Privacy Policy
We know this category of service involves unusually sensitive data. This policy explains what we collect, why, and the controls you have. It applies to afterdark.ac and related services (the "Service").
1. What we collect
- Account data: email address, hashed password (or third-party sign-in identifier), age confirmation.
- Generation data: prompts, generated characters, images, video, and chat history you create, stored to your account.
- Billing data: handled by our third-party payment processor; we retain only what's needed for receipts and fraud prevention, not full card numbers.
- Technical data: IP address, device/browser information, and log data, retained only as long as needed for security, abuse prevention, and legal compliance.
2. What we do not do
We do not run third-party advertising trackers or ad pixels (e.g. no Meta Pixel, no Google Ads remarketing tags) on the Service, and we do not sell your browsing or generation data to data brokers or advertisers.
3. How we use data
- To provide and operate the Service, including generating and storing your content.
- To run automated and human content moderation, including detection of prohibited content (see our Acceptable Use Policy).
- To process payments and prevent fraud.
- To comply with legal obligations, including responding to lawful requests from authorities and reporting unlawful content where required.
4. Data retention
We retain account and generation data for as long as your account is active, plus a limited period afterward for legal, security, and fraud prevention purposes. You can request deletion at any time (see Section 6). Content flagged and preserved for legal reporting obligations (e.g. suspected CSAM referrals to NCMEC) is retained as required by law regardless of a deletion request.
5. Data security
We encrypt data in transit and at rest, restrict internal access to generation history on a need-to-know basis, and use a moderation pipeline designed to minimize human exposure to sensitive content wherever possible.
6. Your rights
Depending on your location (e.g. under GDPR or CCPA/CPRA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact privacy@afterdark.ac to exercise these rights.
7. Third parties
We share data only with service providers necessary to operate the Service (e.g. hosting, payment processing, age verification, content moderation/safety tooling), each bound by contractual confidentiality and data-protection obligations, and with authorities where legally required.
8. International transfers & jurisdictions
We may restrict access to the Service from jurisdictions where we cannot meet local age-verification or content-legality requirements.
9. Changes to this policy
We'll post material changes on this page with an updated effective date.