Privacy Policy
Last updated: September 18th, 2025
1. Introduction
Furtiv.me (“we,” “our,” or “the Platform”) is operated by HETA SARL, a company registered in Paris, France, with its registered office at 4 Square Charles Laurent, 75015 Paris, France.
We are committed to protecting your privacy and ensuring compliance with:
- The General Data Protection Regulation (GDPR – EU 2016/679),
- The French Data Protection Act (Loi Informatique & Libertés).
This Privacy Policy explains what personal data we collect, the legal bases for processing, how we use it, how long we keep it, and the rights you have over your data.
📍 Data Controller: HETA SARL – privacy@furtiv.me
📍 Data Protection Officer (DPO): A DPO has been designated and can be contacted at dpo@furtiv.me
2. Data We Collect
When you purchase or download content, we may collect:
- Name and surname.
- Email address.
- Device information: operating system, browser language.
- Transaction details: purchase history, amounts paid, payment method.
3. Legal Bases for Processing
We process personal data on the following legal grounds (Article 6 GDPR):
- Contract: to provide services, manage accounts, and deliver purchased content.
- Legal obligation: to comply with tax, accounting, and anti-money laundering (AML) rules.
- Legitimate interest: to ensure platform security, fraud prevention, and service improvement.
- Consent: for optional services (e.g., marketing communications, cookies).
4. Purpose of Data Processing
Personal data may also be processed for the purposes of platform security, content safety and moderation, abuse detection, fraud and chargeback prevention, and enforcement of platform rules, including compliance with payment processor and card network requirements.
We use your data for the following purposes:
- Account creation, verification of age and identity.
- Management of transactions, payments, and payouts.
- Delivery of services and access to purchased content.
- Fraud prevention, risk control, and enforcement of Terms of Service.
- Monitoring use of the Platform to improve security and user experience.
- Compliance with legal and regulatory obligations.
- Access to and purchase or download of any content available on the Platform is strictly restricted to individuals who are at least eighteen (18) years of age. By accessing, purchasing, or downloading content, users expressly confirm that they are of legal age and legally permitted to view adult content in their jurisdiction.
- more details here : https://www.yoti.com/terms/age-verification/
5. Data Retention
- Account data is kept for as long as your account is active or for 2 years after your last activity.
- Transactional data may be kept longer to comply with tax and accounting laws.
- Cookies are stored between 0 and 179 days, depending on their type.
- Once data is no longer needed, it will be deleted, anonymized, or archived, except where legal obligations require longer retention.
6. Data Transfers
Some personal data may be transferred outside the European Economic Area (EEA), for example to technical service providers in the United States.
In such cases, Furtiv.me ensures appropriate safeguards, including:
- European Commission Standard Contractual Clauses (SCCs),
- Verification of providers’ compliance with recognized frameworks (e.g., ISO 27001, SOC 2).
7. Sub-processors & Third Parties
Furtiv.me may use third-party service providers (payment processors, hosting, KYC/AML verification, analytics).
- All subcontractors are bound by Article 28 GDPR-compliant contracts, ensuring they act only under our instructions.
- A list of key processors can be provided upon request.
8. Your Rights
As a data subject, you have the following rights under the GDPR:
- Access: request a copy of your personal data.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request deletion of your data (right to be forgotten).
- Restriction: limit processing of your data in certain cases.
- Portability: receive your data in a structured, machine-readable format.
- Objection: oppose processing of your data for legitimate reasons.
- Consent withdrawal: withdraw consent at any time (without affecting past lawful processing).
- Post-mortem instructions: decide how your data should be handled after your death.
📧 To exercise your rights, contact: privacy@furtiv.me.
📍 You may also lodge a complaint with the CNIL (Commission Nationale de l’Informatique et des Libertés).
9. Security
We implement technical, organizational, and physical measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
- Access to sensitive data is restricted to authorized personnel.
- All transfers are encrypted (TLS).
- Data is stored in secure EU servers.
- Regular audits and penetration testing are performed.
10. Data Breach Notification
In case of a personal data breach:
- Furtiv.me will notify the CNIL within 72 hours (Article 33 GDPR).
- If the breach poses a high risk to users’ rights and freedoms, we will also notify the affected users without undue delay (Article 34 GDPR).
11. Record of Processing Activities
Furtiv.me maintains a GDPR Article 30-compliant Record of Processing Activities (ROPA) to ensure accountability and traceability.
12. Changes to This Policy
We may update this Privacy Policy from time to time. In case of significant changes, you will be notified at least 15 days in advance by email or via a notice on the Platform.
📍 Data Controller:
HETA SARL
4 Square Charles Laurent
75015 Paris – France
Email: privacy@furtiv.me
📍 Data Protection Officer (DPO):
dpo@furtiv.me
This Privacy Policy is available in English and French to ensure accessibility for EU/EEA users.