Data Vault

Our Commitment to Discretion

Last updated: July 31, 2026

Contents

Beautiful People Only ("BPO", "we", "us", or "our") is committed to the highest standard of data privacy and user discretion. This Privacy Policy explains how we collect, protect, use, and handle your information across our platform.

1. Data Encryption

Beautiful People Only uses 256-bit AES encryption for all user data at rest and in transit. Your "Shadow" identity is stored in a partitioned server environment, isolated from standard site analytics. All passwords are hashed using bcrypt with a minimum cost factor of 12.

Payment data is processed exclusively through PCI-DSS Level 1 certified processors (Stripe) — we never store card numbers on our servers.

2. Non-Disclosure of Data (The No-Sale Promise)

We 100% guarantee that no user data — including names, IP addresses, browsing patterns, or payment histories — will ever be sold, rented, traded, or shared with third-party marketing entities. This is an absolute, unconditional commitment.

The only exceptions are:

  • Compliance with valid legal process (court orders, subpoenas)
  • Preventing imminent harm to life
  • With your explicit written consent

3. Information We Collect

Information You Provide

  • Name, email address, and payment details
  • KYC verification documents (creators)

Automatically Collected Data

  • IP address, browser type, and device information

Cookies & Similar Technologies

Used for essential platform functionality, session management, and security.

Shadow Members: Your activity data is stored in an isolated partition, separate from all standard analytics systems.

4. How We Use Your Information

We use your information to:

  • Operate and improve the platform
  • Process payments and payouts
  • Verify creator identities (KYC/AML)
  • Communicate service updates
  • Enforce our Terms of Service
  • Maintain platform security

5. Biometric Security & Consent

By enabling "Shadow Mode," users consent to the collection of biometric identifiers (FaceID/TouchID) used solely for the "Dead-Man Switch" security protocol. We do not store the biometric data itself — only the encrypted hash.

In compliance with the Biometric Information Privacy Act (BIPA):

  • We provide clear notice before collection
  • We obtain affirmative written consent
  • We do not sell or profit from biometric data
  • Data is destroyed when the purpose is fulfilled or within 3 years, whichever comes first

6. Data Retention

  • Account data: Retained for the lifetime of your account plus 30 days after deletion
  • Financial records: Retained for 7 years per tax and regulatory requirements
  • Shadow Mode data: Encrypted and partitioned, destroyed within 48 hours of account deletion

7. Your Rights

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Request account and data removal
  • Portability: Receive data in a portable format
  • Objection: Opt out of non-essential processing
  • Restriction: Limit how we process your data

8. The CC Protocol

For any data-related inquiries, Subject Access Requests, or "Right to be Forgotten" requests, users must contact:

With a mandatory CC to: bpmagonline@gmail.com

Requests that do not include the required CC will not be processed.

9. International Data Transfers

Data may be processed in jurisdictions outside your country. We ensure appropriate safeguards are in place per applicable data protection laws.

10. Changes to This Policy

We reserve the right to update this policy. Material changes will be communicated via email and platform notification. Continued use constitutes acceptance.

11. Contact