Privacy Policy

1. Who We Are and What This Policy Covers

1.1 This Privacy Policy explains how Belvista Digital Solutions LLC, a Missouri limited liability company (“Belnoir,” “we,” “us” or “our”), collects, uses, discloses, retains and protects personal information when you use belnoir.app, its subdomains, our apps and every related service (the “Platform”), and the choices and rights you have. We are the “business” and “controller” of the personal information described here. Our address is Belvista Digital Solutions LLC, 1306 Lucas Ave, Unit 905, Saint Louis, MO 63103.

1.2 This Policy forms part of our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. It applies to everyone who uses the Platform, including Fans, Creators, Performers, people who report Content, and people who contact us. It does not cover third-party websites or services, which have their own policies.

2. Information We Collect

2.1 Everyone with an Account

• Account details: your display name, email address and password (stored only as a one-way hash that we cannot read).
• Agreements: when you accepted our Terms and policies, which version, and the IP address and browser used, kept as evidence of your agreement.
• Age verification result: whether you passed and when. You verify with our partner Didit by scanning an identity document and taking a live selfie. For Fans, the images and the details on the document stay with Didit; Belnoir keeps only the result and the date. See Section 4 on biometric information.
• Purchases and requests: what you bought, subscribed to, tipped or requested, when, and the price. Card payments are handled by our Payment Processor; Belnoir never receives or stores your full card number.
• Messages: messages you send and receive, including attached files. Messages are checked automatically for prohibited content, attached files are reviewed before delivery, and authorized Belnoir staff may read a conversation when a message is reported or to investigate safety, fraud, legal or policy concerns. Staff access to messages is logged.
• Activity: Creators you follow, subscribe to or block, posts you like, comments you write, pages and items you view, what you search for, and the live streams you watch and chat in. We use this to show you creators, posts and live streams you're likely to enjoy; you can clear your search history in Settings at any time. Comments and live chat are visible to other members under your username. Live streams are not recorded.
• Sign-in and security information: the devices you sign in from (recognized by a random identifier stored in a cookie), sign-in times and outcomes, and, if you use two-step sign-in, your chosen methods: a mobile number for text codes, an authenticator-app key (stored encrypted), passkeys (only a public key; your fingerprint or face never leaves your device) and backup codes (stored only as a one-way hash). If you sign in with Google or X, we receive your name, email address, profile picture and an account identifier from them; we never receive your password for those services, and we don't post anything to them.
• Technical and approximate location information: IP address, browser and device type, and the approximate city, region and country derived from your IP address, used for security (for example, to show you where a sign-in came from), fraud prevention, legal compliance and to apply regional restrictions. We do not collect precise geolocation.
• Viewing watermarks: Content you view may carry a visible or embedded watermark containing your display name and an account code, so that copies made without permission can be traced to the account they came from.
• Notifications: if you turn on push notifications, a device address issued by your browser or phone maker that lets us deliver them, and your notification settings.
• Communications with us: what you send to support, legal, privacy or safety, including appeals and data requests, and our replies.

2.2 Creators and People Who Appear in Content

• Identity and consent records: legal name, any other names used, date of birth, a copy of the identity document checked by Didit, the verification result, and signed releases. Federal law, including 18 U.S.C. § 2257 and 28 C.F.R. Part 75 where they apply, requires these records to be kept. They are stored in private, access-controlled storage, are visible only to authorized Belnoir staff, and every view is logged.
• Content: the files and text you upload. Location data and other hidden information embedded in photos and videos is removed on upload. Content is checked by automated tools and by people before publication.
• Business, payout and tax information: your earnings, payouts and adjustments; the payout provider and account reference you connect (bank and card details are held by the payout provider, not by Belnoir); whether your tax form has been provided; and, where we or our payout provider are required to collect it, your taxpayer information.
• Shipping information: the ship-from and return addresses you provide for physical items. These addresses are printed on shipping labels and are therefore visible to the Fan who receives the package and to the carrier.

2.3 Physical Items

When you buy an item a Creator ships, we collect the name, shipping address and order details you provide. We share them only with that Creator and with our shipping-label provider and the carrier, so the item can be delivered.

2.4 People Who Report Content

If you report Content, we collect the details you give us and your email address. If you report that you appear in Content without your consent, you sign a statement and may verify your identity with Didit. We then keep the name and date of birth on your identity document, a copy of the document image and the result, to decide your report and compare it with our records of the people in that Content. Only Belnoir’s safety team can see it, every view is logged, and we never ask for intimate images.

2.5 Sources

We collect personal information from you; automatically from your device and use of the Platform; from Didit (results and, where described above, identity details); from our Payment Processor (payment status, refunds and Chargebacks); from our shipping and payout providers (label, tracking and payout status); from other Users (for example, when a Creator tags a Performer or someone reports Content); and from authorities or rights holders (for example, legal process or copyright notices).

3. Sensitive Personal Information

3.1 Some information we process is “sensitive” under privacy laws: government identity documents, information used for biometric verification, account log-in credentials, taxpayer information, and the fact that you use an adult platform, which may reveal information about your sex life or sexual orientation. Messages you send are also private communications.

3.2 We use sensitive personal information only as necessary to provide the Platform you request, verify age and identity, prevent and investigate fraud, illegal activity and safety risks, keep records required by law, and comply with legal obligations. We do not use it to infer characteristics about you or for advertising. By creating an account and completing verification you consent to this processing. You may withdraw consent by closing your account, subject to the records we must keep by law (Section 9).

4. Biometric Information

4.1 Age and identity verification is performed by our service provider Didit. During verification, Didit may create biometric identifiers or information, such as facial geometry from your selfie and the photo on your identity document, solely to confirm that you are the person on the document, check that you are a live person, determine your age, and prevent fraud.

4.2 Belnoir does not store, sell, lease, trade or otherwise profit from biometric identifiers or biometric information. Before any identity check begins, we show you a separate Biometric Information Notice describing what will be collected, why, who holds it and how long it is kept, and we ask for your written consent and release by an affirmative checkbox. We record the version of the notice you agreed to, when, and the IP address and browser used. You may decline, in which case the check does not go ahead.

4.3 Retention and destruction. Biometric identifiers and information are retained by Didit only as long as needed for the purposes above and permanently destroyed when the verification is complete and in any event no later than one year afterwards, or within any shorter period the law requires. This schedule is designed to meet the shortest deadline under the biometric privacy laws of Illinois, Texas and Washington, and we require Didit to follow it. Photographs of identity documents that we must keep under record-keeping laws are used only as described in Section 4.4.

4.4 Checking who appears in Creator Content. To protect against content showing anyone who is under 18 or hasn’t verified and consented, we use Amazon Rekognition (Amazon Web Services) to detect faces in uploaded photos and sampled video frames, estimate each face’s age, check for banned content, and compare each face with the photo on the verified identity document of each Performer tagged on that file. Face comparisons are computed only for that check and are not stored by Belnoir or by Amazon Web Services; our AWS account is opted out of AWS using content to improve its services. We keep only the results (for example, how many faces were found, their estimated ages, and whether each matched a tagged Performer) with the review record. Performers consent to this when they verify; anyone else whose face appears in Content is treated as a possible breach of our policies and the file is held for a person to review.

5. How We Use Information

• To provide the Platform: accounts, purchases, subscriptions, delivery, messages, custom requests, physical orders and Creator payouts.
• To verify that every User is an adult and that every Performer is verified and has consented, and to keep the records the law requires.
• To review Content, rank and recommend posts and Creators, handle reports, appeals and copyright notices, and enforce our Terms and policies.
• To secure accounts, detect and prevent fraud, Chargebacks, abuse, unauthorized distribution of Content and other harmful or illegal activity.
• To process payments, refunds, Chargebacks, payouts, taxes and accounting.
• To send you account security messages, account-status notices, receipts and service notices, and push notifications you have turned on.
• To comply with law, legal process and the rules of our Payment Processors and card networks, and to establish, exercise or defend legal claims.
• To maintain, debug and improve the Platform.

Automated processing. We use automated tools to screen uploads and messages, flag possible fraud and rank feeds. Our support chat starts with an AI assistant, which is always identified as AI, can take a few account actions only after you confirm them, and hands you to a person whenever you ask or it can’t help. Automated tools do not by themselves make final decisions to close accounts or withhold earnings; a person reviews those decisions, and you can appeal as described in our Terms of Service.

6. How We Disclose Information

We disclose personal information only as follows:

• Didit, for age and identity verification and to send and check sign-in codes by text message (it receives your mobile number for that purpose).
• Payment Processors, for card payments, fraud screening, refunds and Chargebacks.
• Payout providers, to pay Creators and meet tax and anti-money-laundering obligations.
• Shipping-label provider (Shippo) and carriers, for physical orders.
• Project Arachnid (operated by the Canadian Centre for Child Protection), which checks uploaded files against known child sexual abuse material.
• Infrastructure providers: Hostinger (servers), Bunny.net (file storage and delivery) and Cloudflare (security, performance and email delivery), and the push services operated by browser and phone makers.
• Amazon Web Services (Amazon Rekognition), which checks uploaded photos and video frames for faces, estimated ages and banned content, and compares faces with tagged Performers’ ID photos, as described in Section 4.4.
• Anthropic, which provides the AI that powers our support assistant. It receives the text of support chats and, for signed-in members, the account details the assistant needs to help (never photos, files, identity documents or payment details), only to generate replies. It does not use this information to train its models.
• Professional advisers, such as lawyers, accountants and auditors, under duties of confidentiality.
• Creators see your display name, your comments, likes and messages to them, details of custom requests you send them, and, for physical orders, your shipping name and address. They never see your email address, legal name or payment details.
• Other Users see your display name, public profile and comments.
• Authorities and others where required: law enforcement, courts, regulators, the National Center for Missing & Exploited Children and rights holders where required by law or valid legal process, to report suspected child sexual abuse material, or where we believe in good faith disclosure is necessary to prevent death, serious harm or fraud, or to protect the rights and safety of Users, Performers, Belnoir or the public.
• Business transfers: a buyer or successor in a merger, acquisition, financing, reorganization or sale of assets, subject to protections no less protective than this Policy.
• With your direction or consent.

Our service providers may use personal information only to provide services to us, under written contracts that require them to protect it. We do not sell personal information, share it for cross-context behavioral advertising, or knowingly disclose it to data brokers.

7. Cookies and Similar Technologies

Belnoir uses only cookies and similar technologies that are needed for the Platform to work and stay secure. We do not use advertising, analytics or cross-site tracking cookies, and we honor browser privacy signals such as Global Privacy Control (there is nothing to opt out of). Because we do not track you across sites, we do not respond differently to “Do Not Track” signals.

• Sign-in session: keeps you signed in (up to 7 days, renewed while you use the Platform).
• Device recognition: a random identifier that lets us recognize devices you have signed in from and protect your account (up to 400 days).
• 18+ confirmation: remembers that you confirmed you are an adult.
• Cart: remembers items in your cart (30 days).
• Creator referral links: if you arrive through a Creator’s tracking link, records which link brought you, so the Creator can see how many visits and sign-ups it produced (30 days). It is not used to track you on other sites.
• Site access: while Belnoir is in private testing, remembers that you entered the access password.

8. Security

We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity, including encryption in transit, encrypted backups, private file storage delivered only through short-lived links, two-step sign-in for Creators and staff, least-privilege staff access, and logging of every access to identity records. No system is completely secure. If a security incident affects your personal information, we will notify you and the authorities as required by law.

9. How Long We Keep Information

• Account, purchase and payout records: while your account is open and for up to seven years afterwards for tax, accounting, Chargeback, fraud-prevention and legal-claim purposes.
• Identity records and releases for Performers: for at least seven years after the Content they relate to was created or last changed, or longer where the law requires, even after the Content or account is removed.
• Reports, enforcement and safety records, and evidence of illegal content: as long as needed for investigations, appeals and legal obligations; material reported to the authorities is preserved as the law requires.
• Identity proof from people who report Content: as long as needed to decide the report and any related appeal or legal claim, then deleted.
• Messages and Content: until deleted by you or removed under our policies, then kept for a limited period for safety, legal and dispute purposes.
• Security and sign-in records: for a limited period, generally no longer than two years, unless needed for an investigation.
• Biometric information: as described in Sections 4.3 and 4.4.

10. Your Rights and Choices

10.1 Depending on where you live, including under the privacy laws of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states, you may have the right to: know and access the personal information we hold about you and how we use it; receive a copy in a portable format; correct inaccurate information; delete your information; opt out of the sale or sharing of personal information, targeted advertising and profiling with legal or similarly significant effects (we do none of these); limit the use of sensitive personal information (we use it only for the permitted purposes in Section 3); and withdraw consent.

10.2 How to make a request. Use Settings → Data and Account on the Platform, or email [email protected] from the email address on your account. We will verify your identity by confirming control of your account or email address and may ask for more information where needed. You may use an authorized agent; we may require proof of the agent’s authority and verify your identity directly. We will respond within 45 days, which may be extended by a further 45 days where permitted by law, and we will tell you if we extend.

10.3 Limits. We may decline or limit a request where the law allows, including where we must keep information for legal record-keeping (such as Performer records), fraud prevention, safety, security or legal claims, or where fulfilling it would reveal another person’s personal information.

10.4 Appeals. If we decline your request, you may appeal by replying to our decision with the word “Appeal” within 45 days. We will respond in writing within the time the law requires. If you are not satisfied, you may contact your state attorney general.

10.5 No discrimination. We will not deny you service, charge you different prices or provide a different quality of service because you exercised your privacy rights.

10.6 Communications. Account security and account-status messages are part of the service and cannot be turned off while your account is open. You can control push notifications and in-app notifications in Settings.

11. Canada; Visitors from the European Economic Area, United Kingdom and Switzerland

11.1 Canada. If you are in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act and, where they apply, provincial laws including Quebec’s Act respecting the protection of personal information in the private sector. You may access and correct your personal information, withdraw consent (subject to legal and contractual limits) and, in Quebec, ask about automated decisions and data portability. Our privacy officer can be reached at [email protected]. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. Your information is stored in the United States, where it may be accessible to authorities under U.S. law.

11.2 If data protection law of the European Economic Area, the United Kingdom or Switzerland applies to you, we process your personal information on these legal bases: to perform our contract with you (providing the Platform); to comply with legal obligations (age verification, record keeping, tax, reporting); our legitimate interests in keeping the Platform safe, secure and free from fraud and illegal content, which we balance against your rights; and your consent, including explicit consent for special-category and biometric data used in verification, which you may withdraw at any time without affecting earlier processing.

11.3 You have the rights of access, rectification, erasure, restriction, portability and objection, and the right not to be subject to decisions based solely on automated processing that significantly affect you. You may lodge a complaint with your local data protection authority. Your information is transferred to and processed in the United States; where required we rely on appropriate safeguards such as standard contractual clauses.

12. Adults Only

The Platform is only for adults. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we close the account and delete the information except where we must keep it to protect the minor, report to authorities or comply with law. If you believe a minor is using Belnoir, contact [email protected].

13. Where Information Is Processed

Belnoir is operated from the United States. Information is stored and processed in the United States and wherever our service providers operate, which may have different data protection laws from where you live.

14. Changes to This Policy

We may update this Policy. The effective date at the top shows when it last changed. If a change is material, we will notify you by email or on the Platform before it takes effect, and where the law requires your consent we will ask for it.

15. Contact

Privacy questions and requests: [email protected]. By mail: Belvista Digital Solutions LLC, Attn: Privacy, 1306 Lucas Ave, Unit 905, Saint Louis, MO 63103.