Privacy Policy
Last updated: 14 April 2026
1. Introduction and definitions
Flirque (“we”, “us”, “our”) provides AI-powered direct message management for adult content creators. This policy explains how we handle personal data when you:
- Visit our website at flirque.com
- Apply to use our service
- Use Flirque as a creator
- Interact with a creator whose messages are managed by Flirque (as a fan)
Key terms used throughout this policy:
- Creator — a content creator who uses Flirque to manage their direct messages.
- Fan — an individual who sends messages to a creator on a platform where Flirque operates.
- Platform — a third-party service where creators and fans interact (e.g. OnlyFans, Fansly).
- Service — the Flirque AI messaging system, creator dashboard, and related tools.
2. Data we collect
From creators
When you apply and onboard:
- Full name, email address, and account credentials (passwords are hashed using bcrypt — we never store or have access to plaintext passwords)
- Platform usernames, account identifiers, and API access credentials (stored encrypted using AES-256)
- Voice recordings and video samples used to capture your communication style
- Persona details: personality traits, interests, conversation boundaries, content preferences, and keywords that define your brand
- Content catalogue metadata (descriptions, categories, pricing) — we do not store your actual media files
When you use the service:
- Dashboard activity (logins, settings changes, review actions)
- Billing and payment information (processed by our payment provider — we do not store full card numbers)
From fans
Fans do not create accounts with Flirque. We process fan data on behalf of the creator through platform integrations:
- Message content sent to and received from the creator's account
- Display name and platform user identifier
- Profile information shared during conversation (interests, location, occupation, relationship status, and other details fans voluntarily disclose)
- Engagement data: message frequency, response patterns, tipping and purchase history as reported by the platform
- A structured profile built over time from conversation context, used to personalise future responses and maintain continuity across conversations
From website visitors
- Server logs (IP address, browser type, referring page, pages visited, timestamps)
- Application form submissions (name, email, platform, and any information you provide)
- Cookies necessary for authentication and session management
Automatically generated data
Our AI systems generate derived data during normal operation:
- Fan engagement scores and tier classifications (used to determine conversation depth and response priority)
- Conversation summaries and extracted facts stored in a structured knowledge graph
- Quality and safety flags on individual messages
- Revenue and performance analytics aggregated at the creator level
3. How we use your data
| Purpose | Data used | Legal basis |
|---|---|---|
| Operating the AI messaging service | Creator persona, fan messages, conversation history, fan profiles | Contract (creators); Legitimate interest (fans) |
| Generating responses in the creator's voice | Voice/video samples, persona config, conversation context | Contract performance |
| Building and maintaining fan profiles | Fan messages, disclosed personal details, engagement signals | Legitimate interest |
| Revenue analytics and reporting | Transaction data, engagement metrics | Contract performance |
| Safety monitoring and content moderation | Message content, AI outputs, safety flags | Legitimate interest |
| Improving AI quality | Anonymised conversation patterns, quality scores | Legitimate interest |
| Processing applications | Form submissions, contact details | Consent |
| Preventing fraud and abuse | Login activity, usage patterns, platform signals | Legitimate interest |
We do not:
- Sell personal data to third parties
- Use fan conversation data to train general-purpose AI models
- Share fan data between different creators
- Use personal data for advertising or ad targeting
4. AI and automated processing
How it works
Flirque uses large language models (LLMs) hosted by third-party AI providers to generate messages on behalf of creators. When a fan sends a message, the following happens:
- The fan's message and relevant conversation history are sent to an AI inference provider
- The AI generates a response based on the creator's persona configuration, conversation context, and the fan's profile
- The response passes through quality and safety checks before being sent
- New information from the conversation is extracted and stored in the fan's profile for future context
Automated decisions
The AI system makes several automated decisions that affect fan interactions:
- Engagement tier classification — fans are categorised based on their engagement level, which determines conversation depth and response priority
- Response timing — the system varies response delays to simulate natural conversation patterns
- Content recommendations — the AI may suggest or send pay-per-view content based on conversation context and engagement signals
- Safety interventions — messages are automatically flagged or withheld if they trigger safety or compliance rules
Creators can review, override, or disable any automated decision through the dashboard. Fans who wish to understand or contest automated decisions that affect them should contact the creator directly or email us.
Third-party AI providers
Message content is processed by third-party AI inference providers to generate responses. These providers process data solely for the purpose of generating responses and do not retain or train on conversation data beyond what is necessary to fulfil the request. All providers are bound by data processing agreements and may be located outside your country of residence (see Section 6).
5. Data sharing
We share personal data only in these circumstances:
AI inference providers — Fan messages and conversation context are sent to AI providers to generate responses. These providers process data on our behalf and do not use it for their own purposes.
Platform integrations — We interact with OnlyFans, Fansly, and similar platforms via their APIs to send and receive messages, access transaction data, and manage content on the creator's behalf. Data shared with platforms is governed by their own privacy policies.
Infrastructure providers — Hosting, database, caching, and email delivery services that store and transmit data on our behalf. All providers are contractually required to protect data confidentiality.
Operational monitoring — We use internal alerting systems for safety escalations and operational monitoring. These alerts may include message metadata to flag issues requiring human review, but never full message content.
Legal requirements — We may disclose data if required by law, court order, regulatory request, or to protect the rights, safety, or property of Flirque, our creators, or others.
Business transfers — In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected users before their data becomes subject to a different privacy policy.
Fan data is strictly isolated per creator. We never share fan data between different creators.
6. International data transfers
Flirque's infrastructure is hosted in data centres that may be located in different jurisdictions from you or your fans. AI inference providers may process data in the United States or other countries.
When data is transferred internationally, we ensure appropriate safeguards are in place, including:
- Data processing agreements with all providers
- Standard contractual clauses where required
- Encryption of data in transit and at rest
7. Data security
We implement the following security measures:
- Encryption in transit — all connections use TLS
- Encryption at rest — sensitive credentials (platform API keys, access tokens) are encrypted using AES-256 before storage
- Password hashing — creator passwords are hashed using bcrypt; we never store or have access to plaintext passwords
- Access controls — production systems are restricted to authorised personnel with key-based authentication
- Network security — services are isolated behind reverse proxies with SSL termination
- Monitoring — automated alerts for unusual activity, safety violations, and system failures
- Code review — security reviews of code changes, particularly those handling credentials or personal data
No system is completely secure. If you believe your account has been compromised, contact us immediately at hello@flirque.com.
8. Data retention
| Data type | Retention period |
|---|---|
| Creator account data | Duration of account + 90 days after deletion |
| Creator voice/video samples | Duration of account; deleted within 30 days of closure |
| Fan conversation data | Duration of the creator's active service period |
| Fan profiles and knowledge graphs | Duration of creator's service; purged within 90 days of creator account closure |
| Application form submissions | 12 months (unsuccessful); converted to account data (successful) |
| Server and access logs | 12 months |
| Aggregated analytics (non-personal) | Retained indefinitely |
When data is deleted, it is removed from active systems. Backups containing deleted data are overwritten within their normal rotation cycle (up to 30 days).
9. Your rights
For creators
As a registered creator, you may:
- Access — request a copy of all personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your account and associated data (subject to legal retention obligations)
- Portability — request your data in a structured, machine-readable format
- Restriction — request that we limit processing while a dispute is resolved
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw consent for optional processing at any time (this does not affect processing that occurred before withdrawal)
For fans
Fans interact with Flirque indirectly through the creator's platform account. If you are a fan and wish to:
- Know what data is held about you — contact the creator directly, or email us and we will work with the relevant creator to respond
- Request deletion — email us with the creator's name and your platform username; we will delete your profile data and conversation history from our systems
- Object to automated profiling — email us and we will ensure your conversations with that creator are no longer processed by our AI system
To exercise any right, email hello@flirque.com. We will respond within 30 days. We may need to verify your identity before processing your request. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
10. Children's privacy
Flirque is an adult service. We operate exclusively on adult content platforms that require users to be at least 18 years old. We do not knowingly collect data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it immediately and suspend the relevant account pending investigation.
11. Cookies
| Type | Purpose | Duration |
|---|---|---|
| Session | Authentication and login state | Browser session |
| Preferences | Dashboard display settings | 1 year |
| Security | CSRF protection | Browser session |
We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking. You can manage cookies through your browser settings. Disabling session cookies will prevent you from logging in to the dashboard.
12. Data breach notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify affected creators by email within 72 hours of becoming aware of the breach
- Notify relevant data protection authorities as required by applicable law
- Provide details of what data was affected, what we are doing to address it, and what steps you can take to protect yourself
13. Changes to this policy
We may update this policy to reflect changes in our practices, legal requirements, or service features. When we make material changes:
- We will update the “Last updated” date at the top
- We will notify registered creators by email at least 14 days before changes take effect
- We will post a summary of changes on this page
Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
14. Contact
For privacy-related questions, data requests, or complaints:
We aim to respond to all privacy requests within 30 days.