Privacy Policy

Reveal This LTD is the controller of personal data processed to operate RevealThis, except where a provider independently determines how it uses data under its own privacy notice. Privacy requests can be sent to compliance@revealthis.com.

This policy applies to visitors, fans, creators, performers, complainants, support contacts, and other people whose information is processed through the service.

• Account and profile data: name, username, email, authentication details, preferences, profile content, and account status.
• Age, identity, and compliance data: verification status, provider references, identity-document and selfie results, date-of-birth confirmation, creator applications, performer records, releases, signatures, and consent evidence.
• Content and communications: uploads, metadata, messages, support requests, reports, complaints, appeals, and moderation evidence.
• Payments and payouts: transaction references, purchases, subscriptions, refunds, disputes, payout details, tax information, fraud signals, and delivery/access records. Full card details are ordinarily handled by payment providers rather than stored by RevealThis.
• Device and usage data: IP address, approximate location, browser, device, session identifiers, security events, cookies, access logs, and interactions with the service.
• Information from others: reports, release invitations, performer links, payment and verification results, fraud intelligence, and information lawfully supplied by partners or authorities.

We process account, purchase, subscription, content-delivery, support, and creator-service data because it is necessary to perform our contract with you or take requested pre-contract steps.

We process records required for age assurance, illegal-content response, tax, accounting, consumer protection, law-enforcement cooperation, sanctions, and other regulatory duties because processing is necessary to comply with legal obligations.

We process security, fraud, moderation, audit, service-improvement, dispute, and limited analytics data for our legitimate interests in operating a safe, lawful, reliable marketplace, protecting users and paid media, preventing abuse, and establishing or defending legal claims. We balance those interests against affected rights.

Where required, we rely on consent for optional cookies or marketing. Consent can be withdrawn without affecting processing already performed. We may process information to protect vital interests in urgent safeguarding situations.

Identity and age-assurance processes may involve facial images, identity documents, sexual-life information inferred from adult-content participation, or biometric processing performed by a verification provider. Where UK GDPR special-category data rules apply, processing is based on explicit consent where appropriate, substantial public-interest safeguards where authorised by law, or the establishment, exercise, or defence of legal claims.

We seek to retain verification outcomes and references rather than unnecessary copies of raw identity or biometric material. Verification providers may independently retain information as described in their own notices and contractual requirements.

We share only what is reasonably necessary with service providers supporting hosting, storage, content delivery, security, communications, analytics, customer support, age and identity verification, payments, payouts, accounting, legal review, and fraud prevention.

Payment processors, acquiring banks, card networks, verification providers, and financial institutions may act as independent controllers for their own compliance and risk purposes. We may also disclose information to professional advisers, regulators, safeguarding bodies, law enforcement, courts, a buyer or successor to the business, or another party where disclosure is lawful and necessary.

Creators receive transaction and audience information needed to provide purchased access, but they do not receive full payment-card details. Public profile and published-content information is visible according to the audience settings and access rights selected through the service.

Some providers may process information outside the United Kingdom. Before making a restricted transfer, we use an available lawful mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another legally recognised safeguard. We assess supplementary technical and organisational protections where required.

Contact compliance@revealthis.com for information about the safeguard applicable to a particular category of transfer.

• Account and profile records are generally kept while the account is active and for up to six years after closure where needed for contractual, fraud, tax, or legal claims.
• Transaction, payout, tax, refund, and dispute records are generally kept for seven years after the relevant transaction or longer where a legal hold applies.
• Creator, performer, release, consent, moderation, and adult-content compliance records are generally kept for at least seven years after creation, last amendment, or final use, subject to longer statutory or legal-hold requirements.
• Complaints, safety reports, enforcement decisions, and associated evidence are generally kept for at least five years, with longer retention for repeat-risk detection, safeguarding, litigation, or legal obligations.
• Routine security and access logs are generally kept for up to two years unless an incident, fraud investigation, or legal hold requires longer retention.
• Optional cookie consent records are kept for the period needed to demonstrate and refresh the user's choices.

Deletion from active systems may be followed by expiry from encrypted backups under scheduled retention cycles. Data may be retained longer where required by law, necessary to protect a person, or needed to establish, exercise, or defend legal claims.

Depending on the circumstances, you may request access, correction, deletion, restriction, objection, or portability of your personal data, and may withdraw consent. You may also object to direct marketing at any time.

Send requests to compliance@revealthis.com. We may need to verify identity and may lawfully retain information despite a request where legal, safety, tax, fraud, payment, adult-content record-keeping, or legal-claims obligations apply. We normally respond within one month, subject to lawful extensions for complex requests.

You may complain to the UK Information Commissioner's Office through ico.org.uk. We encourage you to contact us first so we can investigate.

We use automated signals to identify fraud, account compromise, prohibited activity, regional age-assurance requirements, payment risk, and content requiring review. These signals may delay a transaction, restrict access, or refer an account or upload to staff.

We do not intend to make solely automated decisions that produce legal or similarly significant effects without an applicable lawful basis and safeguards. Where such a decision applies, you may request human review, express your view, and challenge the outcome through Support.

We use access controls, encryption in transit, scoped staff permissions, private media delivery, audit logs, monitoring, backups, and server-side entitlement checks appropriate to the risks. No system is completely secure, and users must protect their credentials.

We assess suspected personal-data breaches and notify the ICO and affected people where required by law. Report suspected account or data compromise promptly through Support.

Essential cookies support authentication, security, age-gating, preferences, and checkout continuity. Optional analytics, functional, or marketing technologies are used according to your choices. See the Cookie Policy or reopen Cookie Settings to change optional consent.

We do not sell personal data. Where electronic marketing is used, it is sent only where permitted and includes a way to opt out.

RevealThis is an adults-only service and is not directed to children. If we learn that a child's personal data has been submitted, we will restrict access, investigate, and delete or preserve and report the information as required for safeguarding and law enforcement.

We may update this policy as services, providers, or legal requirements change. Material updates will be highlighted through the service or by another appropriate notice.