Privacy Policy.
Effective Date: April 23, 2026 · Operated by Fanvault Shop Inc.
Welcome to Fanvault. Fanvault Shop Inc. ("Fanvault," "we," "us," or "our") is a creator-first marketplace that connects creators with their fans through authenticated collectibles, exclusive digital interactions, and personalized experiences. We take data privacy and security seriously and believe in full transparency with our users.
This Privacy Policy ("Policy") describes how we collect, use, share, retain, and protect your personal data when you access or use our website (https://fanvault.shop/), our associated domains (including fanvaultshop.com, fanvault.ai, and fanvault.me), mobile applications, AI assistant (including via Telegram), and any related services (collectively, the "Services" or "Platform"). This Policy applies to all users of the Platform, whether you are a content creator ("Creator") or a fan ("Fan").
By accessing or using the Services, you agree to the collection, use, and disclosure of your personal data as described in this Policy. If you do not agree with our policies and practices, please do not use Fanvault.
This Policy should be read alongside our Terms of Service and our Complaints Policy, which together govern your use of the Platform.
1. Introduction and Overview
Fanvault is a creator-first marketplace that connects creators with their fans through authenticated collectibles, exclusive digital interactions, and personalized experiences. We collect and use personal data to operate the Platform, facilitate transactions, verify identities, ensure safety, and continuously improve our services. We do not sell your personal data to third parties.
2. Information We Collect
We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you ("Personal Data"). The categories of Personal Data we collect depend on how you interact with Fanvault and the features you use.
2.1 Information You Provide Directly to Us
Account Registration Data. When you register for an account, we collect your first and last name, email address, password, date of birth (to verify you are at least 18 years old), and phone number.
Profile Information. You may choose to provide a profile picture, biography, display name, website URL, and links to your other social media profiles. For Creators, this information is displayed publicly on your Fanvault storefront.
Payment and Financial Information. We collect financial information necessary to process transactions and payouts.
| User Type | Data Collected |
|---|---|
| Fans | Payment card details (card number, expiration date, CVV), billing address, shipping address, and transaction history for purchases of memorabilia, paid DMs, tips, and wish list items. |
| Creators | Bank account information, routing numbers, tax identification numbers (e.g., SSN or EIN), W-9 forms, and payout preferences. |
We do not store your full payment card number on our servers. Payment card data is handled by our PCI-DSS-compliant third-party payment processor (e.g., Stripe).
Communications and Content. We collect the content of your communications on the Platform. This includes the text, images, and audio/video files sent in paid Direct Messages (DMs), comments, reviews, wish list requests, and correspondence with our customer support team, including messages submitted as part of a complaint under our Complaints Policy.
Identity Verification Data. For Creators, we utilize third-party identity verification services to ensure platform safety and compliance. This process may require you to provide a government-issued photo ID (including name, date of birth, and ID number) and a live selfie. Our verification partners may process biometric data (such as facial geometry) solely for the purpose of verifying your identity and confirming you are at least 18 years of age.
2.2 Information Collected Automatically
Device and Usage Data. When you access the Platform, we automatically collect information about your device and your interactions with our Services. This includes your IP address, browser type and version, operating system, device identifiers (including unique device IDs), pages visited, time spent on pages, navigation paths, clickstream data, and referring URLs.
Cookies and Tracking Technologies. We use cookies, web beacons, pixels, tags, and similar technologies to analyze trends, administer the website, track users' movements around the site, remember your preferences, and gather demographic information. For more information on our use of cookies, please see our Cookie Policy.
AI Assistant Interactions. Fanvault offers an AI assistant accessible via our web application and via Telegram. When you interact with the AI assistant — whether to manage your profile, set up your storefront, draft product descriptions, or ask questions — we collect the text of your queries, commands, and the resulting actions taken by the AI on your behalf. We may also collect session metadata such as the time, duration, and frequency of your AI interactions. This interaction data is used to execute your requests and may be analyzed in an aggregated, anonymized format to improve the AI's performance and accuracy. Please refer to Section 7 (Data Retention) for more details on how long we retain AI interaction logs.
Session Replay and Analytics. We may use session replay software and analytics tools that record your interactions with the Platform, including clicks, mouse movements, scrolling, and form fills, to help us understand how users interact with our Services and to improve the user experience.
2.3 Information from Third-Party Sources
Data Collection via Scraping (Creators Only). To streamline the onboarding process, verify Creator identity, and assist in setting up storefronts and wishlists, Fanvault may collect publicly available data from Creators' public social media profiles (such as Instagram, TikTok, Twitter/X, YouTube, etc.) using automated means (e.g., web scraping). This may include public profile information, follower counts, engagement metrics, and public content. By registering as a Creator and linking or providing your social media handles, you authorize us to collect this public data for these purposes.
Meta/Instagram Connect. Fanvault allows Creators to connect their Instagram accounts to the Platform via the Meta Developer API. This is an optional feature. If you choose to link your Instagram account, you will be asked to authorize Fanvault to access specific data from your Instagram account.
| Data Category | Specific Data Points |
|---|---|
| Profile Data | Instagram user ID, username, display name, profile picture URL, and biography. |
| Account Metrics | Follower count, following count, and total media count. |
| Content Data | Public media objects (images and videos), captions, media type, and publication timestamps. |
| Insights Data | Engagement metrics associated with your public media (e.g., likes, comments, reach) to the extent permitted by the Meta API and your account settings. |
We collect this data solely to verify your Creator status, display your verified social presence on your Fanvault storefront, and provide the core functionality of linking your physical collectibles to your Instagram content. We do not use this data for unauthorized advertising purposes, and we do not sell this data to third parties.
To request deletion of your Instagram data, visit our Data Deletion page or disconnect your account at any time from Settings → Connected Accounts.
TikTok Connect. Fanvault lets Creators optionally connect their TikTok accounts using TikTok's Login Kit. If you choose to connect TikTok, you will be asked on TikTok's consent screen to grant Fanvault specific scopes (at minimum user.info.basic, user.info.profile, user.info.stats, video.list, and video.upload).
| Data Category | Specific Data Points |
|---|---|
| Profile Data | TikTok open_id, union_id, username, display name, and avatar URL. |
| Account Metrics | Public follower, following, like, and video counts that TikTok makes available under the requested scopes. |
| Content Data | Metadata about your public TikTok videos (title, cover image, publish time, and similar fields returned by video.list) so the AI assistant can reference your TikTok content when helping with Fanvault storefront setup. |
| Authentication Data | OAuth access_token, refresh_token, and expiration timestamps, stored server-side and never exposed to your browser or to other users. |
| Content Posting | When you explicitly use the "Post to TikTok" feature on Fanvault, the video URL, title, and description you select are sent to TikTok's Content Posting API and delivered to your TikTok drafts/inbox for you to review and publish from within TikTok. |
We use TikTok data only to: (a) verify your Creator identity, (b) display your verified TikTok handle on your Fanvault profile, (c) give the Fanvault AI assistant brand context so it can better personalize your storefront and recommendations, and (d) send draft posts to TikTok when you explicitly request it. We do not sell TikTok data, we do not use it for unrelated advertising, and we do not share it with third parties except the trusted service providers listed in Section 4.
You can disconnect TikTok at any time from Settings → Connected Accounts (or from the AI page / Edit Profile modal). Disconnecting clears the stored TikTok tokens and stops all authenticated TikTok API calls on your behalf. You can also revoke Fanvault's access directly from inside the TikTok app.
Other Third-Party Platforms. If you choose to connect other social media accounts or sign in using a third-party service (e.g., Google), we may collect your name, email address, profile picture, and other information made available by that service in accordance with its privacy policy.
Data from Other Users. Other users may provide information about you when they interact with you on the Platform, such as when a Creator mentions you in a post or when a Fan sends you a gift.
3. How We Use Your Information
We use the Personal Data we collect for the following business and commercial purposes:
Providing and Maintaining the Services. To operate Fanvault, manage your account, process transactions for memorabilia, paid DMs, tipping, and wish list items, facilitate shipping and fulfillment, and provide customer support.
Powering AI Features. To operate our AI assistant, allowing it to take actions on your behalf (such as configuring your storefront, drafting product descriptions, or managing your profile) based on your explicit commands. We may also use interaction data in an anonymized, aggregated form to train and improve our AI models.
Identity Verification and Safety. To verify the identity and age of Creators, prevent fraudulent activity, detect and prevent abuse, enforce our Terms of Service, investigate and resolve complaints under our Complaints Policy, and maintain a safe and brand-appropriate environment for all users.
Personalization. To customize your experience, display relevant content and recommendations, and tailor our communications to your interests based on your past interactions with the Platform.
Communication and Marketing. To send you administrative messages, security alerts, transaction confirmations, and customer support responses. With your consent (where required by law), we may also send promotional emails and push notifications about new features, Creator updates, and special offers. You may opt out of marketing communications at any time.
Analytics and Product Improvement. To analyze how users interact with our Platform, measure the effectiveness of our features and marketing campaigns, conduct research and development, and improve the overall user experience.
Legal Compliance. To comply with applicable legal obligations, tax reporting requirements, anti-money laundering laws, and to respond to lawful requests from law enforcement or regulatory authorities.
4. How We Share Your Information
We respect your privacy and do not sell your Personal Data to third parties. We may share your information in the following circumstances:
With Other Users. Certain information is visible to other users as part of the normal operation of the Platform. For Creators, this includes your public profile, storefront listings, and public content. For Fans, your username and profile picture may be visible when you leave a review or interact publicly. When a Fan purchases a paid DM, provides a tip, or fulfills a wish list item, relevant transaction details (excluding full payment card numbers) are shared with the receiving Creator.
Service Providers. We share information with trusted third-party vendors who perform services on our behalf.
| Service Provider Category | Purpose |
|---|---|
| Payment Processors (e.g., Stripe) | Processing transactions, payouts, and fraud detection. |
| Identity Verification Partners | Verifying Creator identity and age. |
| Cloud Hosting Providers | Storing and serving Platform data. |
| Customer Support Software | Managing support tickets and communications. |
| Analytics Providers | Analyzing Platform usage and performance. |
| Marketing and Email Platforms | Sending transactional and promotional communications. |
| AI/ML Infrastructure Providers | Powering our AI assistant features. |
These service providers are contractually obligated to protect your data and use it only for the purposes we specify.
Meta/Instagram. When you use the Instagram Connect feature, certain data is exchanged with Meta in accordance with their Platform Terms to facilitate and maintain the connection. The data we send to Meta is limited to what is necessary to authenticate and maintain the API connection.
TikTok. When you use TikTok Connect or the "Post to TikTok" feature, Fanvault exchanges the information described in Section 2.3 with TikTok's Login Kit, Display API, and Content Posting API, in accordance with the TikTok Developer Terms of Service. The data we send to TikTok is limited to what is necessary to authenticate your account, read the scopes you approved, and deliver the draft posts you explicitly initiate.
Business Transfers. If Fanvault Shop Inc. is involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of its assets, your Personal Data may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform prior to your Personal Data being transferred and becoming subject to a different privacy policy.
Legal Requirements and Safety. We may disclose your information if required to do so by law, subpoena, or court order, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of Fanvault; (c) prevent or investigate possible wrongdoing in connection with the Services; (d) protect the personal safety of users of the Services or the public; or (e) protect against legal liability.
5. Your Choices and Rights
Depending on your jurisdiction, you may have the following rights regarding your Personal Data. We will respond to all verified requests within the timeframe required by applicable law.
Right to Access and Portability. You can request a copy of the Personal Data we hold about you in a structured, commonly used, and machine-readable format.
Right to Correction. You can update or correct inaccuracies in your profile information directly through your account settings, or by contacting us.
Right to Deletion. You can request that we delete your account and associated Personal Data. Please note that we may retain certain information as required by law (e.g., transaction records for tax purposes) or for legitimate business purposes (e.g., fraud prevention and dispute resolution).
Right to Opt-Out of Marketing. You can unsubscribe from promotional emails by clicking the "unsubscribe" link at the bottom of any marketing email. You can also manage your notification preferences in your account settings.
Right to Restrict Processing. In certain circumstances, you may have the right to request that we restrict the processing of your Personal Data.
California Residents. If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know about the categories of Personal Data we collect and the right to opt out of the sale or sharing of your Personal Data. We do not sell your Personal Data.
To exercise any of these rights, please contact us at privacy@fanvaultshop.com. If your concern relates to a complaint about data handling or another user's conduct, please also refer to our Complaints Policy. We may need to verify your identity before processing your request.
6. Data Security
We implement reasonable and appropriate administrative, technical, and physical security measures designed to protect your Personal Data against unauthorized access, destruction, loss, alteration, or misuse. These measures include encryption of sensitive data in transit (using TLS/SSL) and at rest, secure server infrastructure, access controls, and regular security assessments.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account password and for any activities that occur under your account.
7. Data Retention
We retain your Personal Data for as long as your account is active or as needed to provide you the Services. If you request deletion of your account, we will delete or anonymize your Personal Data within a commercially reasonable time, except for information we are required to retain for legal, tax, or accounting purposes (typically up to seven (7) years for financial records), or to resolve disputes and enforce our agreements.
AI assistant interaction logs may be retained for up to eighteen (18) months for the purpose of improving our AI models. After this period, individual interaction logs are anonymized or deleted.
8. Children's Privacy
Fanvault is strictly limited to individuals who are 18 years of age or older. We do not knowingly collect Personal Data from anyone under the age of 18. If we become aware that we have collected Personal Data from a minor, we will take immediate steps to delete such information and terminate the associated account. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@fanvaultshop.com.
9. International Data Transfers
Fanvault is based in the United States. If you access the Services from outside the United States, please be aware that your Personal Data will be transferred to, processed, and stored in the United States. The data protection laws in the United States may differ from those in your country of residence. By using the Services, you consent to this transfer, processing, and storage of your Personal Data in the United States.
10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on the Platform. You can control the use of cookies through your browser settings or through our cookie preference center. Please note that disabling certain cookies may affect the functionality of the Services.
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Required for the Platform to function (e.g., session management, security). |
| Analytics Cookies | Help us understand how users interact with the Platform. |
| Functional Cookies | Remember your preferences and settings. |
| Marketing Cookies | Used to deliver relevant advertisements and track campaign effectiveness. |
11. Third-Party Links and Services
The Platform may contain links to third-party websites or services that are not operated by Fanvault. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, new platform features, or legal requirements. If we make material changes, we will notify you by email (sent to the email address specified in your account) or by posting a prominent notice on the Platform at least thirty (30) days prior to the change becoming effective. Your continued use of the Services after the effective date constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Fanvault Shop Inc.
Privacy Inquiries: privacy@fanvaultshop.com
General Support: support@fanvaultshop.com
Creator Inquiries: creators@fanvaultshop.com
Legal: legal@fanvaultshop.com
Address: Available upon request.
For users in the European Economic Area (EEA) or United Kingdom, Fanvault Shop Inc. is the data controller responsible for your Personal Data.