Privacy Policy for BeCraved AI

"We," "Our," or "Us" refer to BeCraved AI, a trade name of Pixelheads B.V., registered in The Netherlands with the Chamber of Commerce under number 69959447, located at De Nieuwe Erven 3, 5431 NV Cuijk. Pixelheads B.V. is the controller of your personal data. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal information when you use our web application, BeCraved AI, and your rights regarding your data.

1. Definitions

• Personal Data: Any information relating to an identified or identifiable person, such as your username, email address, and information provided during registration and interactions.
• Processing: Any operation performed on Personal Data, whether automated or not, such as collection, recording, organization, storage, adaptation, retrieval, and deletion.
• Services: The services provided by BeCraved AI, including chat functionality with AI companions and related activities.
• Subscription: A paid arrangement allowing access to the full features of BeCraved AI.
• User: A person using BeCraved AI's services, including both registered and non-registered visitors.

2. Information We Collect

2.1 Personal Data

• Account Information: When you register, we collect your username, email address, and password, or the account details shared by Google, Discord or X if you sign in with one of them. You confirm that you are 18 or older when you enter the site and when you create an account.
• Profile Information: You may choose to provide additional information, such as your display name, birthday and preferences.
• Payment Information: For subscription services, payment information is collected via third-party payment providers and not stored on our servers. We receive the amount, date, status and a provider reference.
• Age Verification: Where the law of your country or state requires an age check before adult content, we ask you to verify your age with SafePassage S.A.S. (Colombia), an independent age-verification company. You give your selfie and, if asked, your ID directly to SafePassage, which handles them as a separate controller under its own privacy policy. We never receive your photo or ID. We keep only a record that you passed: the date and a reference to the check, deleted with your account.

2.2 Usage Data

• Conversations: We store your conversations with AI characters, including voice messages and call transcripts, to provide personalized interactions, memory, safety review, support, product quality analysis, and aggregate conversation analytics.
• Memories: Characters remember facts from your conversations so they can refer back to them. Memories are deleted together with your account.
• Generated Media: We store the images and videos you generate with AI characters, together with the prompts used to create them, so that you can find them again in your Media Vault.
• Live Cam Private Shows: If you start a private show, we store a recording of that show and a log of the actions you requested during it, with the time each one was requested. The recording is assembled from pre-produced clips of the AI character. It does not contain your camera, microphone or screen.
• Interaction Data: Information about how you interact with the app, such as the features you use, browser type, and timestamps.
• Device and Location Data: Your IP address, browser and device type. We use your IP address for security, fraud prevention, to show prices in your currency, to apply the right VAT and to apply the rules of your country or state. We derive your country and region from it; we do not track your precise location.

Conversations, generated media and private show recordings on BeCraved AI are usually sexually explicit and can reveal information about your sex life or sexual preferences. This is a special category of personal data under the GDPR. We process it only with your explicit consent, which you give when you enter the site, and we protect it with the controls described in section 9.

2.3 Cookies and Tracking Technologies

We use strictly necessary cookies to keep you signed in and secure. Analytics (PostHog) and marketing cookies are only used if you accept them in our cookie banner. See our Cookie Policy for details.

3. How We Use Your Information, and Why We May

• To Provide the Services: user authentication, AI conversations, voice, memories, generated media and storing your history. Legal basis: performance of our contract with you, and your explicit consent for intimate content.
• Payment Processing: managing subscriptions and purchases. Legal basis: performance of our contract.
• Tax and Accounting: keeping payment records. Legal basis: legal obligation.
• Safety and Security: automated moderation of messages and image requests, preventing abuse and fraud, protecting minors, crisis support, and handling removal requests. Legal basis: legitimate interest, legal obligation, and your explicit consent for intimate content.
• Customer Support: responding to inquiries and providing assistance. Legal basis: performance of our contract.
• Service Emails: account, billing and renewal notices. Legal basis: performance of our contract.
• Marketing Emails: news and offers about BeCraved. Legal basis: legitimate interest for existing customers, or consent. You can unsubscribe at any time.
• Analytics: using PostHog to improve our website and services. Legal basis: consent for analytics cookies in your browser; legitimate interest for basic, pseudonymous events on our servers (such as sign-ups and purchases).
• Conversation Quality and Churn Analysis: analyzing conversation content and related account events to understand product quality, recurring topics, user needs, safety issues, and reasons users stop using paid features. Access to raw conversation text is restricted to authorized personnel and logged. Legal basis: your explicit consent.

Moderation is automated: a message or image request that breaks our rules may be blocked. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. If you think a block was wrong, contact us.

4. Your Rights

Under the General Data Protection Regulation (GDPR) you have the following rights. We honour them for every user, wherever you live:

• Right of Access: You can request a copy of your personal data.
• Right of Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure: You can delete your account yourself in your settings, or ask us to delete your data.
• Right to Restrict Processing: You can ask us to stop processing your data under certain circumstances.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on our legitimate interest, including marketing.
• Right to Withdraw Consent: You can withdraw your consent at any time. Because intimate conversations are the core of the Services, withdrawing your consent to that processing means deleting your account.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with a data protection authority, in the Netherlands the Autoriteit Persoonsgegevens, or the authority where you live.

5. Retention of Personal Data

We keep your account, conversations, memories and generated media for as long as your account exists, so that your companions can remember you, unless you delete them earlier. Payment records are kept for as long as tax law requires (in the Netherlands, seven years). Security logs are kept for a limited period.

5.1 Private Show Recordings

A recording of a live cam private show is deleted 12 months after your last active subscription ends. The log of the actions requested during a show is deleted 30 days after the recording is produced. You can also delete any of your recordings yourself at any time from your Media Vault, which removes both the video file and its record.

5.2 Deleting Your Account

When you delete your account, we permanently remove your conversations and the memories built from them, your generated images and videos including the files themselves, your private show recordings and action logs, your relationship and progress data, and your sign-in sessions. This happens straight away, not after a waiting period.

A limited set of records is kept because we are legally obliged to keep them, and your account reference is removed from them first:

• Payments, subscriptions and coin transactions: amounts, dates and provider references are kept for tax and accounting purposes, for as long as tax law requires. The link to your account is removed, along with the IP address and browser details stored on payment records.
• Affiliate records: if you took part in our affiliate program, commission and payout history is kept to settle those obligations. Your payment details are erased and the link to your account is removed.
• Administrative and security logs: kept for platform security and accountability, with your account reference removed.

6. Marketing Practices

Users can opt-out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us at [email protected]. We never share your conversations or generated media for marketing. If you accept marketing cookies, we may tell advertising partners such as Meta that a visit, sign-up or purchase came from one of their ads, so we can measure our advertising.

7. Sharing Your Information

We do not sell your personal data. We share it only with service providers who process it on our behalf and under our instructions:

• Hosting and Storage: DigitalOcean (servers in the Netherlands), Cloudflare (media storage and delivery), Amazon Web Services (backups and older media) and Qdrant (memory search).
• AI Conversation and Voice: OpenRouter and the model providers it routes to, DeepInfra, Anthropic, OpenAI, Google and ElevenLabs. Your messages are sent to these providers to generate replies, voice and moderation.
• AI Images and Video: Atlas Cloud, Siray, ModelRush, ZenCreator and RunPod, which receive image and video prompts, and Tinify for image compression.
• Payments and Tax: Epoch (card payments), NOWPayments and CoinGate (crypto payments) and Vatstack (VAT rates).
• Email: Resend and Brevo.
• Analytics and Consent: PostHog (hosted in the EU), Google Tag Manager, CookieScript, and IP location lookup services (such as ip-api) for country and currency.
• Age Verification: where an age check is required, SafePassage S.A.S. (Colombia). We share nothing with it; you give it your selfie or ID directly.
• Authorities: when the law requires it, or to protect the safety of a person.
• Third-Party Links: Our website contains links to third-party websites, such as social media platforms, which may collect their own data. We are not responsible for their privacy practices.

8. International Data Transfers

Your account details and conversations are stored on servers in the Netherlands. Several of the providers above, including our AI providers and Cloudflare, are located in the United States or process data there. When we transfer personal data outside the European Economic Area, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses. You can ask for more information at [email protected].

9. Data Security

We use industry-standard encryption (TLS/SSL) to protect your personal data during transmission. However, no online system can guarantee complete security.

Conversation content is encrypted at rest. When authorized personnel or internal analytics tooling access conversation content for the purposes described in this policy, access is limited by role, requires a stated purpose for raw-message review, and is logged for accountability.

10. Children

BeCraved AI is for adults only. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we close it and delete its data. If you believe a minor is using BeCraved AI, please tell us at [email protected].

11. Change of Purpose

If we need to use your personal data for a purpose other than originally intended, we will notify you and ask for your consent if necessary.

12. Data Breach Notification

In the event of a data breach that may affect your personal data, we will notify you as required by law. The legal term is typically that notification must happen "without undue delay" and, where feasible, within 72 hours of becoming aware of the breach, in compliance with GDPR.

13. Contact Us

If you have any questions about this privacy policy or your data, please contact us at:

For specific privacy-related inquiries or to exercise your data protection rights, you can contact our Data Protection Officer (DPO) at:

[email protected]