts or delete your account
  • Backup Data: May persist in backups for up to 90 days

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure adequate protection through standard contractual clauses and other legal mechanisms when transferring data internationally.

10. Children's Privacy

Fantoom is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: contact@fantoom.app
Subject: Privacy Policy Inquiry