Privacy Policy

Last Updated: October 20, 2026

This Privacy Policy explains how XOXO collects, uses, stores, and discloses personal information when you visit xoxo.fan, create or use an account, communicate through the Services, make or receive payments, use Creator tools, contact support, or otherwise interact with XOXO.

In this Policy, “XOXO,” “we,” and “us” refer to the XOXO service. “You” means a person who visits or uses the Services. A “Creator” uses XOXO to publish or offer content or communicate with Fans. A “Fan” views Creator pages, communicates with Creators, or purchases content through the Services.

1. Information we collect

The information we collect depends on how you use XOXO. It may include:

Account and contact information

Information you provide when registering or managing an account, such as your email address, username, password credentials, account role, and account settings.

Profile information and content

Information you add to a profile, such as a display name, biography, profile image, social links, and other profile details. We also process messages, attachments, media, and other content you create, upload, send, receive, or store through the Services. Private messages are available to the participants in the conversation and may be accessed by authorized personnel when needed for support, safety, moderation, security, payment disputes, or legal compliance.

Wallet, payment, and transaction information

We maintain records of wallet funding, wallet balances, wallet use, premium-content unlocks, transaction amounts, currency, platform fees, payment status, refunds, disputes, chargebacks, reversals, and payment-provider references.

A third-party payment processor handles wallet funding and related payment transactions. The processor may collect payment-card or bank information directly. XOXO receives transaction information needed to operate the Services and maintain records, such as transaction status, amount, currency, payment method details or identifiers, and information needed to handle refunds, disputes, fraud, and accounting.

Creator verification and payout information

Creators who request payouts or complete verification may provide information such as legal name, date of birth, country, address, email address, payout account details, identity documents, and other information requested in the verification flow. Payout account details are stored with the Creator’s verification information. Uploaded identity documents are stored in private application storage and may be accessed by the Creator and authorized administrators through verification workflows. We also process verification status, payout requests, reserved balances, administrative review notes, audit history, payment dates, and payment references.

We use this information to review verification and payout requests, maintain accounting records, and record their outcomes.

Referral information

If you participate in the Creator referral program, we may process referral codes and links, referral attribution, referred-Creator account information, qualifying transactions, commission amounts, reversals, and payout records.

Support communications

If you contact us by email or through the support chat, we process the information and messages you submit and the information needed to respond. Our support chat is provided by tawk.to, which may process chat messages, visitor identifiers, and technical information. The chat may use cookies or similar technologies. See the tawk.to Privacy Policy and tawk.to cookie information.

Device, usage, and log information

When you access the Services, we and our service providers may automatically receive technical information such as IP address, browser and device information, session identifiers, access times, pages or features used, error information, and security logs. When your browser connects to a service provider to load or use a feature, that provider may receive technical request information. We use technical information to operate the Services, keep accounts secure, diagnose errors, prevent fraud, and understand service performance.

Cookies and similar technologies

XOXO and service providers use cookies, local storage, and similar technologies to maintain login sessions, support security, remember preferences, and operate features such as support chat. You can manage cookies through browser settings, although disabling certain technologies may affect site features.

2. How we use information

We use information to:

• Create and administer accounts, profiles, and user settings.
• Provide private messaging, content delivery, media storage, and Creator tools.
• Maintain Fan wallet balances and record wallet funding and use.
• Process and reconcile paid unlocks, platform fees, Creator earnings, refunds, disputes, reversals, and payouts.
• Verify Creators and review, approve, reject, or record manual payout requests.
• Attribute referrals and calculate, adjust, and audit referral commissions.
• Provide customer support and respond to reports or questions.
• Detect fraud, payment abuse, security incidents, policy violations, and unauthorized access.
• Moderate content and enforce our Terms and content rules.
• Maintain, troubleshoot, secure, and improve the Services.
• Send operational messages about accounts, purchases, payouts, security, policy changes, and service updates.
• Comply with legal obligations and protect the rights, safety, and property of users and XOXO.

We do not use private messages or paid Creator content as public marketing material without permission.

3. How information is disclosed

We may disclose information in the following circumstances:

Between Fans and Creators

Information is shared with the person or people you choose to interact with. For example, a Creator receives messages sent to them, and a Fan receives the content they unlock. Profile information and content marked public may be visible to visitors or other users.

Service providers

We use service providers to operate XOXO, including providers that support payment processing, customer support, hosting, storage, backups, email delivery, security, and other infrastructure. These providers may process information needed to provide their services, such as transaction records, support-chat data, or technical request information.

Legal, safety, and enforcement purposes

We may disclose information when we reasonably believe disclosure is necessary to comply with law or valid legal process, respond to a government request, investigate fraud or security incidents, enforce our Terms, protect users, or protect XOXO’s rights and safety.

Business changes

Information may be transferred as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law.

4. Sale and targeted advertising

XOXO does not sell personal information for money. We do not use private messages or Creator content to target advertising. We use service providers to operate the Services. If our practices change, we will update this Policy and provide any choices or notices required by applicable law.

5. How long we keep information

We keep information for as long as reasonably needed for the purposes described in this Policy, including to provide the Services, maintain account and transaction history, complete or review payouts, resolve disputes, prevent fraud, enforce our Terms, and meet legal, tax, or accounting requirements.

You may request account closure through the Services or by contacting us. For Creators with payout history or verification records, account closure may result in anonymization and deactivation rather than deletion of the account record. We may retain transaction, wallet, payout, referral, verification, audit, and security records for accounting, legal compliance, fraud prevention, and dispute resolution.

6. Security

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No website, storage system, or electronic transmission can be guaranteed to be completely secure. Please use a strong password and contact us promptly if you believe your account has been compromised.

7. Your privacy choices and rights

You may update certain account and profile information through the Services. You may request access to, correction of, or deletion of personal information by emailing [email protected]. We may need to verify your identity before completing a request and may retain information where permitted or required by law.

Depending on your location and the privacy laws that apply, you may have additional rights, such as the right to access personal information, obtain a portable copy, correct inaccurate information, request deletion, or opt out of certain sales, sharing, or targeted advertising. You may submit a request at [email protected]. We will process requests within the time and according to the procedures required by applicable law. If applicable law gives you a right to appeal a denial, you may request an appeal by replying to our response or contacting [email protected] with “Privacy Appeal” in the subject line.

You can manage cookies through your browser. Some service-provider technologies, including the support-chat widget, may have their own controls or consent settings.

8. Minors’ privacy

If we learn that a person under 18 has created an account or provided personal information to XOXO, we will review the situation and take appropriate steps. This may include closing the account and deleting personal information where appropriate, subject to records we are required or permitted to retain. To report a possible account belonging to a person under 18, contact [email protected].

9. Third-party services and links

The Services may link to third-party websites. Information you provide directly to those sites is handled under their own privacy notices.

10. Changes to this Policy

We may update this Policy when our services or data practices change. We will update the “Last Updated” date and provide additional notice for material changes where required. Please review this Policy periodically.

11. Contact us

For privacy requests or questions, contact [email protected].