Personal Data Protection and GDPR

Bellas aims to collect only the data needed to provide and protect the platform. Processing is carried out under applicable data protection law, including the GDPR where it applies.

The data controller is [BELLAS LEGAL ENTITY], with an address at [BELLAS COMPANY ADDRESS]. These fields must be replaced with confirmed legal details before launch.

To exercise your rights or ask a personal data question, contact [PRIVACY CONTACT EMAIL]. We may request reasonable information to confirm the identity of the person making the request.

• Account data: name or display name, email, phone, and password or authentication data.
• Profile data: public profile information, city, country, and profile content.
• Verification data: identity verification metadata, age verification result, and liveness or face-match status.
• Media data: uploaded profile photos and other media, where applicable.
• Technical data: IP address, device, browser, logs, cookies, and session data.
• Communication data: support messages and platform notifications.
• Payment or subscription metadata, where applicable.
• Safety and moderation data: reports, moderation notes, and account status.

Some verification, safety, or content data may require stronger protection. Bellas aims to minimize this processing and restrict access to authorized people and providers.

Sensitive verification material should be retained only for as long as necessary. Raw verification files may be processed by trusted verification or storage providers where applicable.

• Create, authenticate, and manage accounts and profiles.
• Provide platform features, communications, and support.
• Confirm eligibility, age, and identity when required.
• Protect users, prevent misuse, and enforce platform rules.
• Measure performance, fix issues, and improve the experience.
• Meet legal obligations and respond to lawful requests.

Depending on the context, Bellas may process data to perform a contract, comply with a legal obligation, pursue legitimate interests, protect vital interests, or based on consent. Where consent is required, it will be requested specifically.

Bellas may request age or identity checks to protect the platform and meet applicable requirements. The result and necessary metadata may be retained to demonstrate that a check occurred.

Bellas does not intend to keep raw identification files indefinitely. Access, retention, and deletion must follow necessity, security, and legal-obligation criteria.

We may share necessary data with providers supporting hosting, storage, communications, analytics, support, security, verification, and subscriptions. Providers must process data under appropriate instructions and safeguards.

Some providers may process data outside the user's country. Where required, Bellas will use recognized mechanisms, such as adequacy decisions or appropriate contractual clauses, and assess the relevant safeguards.

Data is kept only for as long as needed for the stated purposes, account maintenance, legal obligations, dispute resolution, and platform protection. Periods vary by data category and context.

When data is no longer needed, it will be deleted, anonymized, or isolated in line with applicable requirements.

Bellas applies technical and organizational measures proportionate to risk, including access controls, credential protection, logging, provider review, and incident-response procedures. No system is completely immune from risk.

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure where applicable.
• Request restriction of processing.
• Object to certain processing.
• Receive or transfer portable data where applicable.
• Withdraw consent at any time.
• Not be subject to solely automated decisions with significant effects, where applicable.

Where processing relies on consent, it can be withdrawn by contacting [PRIVACY CONTACT EMAIL]. Withdrawal does not affect processing lawfully completed before the request and may limit features that depend on that data.

You may complain to the competent data protection authority where you live, work, or believe an infringement occurred. Bellas welcomes the opportunity to review a concern first.

This page may be updated to reflect legal, technical, or operational changes. Material changes will be communicated appropriately, and the published version will show the information currently in effect.