Privacy Policy

Last updated: April 22, 2026

1. Who we are

Velvetly (“we”, “us”, “our”) is an AI-powered creator management platform for adult content creators. Our service is available at velvetly.io. This platform is intended exclusively for users who are 18 years of age or older.

2. What data we collect

  • Account data: name, email address, hashed password (via AWS Cognito).
  • Profile data: bio, niche, target audience, content pillars, and profile URL that you voluntarily provide.
  • Voice profile data: sample messages you paste, plus messages you previously sent on your own OnlyFans/Fansly account, used only to train your personal writing style for draft generation.
  • Fan data synced from your creator account: when the Velvetly extension is installed, your fan list (usernames, display names, avatars, subscription dates) and aggregate earnings totals are synced from your own OnlyFans/Fansly account to your Velvetly dashboard. No other creator sees this data.
  • Fan conversation content: a short recent-history window of your chats (your messages and the fan’s) is kept inside your Velvetly account so the AI can draft replies that fit the conversation and so coaching suggestions have context. Older messages drop out of that window over time. Message content is not sold, shared, or used to train any AI beyond your personal voice profile.
  • Usage data: draft history, content calendar entries, and fan-tier classifications — all isolated per creator account.
  • Technical data: IP address, browser type, and session cookies for authentication.

3. How we use your data

  • To provide and improve the Velvetly service.
  • To generate AI-powered draft messages in your writing style.
  • To authenticate your account and protect against fraud.
  • To send transactional emails (verification codes, account notices).

We do not sell your data to third parties. We do not use your data to train AI models beyond your own account.

4. Data isolation

All creator data — including fan data, messages, and voice profiles — is strictly isolated per creator account. No data is shared between creators on the platform.

5. Third-party services

  • AWS (Amazon Web Services): hosting, database, authentication, and email.
  • Anthropic: AI model provider (Claude) for draft generation and voice analysis. Messages sent to Claude are not used for model training per Anthropic's API terms.
  • Stripe: payment processing. We do not store payment card details.

6. Chrome extension

The Velvetly Chrome extension requests permissions on onlyfans.com, fansly.com, and velvetly.io to operate on your behalf, against your own creator account. We are transparent about what that involves:

On click — when you press the Velvetly reply button

  • The current fan’s chat message and a short snippet of conversation history are read from the page and sent over HTTPS to velvetly.io, which forwards them to Anthropic’s Claude API to generate draft replies in your voice.
  • The conversation snippet is kept inside your own Velvetly account so the AI has context for the next draft and so coaching suggestions stay relevant; older messages roll out of that window over time. Anthropic does not retain or train on the content per their API terms.

In the background — while you’re signed in

  • Your fan list (usernames, display names, avatars, subscription dates), aggregate earnings totals, and post dates are synced from your own OnlyFans/Fansly account to your Velvetly dashboard, at most a few times per hour.
  • Your own previously-sent messages are sampled from your OnlyFans/Fansly account to build and refresh your personal voice profile for draft generation.
  • The extension reads your existing OnlyFans/Fansly session cookies via the browser’s chrome.cookies API to authenticate these requests against your own account. Those cookies stay on your device and are never transmitted to Velvetly or any third party.

What the extension does not do

  • It does not inject ads, track your browsing activity on other sites, or read pages outside of OnlyFans, Fansly, and velvetly.io.
  • It does not share data with any party other than those listed in section 5.
  • It does not contain remote code. All logic and behavior-determining configuration is bundled inside the extension package.

7. Data retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data by emailing privacy@velvetly.io.

8. Your rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, or delete your personal data, and to object to or restrict processing. Contact us at privacy@velvetly.io.

9. Cookies

On velvetly.io we set a single authentication cookie (velvetly-access-token) to keep you logged in. We do not use advertising or tracking cookies on our site.

The Velvetly Chrome extension additionally reads your existing OnlyFans and Fansly session cookies via the browser’s chrome.cookies API. These cookies are set by OnlyFans/Fansly themselves when you log in to their sites; the extension uses them locally to authenticate API calls against your own creator account. They are never transmitted to Velvetly or any third party.

10. Contact

Questions about this policy? Email us at privacy@velvetly.io.