Privacy Policy

This Privacy Policy explains how Anlora collects, uses and protects personal data when you use meetanlora.com and the Anlora platform. It is designed to align with the General Data Protection Regulation (GDPR) and applicable Czech and EU data protection law.

The data controller for your account data (name, email, billing) is: Anlora (operations based in Prague, Czech Republic) Data Protection Contact: privacy@meetanlora.com When you use the Service to manage OnlyFans creator accounts on behalf of content creators, you (the agency/organization) act as the Data Controller for fan and subscriber data, and Anlora acts as the Data Processor. We process this data solely on your instructions and for the purpose of providing the Service. This processing is governed by our Data Processing Addendum at https://meetanlora.com/dpa, which is part of the Terms of Service. Questions: privacy@meetanlora.com.

We collect the following categories of personal data: Account information: your name, email address and organization details. (Legal basis: contract performance) How you found us: your optional answer to "How did you find Anlora?" and the website and campaign that linked you to us, used only to understand which channels bring agencies. (Legal basis: legitimate interest, Art. 6(1)(f) GDPR; you can object at privacy@meetanlora.com) Creator account credentials: the login details and session tokens of each creator account you connect, encrypted at rest. (Legal basis: contract performance) Usage data: dashboard activity, request logs, IP addresses and browser information. (Legal basis: legitimate interest in security and service improvement) Financial data: invoices, the revenue figures they are based on, and the cryptocurrency transaction details used to pay them. We do not take card payments. (Legal basis: contract performance) Content data: messages, subscriber lists, analytics and other content accessed through the Service. (Legal basis: contract performance)

We process your data for the following purposes: - Providing the Service: connecting creator accounts, AI messaging and analytics (Legal basis: contract performance, Art. 6(1)(b) GDPR) - Account management and support (Legal basis: contract performance, Art. 6(1)(b) GDPR) - Security: detecting and preventing fraud and unauthorized access (Legal basis: legitimate interest, Art. 6(1)(f) GDPR) - Improving the Service: analysing how it is used and how well it performs (Legal basis: legitimate interest, Art. 6(1)(f) GDPR) - Legal compliance: keeping billing records as tax law requires (Legal basis: legal obligation, Art. 6(1)(c) GDPR) - Anonymised statistics: statistics built from service metadata that identify no agency, creator or fan, as described in the Terms of Service (Legal basis: legitimate interest, Art. 6(1)(f) GDPR). Agencies can opt out, and creators and fans can object, by emailing hello@meetanlora.com - Product email: news about Anlora, only if you opted in (Legal basis: consent, Art. 6(1)(a) GDPR). You can unsubscribe at any time. Service email, such as invoices and security notices, is sent whether or not you opted in We do not sell your personal data and we do not use it for advertising.

Creator account credentials are encrypted at rest, with the encryption keys held separately from the database, and all data in transit is protected with TLS. The password is kept only while the creator account is connected, so that an expired session can be renewed, and it is used only for that. Disconnecting the account stops it being used, deleting your Anlora account erases it, and you can ask us to erase it at any time at privacy@meetanlora.com.

We share personal data only with the service providers that help us run the Service: - Hetzner Online GmbH (Germany): hosting - Our AI conversation provider and the AI model providers it uses: generating replies, which involves message content - Anthropic, PBC and OpenAI (US): AI tools used when reviewing conversations to improve reply quality. They are not used to train a model on that content - Cloudflare, Inc. (EU/US): network security, content delivery and encrypted backup storage - Bright Data Ltd (Israel): the dedicated proxy for each connected creator account - A verification service used when a creator account is connected - Resend (US): sending email - Telegram (UAE): internal operational alerts - Sentry (US): error monitoring - Google and Microsoft (EU/US): analytics on our website, only with your consent - Public blockchain networks: confirming that an invoice has been paid - OnlyFans and other platforms you connect: we act on the creator accounts you connect, on your instructions This is the current list of sub-processors. We will give at least 14 days' notice before adding or replacing a provider that processes fan data.

We keep personal data only for as long as we need it for the purposes above: - Account and content data: kept while your account is active. When you delete your account it is erased 30 days later, which leaves time to undo a mistaken deletion - Creator account credentials: kept while the creator account is connected, and erased when you delete your account or on request - Logs and analytics: kept for a limited period and then deleted or aggregated - Billing records: kept for as long as tax and accounting law requires - Backups: encrypted, kept for a short period for disaster recovery and then deleted. Erased data can remain in a backup until that backup expires You may request earlier deletion at any time (see Your Rights below).

As a data subject, you have the following rights: - Right of Access: Request a copy of all personal data we hold about you - Right to Rectification: Request correction of inaccurate personal data - Right to Erasure: Request deletion of your personal data - Right to Restriction: Request that we limit processing of your data - Right to Data Portability: Request your data in a structured, machine-readable format - Right to Object: Object to processing based on legitimate interest - Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time To exercise any of these rights, email privacy@meetanlora.com. We will respond within one month as required by GDPR Art. 12(3).

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit and at rest for sensitive data, access controls, separation of each customer's data, network protection and encrypted backups. No online service can be guaranteed to be completely secure. Access by our own staff: a small number of Anlora personnel can access customer and fan data where that is needed to operate, repair or secure the Service, or to answer a support request. They are bound by confidentiality. As the controller for fan data, you may restrict this by written instruction under the Data Processing Addendum: contact privacy@meetanlora.com.

We use two categories of cookies. Essential cookies (always active, no consent required): the session cookie (anlora_session) that keeps you signed in, a CSRF token that blocks cross-site request forgery, the consent cookie (anlora_consent) that stores your cookie choice for 180 days, Cloudflare's bot-detection cookie (__cf_bm), and, only if you arrived through a partner's referral link, the referral cookie (anlora_ref) that credits that partner for 30 days. None of these are used for advertising or cross-site tracking. Analytics cookies (optional, loaded only with your consent): Google Analytics (_ga, _ga_*) and, on our public marketing pages only, Microsoft Clarity (_clck, _clsk) for anonymised session replays and heatmaps. Text you type into forms is masked by default and Clarity never runs inside the logged-in dashboard. (Legal basis: consent, Art. 6(1)(a) GDPR.) If you decline, or simply ignore the banner, none of these cookies are set and no data is sent to Google or Microsoft. You can change or withdraw your choice at any time via "Cookie settings" in the page footer. Withdrawing consent removes the analytics cookies and stops all further analytics collection. We do not use advertising or cross-site tracking cookies. Our Cookie Policy at meetanlora.com/cookies lists every cookie individually, with what it does and when it expires.

Partners. If you join our affiliate program we process your account and contact details, your payout details, and data about the clicks on your referral link, in order to run the program, pay you, keep the records the law requires and prevent fraud. (Legal basis: contract, legal obligation, and legitimate interest in preventing fraud) Agencies that arrive through a partner. If your agency signs up through a partner's link or code, that partner sees a masked form of your agency name, how far your setup has got, and the commission they earned. They never see your creators, fans, chats or revenue details. (Legal basis: legitimate interest in running the referral program; you can object at privacy@meetanlora.com) The referral cookie (anlora_ref) is listed in our Cookie Policy.

We host the Service in the European Union (Germany). Some of the providers listed above are located outside the EU/EEA, or may process data there. Where a transfer leaves the EU/EEA without an adequacy decision, it relies on Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have collected data from a person under 18, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Czech Office for Personal Data Protection (UOOU) at www.uoou.cz, or the supervisory authority in your country of residence.

For privacy-related questions or to exercise your rights: Anlora (operations based in Prague, Czech Republic) Data Protection Contact: privacy@meetanlora.com General inquiries: hello@meetanlora.com