Privacy Policy
Updated: 10/01/2025
General Information
FORSILIUS LIMITED, operating under the name "Nymph" ("Platform," "we," "us," or "our"), values your privacy and is committed to protecting your personal data.
This Privacy Policy ("Policy") outlines how we collect, use, and protect personal data from our Content Creators and Fans. This includes data from individuals featured in Content Creators' uploads and data processed through our business relationships.
Please review this Policy carefully to understand how we handle your personal data in connection with our Services. Your use of our Services indicates that you have read, understood, and agreed to these terms.
This Policy supplements our Terms of Use (including our Acceptable Use Policy), which govern your use of our Website and Services.
We process your personal data when you access our website at https://nymph.club ("Website") or interact with us through social media platforms (such as Twitter and Instagram) or other communication channels. We refer to these interactions collectively as the "Services" in this Policy.
For these Services, we act as the "data controller" of your personal data, meaning we determine how and why your data is processed.
Our Services are strictly for individuals aged 18 or older. By using the Services, you confirm that you meet this age requirement.
We rely on having accurate, up-to-date personal data. Please notify us of any changes during your relationship with us. You can update your information through your Platform account settings.
We may revise this Policy periodically. Changes become effective when posted on our Website. For significant updates, we'll make reasonable efforts to notify you through your account or other appropriate means.
Terms
"Personal Data"
Personal data means any information that can identify or be linked to a specific individual or household, whether directly or indirectly.
Types of Personal Data
We and our authorized third-party providers collect and process the following categories of personal data from Content Creators and Fans:
Customer Data
Collected directly from you:
- Full name
- Email address
- Telephone number
- Residential address
- Country of residence
- A copy of your government-issued identity document, accompanied by a "selfie" holding the document
Third-Party Onboarding Data
Collected by our third-party service providers for identity and age verification:
- A copy of your government-issued identity document
- A brief .gif image derived from your "selfie"
- Results of the age and identity verification process, including pass/fail status and reasons for failure (if applicable)
- Metadata associated with the verification process (e.g., timestamps of process start and completion)
Account Data
Collected and maintained to manage your Platform account:
- Profile name
- Password
- Avatars and headers associated with your account
- Information about your subscriptions, subscribers, and referrals
- Posts made on your account
- Comments on posts made from your account
- Chat messages between you and other Customers
- Customer support queries you submit
Financial Data
Collected to process payments and payouts:
- Electronic (digital) wallet credentials
- Payment card details
- Pay-out country
- Funds added to your wallet
Note: Payments for accessing Content Creator content are handled by third-party payment providers. We are not legally responsible for additional fees charged by payment platforms or financial institutions during these transactions.
Transaction Data
Data related to financial transactions on the Platform:
- Earnings
- Pay-out requests
- Payments made to and from your account with other Customers
- Records of failed payments
Technical Data
Collected to ensure proper functionality and security of the Platform:
- Internet Protocol (IP) address (and associated location data)
- Internet Service Provider (ISP)
- Device type and specifications
- Name and version of your browser
Usage Data
Collected to enhance the user experience and improve our Services:
We use cookies to enable browsing and access to specific pages on the Website. With your consent, cookies may also be used for:
- Performance: Analyzing user interactions to improve the Services and track referrals through unique codes for Content Creators.
- Functionality: Saving your logged-in status and preferences.
Additionally, we may collect de-identified, aggregated, or anonymized data that does not identify you. This type of data is not governed by this Policy, as it is not considered personal data.
Absence of Personal Data Provision
We require specific personal information to grant you access to the Services as outlined in our Terms of Use. We also need certain personal data to comply with applicable laws.
If you do not provide the requested personal data, we cannot grant you access to the Services or specific Platform features.
Third-Party Links
Our Platform may contain links to third-party websites, plugins, and applications. Clicking these links or enabling these connections may allow third parties to collect or share your personal data.
We are not responsible for the content, security, or privacy practices of these third-party services. Once you access them, you leave our Platform, and we cannot control their data protection practices.
We strongly encourage you to review these third parties' privacy and cookie policies to understand how they handle your personal data.
Onboarding Procedures
To maintain the integrity of our Customer base, we have established strict onboarding procedures to confirm that all Customers:
- Meet age requirements (minimum 18 years of age).
- Verify their identity.
Before creating an account, we will:
- Request Customer Data: Refer to the "Categories of Personal Data" section for details on the required information.
- Confirm Your Residence: We will verify your country of residence to ensure your lawful access to the Platform and its services.
- Collect Financial Data: This is necessary for Content Creator payments, earnings access, and fraud prevention.
Third-Party Age and Identity Verification
- A third-party provider collects a brief .gif image derived from a "selfie" and a photo of your government-issued identity document.
- Face recognition technology matches these images to confirm your age and identity.
Important Notes:
- We do not collect, receive, or access any Face Recognition Data. We only receive verification results (pass/fail and reasons for failure).
- Identity verification ensures compliance with our Terms of Use, specifically prohibiting access to underage individuals and those using false identities.
Fraud Prevention Measures
If our third-party providers detect fraudulent activities, such as the use of falsified documents, they may retain records of these incidents, including Face Recognition Data, for the purpose of identifying unlawful activities. This information may be shared with governmental agencies or authorities, in accordance with applicable laws.
By using our Services, you acknowledge and agree that:
- Your personal data may be transferred and stored in countries with data protection regulations different from your own.
- Your personal data may be disclosed to comply with local laws, including law enforcement or national security requirements.
Periodic Identity Verification
As an account holder, you may be asked to periodically verify your identity. If you have previously completed third-party age and identity verification, and where permitted by law, Face Recognition Data may be retained by the third-party provider. This allows for simplified authentication without requiring re-submission of your government-issued identity document.
If you wish to withdraw your consent for the retention of Face Recognition Data, you may contact us at [email protected]. Withdrawing consent will not impact your ability to complete future authentication processes. However, you may need to provide your government-issued identity document again during future verifications.
Lawful Basis for Processing Your Personal Data
We process personal data based on one or more of the following legal grounds:
1. Consent
Your consent is obtained in specific circumstances, including:
- Processing data related to facial recognition by third-party providers for age and identity verification.
- Age verification.
- Entering into agreements, such as the Terms of Use, at the start of your interaction with the Platform.
2. Contract Performance
When you use our Services, you enter into a contract with us under the Terms of Use. We process personal data as necessary to:
- Facilitate transactions between Fans and Content Creators.
- Process Content Creators' earnings.
- Enforce the terms of the contract.
3. Legitimate Interests
We may process personal data where it is necessary for our legitimate interests or those of a third party, such as:
- Investigating and addressing reports made under our DMCA takedown procedure to protect intellectual property rights.
- Monitoring and addressing potential security risks or violations of our Terms of Use.
4. Compliance with Legal Obligations
We process personal data as required to comply with applicable laws, regulations, and rules in jurisdictions where we operate.
5. Public Interest
We may process personal data to perform tasks in the public interest, such as:
- Reporting illegal activities to law enforcement or other governmental bodies.
Purpose and Legal Justification for Processing Personal Data
Consent-Based Processing
We rely on your consent for:
- Data analysis, system maintenance, reporting, and hosting to improve the security, performance, and functionality of the Services.
- Verifying Content Creators' and Fans' ages and identities (including the processing of Face Recognition Data).
- Performing age estimation in certain jurisdictions.
Contract-Based Processing
We process personal data to fulfill our contractual obligations, including:
- Account creation.
- Fan age verification (when not requiring third-party identity verification).
- Verifying government identity documents and maintaining records of the verification process.
- Hosting Content Creators' content and facilitating transactions between Fans and Content Creators.
- Providing technical support and responding to support requests.
- Communicating about the Services.
- Monitoring and moderating uploaded text, content, and livestreams for violations of our Terms of Use.
- Removing illegal or non-compliant content and, if necessary, suspending or deactivating Customer accounts.
Legitimate Interests-Based Processing
We rely on legitimate interests for:
- Maintaining records of banned Customers to prevent further access.
- Reporting illegal activities to relevant authorities.
- Preserving and sharing personal data for legal proceedings.
- Protecting rights and property of Customers, the Platform, and third parties.
- Monitoring for malicious or fraudulent activities to ensure system and Customer security.
- Supporting sponsorships and relationships with service providers, consultants, and other business partners.
Legal Obligations-Based Processing
We process personal data to:
- Remove illegal content and deactivate related Customer accounts.
- Comply with laws and regulations.
Additional Notes
- We will only use your personal data for purposes that align with the reasons for which it was collected unless there is a legal basis to use it for another compatible purpose.
- When relying on your consent, you have the right to withdraw it at any time. This withdrawal will not affect the lawfulness of processing conducted prior to the withdrawal.
Acquisition of Your Personal Data
We collect your personal data from the following sources:
1. Directly from You
This includes information you provide during:
- Account creation and usage of our Services.
- Updating personal details in your account settings.
- Communication with us (e.g., providing Customer Data or Account Data).
2. Automatically or Indirectly from You
This data is generated or collected as a result of your interaction with our Services, such as:
- Transaction Data.
- Technical Data.
- Usage Data.
3. Through Our Service Providers
We may receive personal data from third-party providers, such as:
- Third-Party Onboarding Data (e.g., from age and identity verification services).
- Specific Technical Data collected as part of their services.
Sharing Personal Data
We share your personal data with the following categories of third parties:
1. Third-Party Service Providers
These include providers of:
- IT and infrastructure support.
- Payment processing services.
- Customer support services.
- Content and text moderation services.
- Age and identity verification or age estimation services.
Purpose of Sharing:
We share personal data with these providers to enable our business operations and ensure functionality of our Services. This sharing is based on our legitimate interests.
2. Professional Advisers
This category includes:
- Legal advisors.
- Bankers.
- Auditors.
- Accountants.
- Consultants.
- Insurers.
Purpose of Sharing:
Personal data is shared with professional advisers to enable them to provide services to us. This is based on our legitimate interests in obtaining professional services.
3. Corporate Transactions
Personal data may be disclosed to relevant third parties in the event of:
- A potential sale.
- A merger or acquisition.
- Business reorganization.
- Group restructuring.
Purpose of Sharing:
We share personal data for evaluating and executing corporate transactions, which is based on our and the third parties' legitimate interests.
4. Group Companies
Personal data is shared within our group companies for:
- Centralized coordination.
- Management of global business operations.
Purpose of Sharing:
This is based on our legitimate interests in ensuring effective management of our business operations.
5. Relevant Authorities, Regulators, and Organizations
Personal data may be shared with:
- Governmental authorities.
- Law enforcement agencies.
- Tax authorities.
- Regulators.
- Certain non-governmental organizations.
Purpose of Sharing:
We share personal data with these entities to:
- Comply with legal obligations.
- Serve legitimate interests, such as reporting illegal content or addressing violations.
- Protect public interest, including ensuring the safety of our Customers and third parties.
Your Personal Data Rights
You have specific rights regarding the collection and processing of your personal data. These rights may vary depending on the applicable law but may include:
1. Right to Access
You have the right to request a copy of the personal data we hold about you and verify whether it is being processed lawfully.
2. Right to Rectification
You may request corrections or updates to your personal data if it is inaccurate or incomplete.
3. Right to Withdraw Consent
You can withdraw your consent for the processing of your personal data.
- Note: Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
4. Right to Deletion ("Right to Be Forgotten")
You may request the deletion or removal of your personal data.
- Note: We may not always be able to fulfill deletion requests due to specific legal or regulatory obligations.
5. Right to Restrict Processing
You may request that we suspend processing your personal data, for example:
- To verify the accuracy of the data.
- To determine the reason for its processing.
6. Right to Object to Processing
If we process your personal data based on legitimate interests, you may object if:
- There is something specific in your situation that makes you oppose processing on these grounds.
- Note: This right applies only in certain situations depending on the legal grounds for processing.
7. Right to Data Portability
You may request a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format.
- You may also request that we transfer this data directly to another party, where technically feasible.
8. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
How to Exercise Your Rights
To exercise your rights, contact us at [email protected].
Important Notes:
- Include sufficient information in your request to allow us to verify your identity and understand the nature of your request.
- In some cases, we may need additional personal data to confirm your identity, especially for sensitive requests.
- If a request is submitted by an authorized third party, provide documentation confirming their authority to act on your behalf (e.g., a signed authorization).
Retention of Personal Data
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy.
General Retention Period
Personal data is typically retained for 6 months after your account is deleted or deactivated, except in the following cases:
1. Earlier Deletion
Personal data will be deleted sooner if a shorter retention period is required by law.
2. Extended Retention
We may retain your personal data for a longer period for the following purposes:
- Compliance: To meet legal, regulatory, or record-keeping obligations (e.g., tax reporting, financial records).
- Investigation of Illegal Activities: To identify and report illegal activities, protect our Customers, and enforce our Terms of Use.
- Legal Proceedings: To defend ourselves in litigation or other legal claims related to your account.
- Third-Party Requests: To respond to valid requests from law enforcement, government agencies, or non-governmental organizations.
Retention Period Determination
The retention duration is assessed on a case-by-case basis, taking into account:
- The purpose for which the data was collected.
- Any applicable legal or regulatory requirements.
We ensure that personal data is stored only as long as reasonably necessary to achieve the purposes outlined in this Policy.
Additional U.S. State Privacy Disclosures
These U.S. State Privacy Disclosures ("U.S. Disclosures") supplement the information provided in our Privacy Policy and apply to residents of California, Colorado, Connecticut, Nevada, Utah, and Virginia.
Unless otherwise stated, all terms defined in this Policy retain their meanings in these U.S. Disclosures.
Scope
For the purposes of these U.S. Disclosures, "personal information" does not include:
- Publicly available information.
- Deidentified, aggregated, or anonymized information that cannot reasonably be linked to you.
No Sales for Targeted Advertising
- We do not sell personal information or share personal information for the purposes of targeted advertising.
Sensitive Information
The following data elements may be classified as "sensitive information" under certain state privacy laws:
- Username and password.
- Social Security number, driver's license number, or passport number.
- Government-issued identification numbers.
- Face Recognition Data (processed by third-party providers for age and identity verification).
We use sensitive information as outlined in the section "Lawful Basis for Processing Your Personal Data", ensuring compliance with applicable legal and contractual obligations, protecting user safety, and supporting the functionality of our Services.
De-identified Information
We may process personal data to create de-identified information that cannot reasonably be associated with an individual.
- De-identified information is maintained in its de-identified form, and we do not attempt to re-identify such data unless required by law.
Minors
Our Services are exclusively intended for individuals aged 18 or older. Individuals under 18 are not permitted to use the Services. By using the Services, you confirm that you are 18 years of age or older.
California Privacy Disclosures
In accordance with California law, we disclose the categories of personal data we collect, as described in the section "Types of Personal Data", and map them to California's defined categories:
Categories of Personal Data Collected
- Identifiers: Name, address, phone number, email, passport or government ID, account information.
- Customer Records: Driver's license number, passport number.
- Protected Classification Characteristics: Age, date of birth, gender.
- Commercial Information: Products or services purchased, usage of Services.
- Biometric Information: Face Recognition Data (processed by third-party providers; we do not collect or store this data).
- Internet/Network Information: Device information, logs, analytics.
- Sensory Information: Photos or videos uploaded to the Platform.
- Professional/Employment Information: Occupation, professional references.
- Other Personal Data: Communication preferences, customer service history, and data shared via social media or direct messages.
- Inferences: Data generated from usage of our Services.
Disclosure of Personal Data for Business Purposes
We may disclose personal data to:
- Service providers.
- Group and affiliated companies.
- Professional consultants (e.g., legal advisors, auditors).
- Other businesses (e.g., during corporate transactions).
- Relevant authorities or regulators (if required by law).
Sources of Personal Data
Personal data is collected from:
- You (e.g., during account creation or Service usage).
- Your device/browser when interacting with our Services.
- Business partners, affiliates, or third-party providers.
For more details, see the section "Acquisition of Your Personal Data".
Purpose of Data Collection
We collect personal data to:
- Fulfill contractual obligations.
- Comply with legal and regulatory requirements.
- Provide and improve our Services.
For more information, see the section "Lawful Basis for Processing Your Personal Data".
Notice of Financial Incentives
We do not use cross-site tracking technologies, nor do we sell or share personal data for cross-context behavioral advertising.
However, we offer a Referral Program where existing Customers can refer new users to the Platform. Referring Customers receive referral payments based on the referred Content Creator’s earnings.
- The Referral Program is governed by our Terms of Use, and all payouts are calculated as described in the program terms.
- Personal data related to referring Customers and referred Content Creators is processed in accordance with this Privacy Policy.
Exercising Your Rights
To exercise your rights under applicable U.S. state privacy laws, contact us at [email protected].
When submitting a request, please provide sufficient information to:
- Verify your identity.
- Understand and respond to your request.
If a third party submits a request on your behalf, they must provide evidence of their authorization to act for you (e.g., a signed document).
For questions about this Policy or how we process your personal data, please contact us at [email protected].