Privacy Policy

1. Introduction

Foxxx Fitzwell Entertainment LLC, doing business as OnlyFunds ("OnlyFunds", "we", "us", or "our"), respects your privacy. This Privacy Policy describes the information we collect through the OnlyFunds website, the OnlyFunds Command Center web application, the Fully Managed, Self Managed and Agency service tiers, the OnlyFunds content libraries, and any related software, applications, or APIs (collectively, the "Services"); how we use that information; who we share it with; and the choices and rights you have regarding your information.

This Policy is incorporated into our Terms of Service. EU/UK/Swiss residents should also review the GDPR Notice. California residents should review Section 13 (CCPA/CPRA Disclosures).

2. Who We Are & How to Contact Us

The data controller for personal information collected through the Services is Foxxx Fitzwell Entertainment LLC (DBA OnlyFunds), with a place of business at 6717 Vista Del Lago Ave, Land O' Lakes, FL 34637, United States. You can reach us at [email protected] for any privacy-related question, request, or complaint.

3. Information We Collect

We collect the following categories of personal information:

3.1 Information you provide directly

• Account & billing identifiers — billing email address, license key, and the creator username/handle on each platform (OnlyFans, ManyVids, LoyalFans) bound to your subscription.
• Proxy details — for each page you connect, the address, port, username and password of the proxy you supply so that we can route that page's traffic. See Section 3.4.
• Payment data — handled by our third-party payment processor(s). For card payments, OnlyFunds receives a token, the last four digits of your card, expiration date, brand, country, and the billing zip/postal code; full card numbers are not stored on OnlyFunds servers. Cryptocurrency payments, where offered, are processed by our digital-asset payment processor.
• Application & onboarding information — for Fully Managed engagements, the information you submit on our application forms or in onboarding interviews, including legal name, jurisdiction, content focus, and account access details required to deliver the service.
• Communications — the contents of emails, support tickets, or other messages you send us.
• Marketing opt-ins — your preferences for any optional newsletter or marketing communications.

3.2 Information collected automatically

• Usage telemetry — feature usage events, error reports, browser and application version, OS, and other diagnostic data used to maintain and improve the Services.
• Device & log data — IP address, user agent, language, timestamps, and request metadata generated when you interact with our website or APIs.
• Proxy egress IP — the IP address of the proxy through which a connected page's requests leave our systems, recorded in our operational logs so that a failed or blocked connection can be diagnosed.
• Earnings figure — for fee calculation, the Services read each connected page's net earnings for the applicable period from the figures that platform reports, and use that figure to calculate your fee for the period. For Self Managed and Agency pages the fee is a percentage of the last thirty days' net earnings, charged band by band with a monthly minimum; for Fully Managed pages it is a percentage of the prior calendar month's net earnings. The current bands are published on our pricing page. No other vault or message content is read for fee purposes (see Section 5).
• Cookies and similar technologies — see Section 9.

3.3 Information from third parties

• Payment processor — our payment processor(s) provide us with payment status, fraud signals, and dispute or chargeback notifications.
• Public creator page metadata — public information visible on a creator's page on a connected platform (display name, bio, post counts) when needed to verify a binding.

3.4 Proxy information

Each page you connect is operated through a proxy, so that the page presents a stable egress IP address to the platform. Except during a free trial, you buy that proxy yourself from a provider of your choosing and remain its customer; we do not resell proxies. To route your page we hold the proxy's host, port, username and password, and we treat them as personal data because they identify a connection associated with you.

• What we hold — the proxy host and port, the proxy username and password, which page the proxy is bound to, the last connection error recorded for it, and the date it was added.
• Why we hold it — to perform our contract with you. Without a working proxy the page cannot be operated at all, so this is necessary for the Services rather than optional.
• What we do with it — we use the credentials solely to open connections to the platform on that page's behalf, and to tell you when a proxy stops working. We do not use them for any other purpose, do not use them for any other page, and do not disclose them to any other customer.
• What we show back — the Command Center displays only the proxy's host and port and whether a proxy is set. Proxy passwords are never sent back to the browser or shown in the interface once submitted.
• How we store it — proxy records are held in our database on access-controlled infrastructure in the United States, reachable only by the application and by OnlyFunds personnel whose role requires it. See Section 8.
• How long we keep it — for as long as the page is connected. We delete a proxy record on your request, and when the proxy is withdrawn from our records.
• Trial proxies — a proxy we supply for a free trial belongs to OnlyFunds or its provider, not to you. Its credentials are not disclosed to you, and it is withdrawn and re-assigned when the trial ends.
• Rejected proxies — a proxy we cannot read or cannot connect through is rejected at the point you submit it and is not stored for use.

Your proxy provider is a third party with its own privacy practices. It will see the traffic it relays for you and will hold its own records about your use of its service. We are not responsible for what it does with that information; see Section 14.

4. How We Use Information

We use personal information to:

• provide, maintain, secure, and improve the Services;
• create and administer your account, validate your license, and bind it to a specific OnlyFans page;
• process payments, calculate performance-linked fees, send invoices and receipts;
• respond to support inquiries and operational requests;
• detect, investigate, and prevent fraud, abuse, security incidents, and policy violations;
• comply with legal obligations and enforce our Terms;
• send service-related communications (billing receipts, security notices, material changes to terms);
• with your consent, send optional marketing communications;
• aggregate or de-identify data for analytics, benchmarking, and product development.

5. What We Do NOT Do

• We do not sell your personal information.
• We do not sell, resell, or take a margin on proxies, and we do not share one customer's proxy with another customer.
• The Command Center does not scan, index, or scrape your fan messages or platform vault contents for any purpose other than carrying out the actions you have configured or requested. Content scheduling operates on the library items and links you expressly associate with your account.
• Messaging features (including "auto," "auto-send," "auto-reply," and "quick reply") are semi-automated and human-in-the-loop — a human reviews and sends each interactive message; the Services do not send messages or conduct conversations with fans autonomously.
• We do not target advertising based on your sensitive personal data.

6. How We Share Information

We share personal information only with:

• Service providers and processors who help us operate the Services under written data-processing agreements, including: (payments); our hosting and database providers; transactional email providers; error-tracking and observability providers.
• Your proxy provider — where you supply your own proxy, your page's requests are relayed through that provider's network, and the provider will see that traffic and keep its own records of it. The provider is your counterparty, not our processor, and we do not send it your account or billing information. Where we supply a proxy for a free trial, the provider is ours.
• The platforms you connect — OnlyFans, ManyVids and LoyalFans receive the requests we make on your page's behalf, including the proxy's IP address as the origin of those requests. Each platform is an independent controller of what it holds about your page.
• Professional advisors — accountants, auditors, lawyers, insurers, and bankers, where reasonably necessary.
• Authorities — where we believe in good faith that disclosure is required by law, lawful process, or to protect the rights, property, or safety of OnlyFunds, our customers, or any third party.
• Corporate transactions — in connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar event, subject to customary confidentiality protections.
• With your consent — for any other disclosure not described above.

7. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, accounting, audit, fraud-prevention, and dispute-resolution obligations. Specific retention periods:

• Account & billing records — at least seven (7) years after termination, or longer where required by tax law.
• Earnings snapshots — for the duration of the active subscription plus thirty-six (36) months for billing-dispute resolution.
• Support communications — up to thirty-six (36) months.
• Proxy credentials — for as long as the page they are bound to is connected; deleted on your request or when the proxy is withdrawn from our records. A trial proxy's credentials are ours and are re-assigned when the trial ends.
• Proxy connection logs — the egress IP and the last recorded connection error, for the operational period needed to diagnose faults.

Once retention ends, we delete or de-identify the data.

8. Data Security

We implement and maintain technical and organizational measures designed to protect personal information against unauthorized access, loss, alteration, or destruction. These measures include encryption in transit (TLS 1.2+), encryption at rest for sensitive fields, role-based access control, audit logging, regular dependency review, and background checks for personnel with access to customer accounts. No system is perfectly secure; we cannot guarantee absolute security.

Proxy credentials you supply are held so that the application can open connections with them, and are protected by the access controls above: they are reachable only by the application and by personnel whose role requires it, and are never returned to the browser or shown in the Command Center once submitted. If a proxy credential you gave us may have been exposed, change it with your proxy provider and submit the new one, and tell us at [email protected] so we can remove the old record.

9. Cookies & Similar Technologies

The OnlyFunds website uses strictly necessary cookies to maintain your session, security state, and your cookie and age-confirmation choices. These are required for the site to function and do not require consent. We do not currently use analytics or advertising cookies; if we introduce analytics cookies in the future, they will load only after you consent through our cookie banner, and you can decline them. We do not use third-party advertising or cross-site tracking pixels. The OnlyFunds Command Center uses local browser storage on your device to hold your interface preferences and your signed-in session.

You can configure your browser to block or delete cookies; doing so may affect how the Services function.

10. International Transfers

OnlyFunds is operated from the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States and other countries where we or our service providers maintain facilities. For transfers of personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, supplemented by additional measures where required. See our GDPR Notice for details.

11. Your Choices & Rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• object to or restrict certain processing;
• request data portability;
• opt out of optional marketing communications at any time;
• withdraw consent where processing is based on consent (without affecting processing already carried out);
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, email [email protected] from the address associated with your account. We respond within thirty (30) days, extendable by an additional two months for complex requests, and we will not discriminate against you for exercising your rights.

12. Children's Privacy

The Services are intended exclusively for adults aged eighteen (18) or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe we may have inadvertently collected information from a minor, contact us at [email protected].

13. CCPA/CPRA Disclosures (California Residents)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you specific rights regarding your personal information.

13.1 Categories of personal information

In the preceding twelve (12) months we have collected the following categories of personal information described in Cal. Civ. Code § 1798.140: identifiers; commercial information; internet or other electronic network activity information; geolocation data (approximate, derived from IP); professional information; account access credentials, including the credentials of a proxy you supply; and inferences drawn from the foregoing. The sources, business purposes, and recipients for each category are described in Sections 3, 4, and 6 above.

13.2 Sales & sharing

OnlyFunds does not "sell" personal information for monetary consideration as that term is defined under the CCPA/CPRA, and we do not "share" personal information for cross-context behavioral advertising.

13.3 Your California rights

• Right to know the categories and specific pieces of personal information collected.
• Right to delete personal information, subject to exceptions.
• Right to correct inaccurate personal information.
• Right to limit the use and disclosure of sensitive personal information.
• Right to opt out of the sale or sharing of personal information (we do neither, but you may still submit a request).
• Right to non-discrimination for exercising your rights.

13.4 Submitting a request

California consumers may submit requests by emailing [email protected]. We will verify your request using identifiers tied to your account. You may use an authorized agent; we will require proof of authorization.

14. Third-Party Links & Services

The Services may link to or interoperate with third-party services, including OnlyFans, ManyVids, LoyalFans, our payment processors, and the proxy provider you buy your proxies from. This Policy does not apply to those third parties, each of which has its own privacy practices. We encourage you to review them — in particular your proxy provider's, since it relays your page's traffic and keeps its own logs of doing so.

15. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be communicated through the Services or by email. Continued use of the Services after changes become effective constitutes acceptance of the updated Policy.

Effective date: May 13th 2026
Last updated: October 8th 2026

16. Contact

Foxxx Fitzwell Entertainment LLC (DBA OnlyFunds)
6717 Vista Del Lago Ave
Land O' Lakes, FL 34637, United States
Phone: +1 (813) 857-3335

Support: [email protected]
Billing: [email protected]
Legal: [email protected]
Privacy: [email protected]
General: [email protected]