Privacy Policy

1. Who we are and what this covers

Thrilled Agency ("we", "us") is an EU-based OnlyFans management agency. This policy explains what personal data we collect through thrilledagency.com and in the course of our management services, why we collect it, who receives it, how long we keep it, and the rights you have. It applies to visitors, people who apply or refer a creator, and creators we manage.

2. What we collect

When you apply through our website

• Your name, email address, phone number (including WhatsApp) and Instagram handle; whether you already have an OnlyFans account and which monthly revenue bracket it falls in, so we can judge fit; and anything you choose to write in the message field.
• Anything you write in the optional message field.
• The form is delivered to us by our hosting provider, Netlify, and arrives in our email inbox.

When you refer a creator

• Your name and phone number, so we can pay your commission and keep you updated.
• The name, handle or link of the creator you refer, plus any notes you add. Only refer someone whose details you are allowed to share; we will tell them where the referral came from if they ask.

When you become a client

• Contact details, identity documents where a platform or the law requires them, and the information from your onboarding call (goals, boundaries, history).
• Access to your creator accounts as agreed in your service agreement, including content, fan conversations, subscriber data and revenue statistics.
• Payout and bank details needed to operate the revenue share, and the agreement and invoices themselves.
• Communications with your manager and our team.

When you visit the website

• Our hosting provider (Netlify) records server logs, including IP address, browser and pages requested, for security and reliability. We do not use them to identify visitors.
• With your consent only: Google Analytics for anonymous statistics on all pages, and the Meta Pixel on our application page to measure our ads. Details, including how to refuse or change your choice, are in the Cookie Policy.

3. Why we use it and on what legal basis

• Handling your application and contacting you about it by phone, WhatsApp or email. Basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to enquiries (Art. 6(1)(f)). We do not send newsletters or marketing messages; contact is limited to your application and, for clients, to the service.
• Delivering the management service: chatting, content planning, promotion, account and pricing management, leak monitoring and reporting. Basis: performance of our contract with you (Art. 6(1)(b)).
• Revenue share, invoicing and accounting. Basis: contract (Art. 6(1)(b)) and our legal obligations under applicable tax and accounting law (Art. 6(1)(c)).
• Protecting your accounts and content, including DMCA takedowns. Basis: contract and legitimate interest (Art. 6(1)(b) and (f)).
• Website statistics and ad measurement. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time via Cookie settings.
• Paying and managing referrals. Basis: contract with the referrer (Art. 6(1)(b)) and our legitimate interest in preventing fraud (Art. 6(1)(f)).

Because our services relate to adult content creation, information you share with us as a client may reveal information about your sex life or sexual orientation, which the GDPR treats as a special category of data. We process such information only with your explicit consent, given when you sign your service agreement (Art. 9(2)(a)), and only to the extent needed to run your account. You can withdraw that consent by ending the agreement.

4. Your fans' data

When we manage your account we handle messages and information about your subscribers on your behalf and on your instructions, as set out in your service agreement. You remain responsible for your page and for complying with the platform's terms; we act for you, use fan data only to run your account, and our chat team members are bound by confidentiality. We do not use fan data for our own purposes or share it with other creators.

5. Who receives your data

• Our team and vetted contractors (your manager, chatters, content and growth staff), under written confidentiality obligations and with access limited to the accounts they work on.
• Netlify, Inc. (United States): hosts the website and delivers form submissions to us.
• Google: our email inbox (Google Workspace) where applications arrive, and Google Analytics if you consent to it.
• Meta: WhatsApp for conversations you choose to have with us there, and the Meta Pixel on our application page if you consent to it.
• Banks and payment providers used to operate the revenue share and referral payouts.
• Authorities where the law requires it, and professional advisers such as our accountant under confidentiality.
• A buyer or successor if the business is transferred, on the same terms as this policy.

We never sell personal data and we do not share it with other agencies, advertisers or data brokers.

6. International transfers

Some of the providers above are in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified (Google, Meta) and on the European Commission's Standard Contractual Clauses otherwise (Netlify). You can ask us for a copy of the safeguards in place.

7. How long we keep it

• Applications and referrals that do not lead to an agreement: 12 months after our last contact, then deleted.
• Client data: for the duration of the service agreement, then deleted or returned, except for records we must keep under applicable tax and accounting law, which are retained for the statutory period and then deleted.
• Account access and credentials: revoked on the day the agreement ends.
• Website server logs: a short period defined by our hosting provider for security. Google Analytics data: up to 14 months. Your cookie choice: 12 months.

8. Security

We use encrypted connections, access controls, individual credentials, two-factor authentication where platforms allow it, and confidentiality agreements with everyone who touches client accounts. No system is perfectly secure; if a breach affecting you ever occurred we would tell you and, where required, the supervisory authority without undue delay.

9. Your rights

Under the GDPR (and the UK GDPR if you are in the United Kingdom) you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct it if it is wrong or incomplete.
• Delete it, unless we must keep it by law or to defend a claim.
• Restrict how we use it, or object to processing based on legitimate interests.
• Provide it to you or another provider in a portable format.
• Withdraw consent at any time, without affecting what was done before.

Email contact@thrilledagency.com and we will respond within one month. You can also complain to a data protection supervisory authority: the authority of the EU country where we are established, the authority where you live, or in the UK the ICO.

10. California and other US residents

We do not sell personal information and do not share it for cross-context behavioural advertising, except that the Meta Pixel on our application page can be considered "sharing" under California law; it runs only if you accept marketing cookies, and we honour Global Privacy Control signals as an opt-out. California residents may ask us what we hold, request deletion or correction, and will not be treated differently for exercising those rights. Use the contact address below.

11. Age

Our services and this website are for adults aged 18 or over. We do not knowingly collect data from anyone younger and will delete it if we become aware of it.

12. Links to other sites

Our website links to other services, including OnlyFans and social platforms. Their privacy practices are their own; please read their policies.

13. Changes to this policy

We will post any changes here with a new date at the top. For changes that affect how we use client data we will also tell active clients directly.

14. Contact

Thrilled Agency. Email: contact@thrilledagency.com. Please put "Privacy" in the subject line so we can prioritise it.