Zillatech Ltd. — Privacy Policy
Last updated: 1 October 2026.
1. Introduction
This Privacy Policy explains how and why Zillatech Ltd. (“Zillatech”, “we”, “us”) collects, uses, shares and protects information relating to identified or identifiable individuals (“Personal Data”) when you visit or use our AI‑influencer‑generator platform (the “Service”). We process Personal Data in accordance with the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018. Unless otherwise stated, Zillatech is the data controller for all processing described in this Policy.
2. Controller & Contact Details
Controller: Zillatech Ltd.
Registered address: Leoforos Kappari 34, Blue Water Village, House 125, 5290 Paralimni, Cyprus
Contact (privacy): hello@fannabe.com
Data‑Protection Lead: Appointed internally; same e‑mail
3. Scope of this Policy
This Policy applies to:
• Visitors to https://fannabe.com and any sub‑domains;
• Registered users of the Service;
• Individuals who communicate with us via e‑mail, social media or support channels; and
• Individuals who submit a content report or takedown request, or who are the subject of one.
4. What Personal Data We Collect & Why
4.1 Data you provide directly
Account Data – e‑mail address, display name, password hash. Legal basis: performance of contract (Art. 6(1)(b) GDPR).
Payment Data – subscription and one-time credit-package payments, transaction references, refund records and payment-status information handled through Stripe and Fanvue. Legal bases: performance of contract (Art. 6(1)(b) GDPR) and legal obligations for bookkeeping (Art. 6(1)(c)).
Support Data – support messages, refund requests, transaction references and supporting material you send us. We use these to respond, investigate issues and handle refunds. Legal bases: performance of contract (Art. 6(1)(b)), legal obligations where applicable (Art. 6(1)(c)), and legitimate interests in resolving support issues (Art. 6(1)(f)).
Uploaded Media – we accept user-uploaded photos, videos and other supported media. We process uploads to provide the requested generation and editing features. Uploads are subject to AI-based checks and manual review to enforce our content rules and help prevent misuse. Uploaded media may contain personal information about you or other individuals. Only upload content that you have the right to use and provide for processing. Legal bases: performance of contract for the requested features (Art. 6(1)(b) GDPR) and legitimate interests in platform safety and abuse prevention for moderation (Art. 6(1)(f)).
Third-Party Sign-In Data – e‑mail address, display name and profile picture URL via Google or Discord OAuth (see Section 4.4). Legal basis: performance of contract (Art. 6(1)(b) GDPR).
4.2 Data we collect automatically
Usage Data – credit-use history, prompts, generation settings and timestamps, used to operate the Service and verify usage for billing and refunds. Legal basis: performance of contract (Art. 6(1)(b) GDPR).
Device & Log Data – IP address, user‑agent, device fingerprints, crash logs. Legal basis: legitimate interest in security and fraud prevention (Art. 6(1)(f) GDPR).
Cookie & Analytics Data – Google Analytics and Mixpanel cookies, site‑preferences cookie. Legal basis: consent via cookie banner (Art. 6(1)(a) GDPR).
4.3 Outputs
We log a copy of each AI Output tied to your user ID. We process these logs to (i) improve and retrain our models and (ii) showcase the Service in marketing materials. You may opt out of showcase re‑use at any time (Section 9).
4.4 Third‑Party Sign‑In
When you authenticate via Google or Discord, we receive your e‑mail address, display name and profile picture URL. We use this data solely to create and identify your account and personalise your experience. We do not access your contacts, calendars or any other data from these providers. You may revoke access at any time via Google (myaccount.google.com/permissions) or Discord (User Settings → Authorized Apps). Upon revocation, we retain only the data already stored as part of your Fannabe account, subject to the standard retention periods in Section 6.
4.5 Content Reports & Takedown Requests
When you report content through our Report Content process, we collect your e‑mail address, the content of your report and any supporting material you send. If you tell us that you are the person shown in the reported content, we may also ask for limited information to confirm this. We also process the reported content and the account details of the user who uploaded or generated it. We use this data to review and act on reports, enforce our Acceptable Use Policy, handle appeals, and meet our legal obligations, including reporting illegal content to the competent authorities. Legal bases: legitimate interests in platform safety, abuse prevention and protecting the rights of the people depicted (Art. 6(1)(f) GDPR), and compliance with legal obligations where applicable (Art. 6(1)(c)). We do not use information provided to confirm a reporter's identity for any other purpose.
5. How We Share Personal Data
We disclose Personal Data only to:
1. Payment services – Stripe and Fanvue for payments, transaction verification and refund handling, as applicable to the payment route you use;
2. Hosting infrastructure – Render for hosting and operating the Service;
3. Analytics & error‑monitoring vendors: Google LLC (Google Analytics) and Mixpanel Inc. Telemetry they process may be transferred to the United States;
4. OAuth identity providers – Google LLC and Discord Inc. receive authentication requests when you use third‑party sign‑in; we do not share your Fannabe usage data with these providers; and
5. Legal or regulatory authorities when required, including law‑enforcement authorities and recognised reporting bodies where we identify or receive reports of illegal content.
We do not sell or rent Personal Data. Any transfer of Personal Data outside the EEA is covered by Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework certification of the recipient.
6. Data Retention
Account & payment records – 6 years from the end of the relevant financial year (Cyprus tax law).
Logs & Outputs – up to 5 years, then either anonymised or deleted.
Support communications – 3 years after ticket closure.
Content reports & takedown records – 3 years after the report is resolved.
If litigation or regulatory investigation is reasonably anticipated, or where an authority requires us to preserve data, we may preserve data beyond these periods.
7. Security Measures
We employ ISO 27001‑aligned technical and organisational measures, including TLS 1.3 encryption in transit, AES‑256 at rest, least‑privilege access controls and 24/7 intrusion monitoring. We will notify the Cyprus Commissioner for Personal Data Protection and affected users without undue delay and, where feasible, within 72 hours of becoming aware of a data breach.
8. Your Rights
If the GDPR applies to you, you have the right to access, rectify, erase, restrict, object, and port your Personal Data, and to withdraw consent at any time. To exercise these rights, e‑mail hello@fannabe.com. We will respond within one month. You also have the right to lodge a complaint with the Cyprus DPA.
9. Marketing Opt‑Out & Output Re‑Use Choice
You can opt out of:
• E‑mail marketing – via the unsubscribe link;
• Showcase re‑use of your Outputs – toggle the “Do not showcase my content” setting in the Account page or contact hello@fannabe.com.
10. Children
The Service is intended for adults aged 18+. We do not knowingly process Personal Data of minors. If we learn that we have inadvertently collected such data, we will delete it.
11. Changes to This Policy
We may update this Policy from time to time. Changes take effect when posted on this page. The Last updated date will be revised accordingly, and your continued use of the Service after an update constitutes acceptance of the revised Policy.
12. Contact & Complaints
Questions about privacy? Contact hello@fannabe.com or write to our address above. EU residents may also contact the Cyprus Commissioner for Personal Data Protection (https://www.dataprotection.gov.cy).
