Privacy Policy | Maison d'Amour

This Privacy Policy explains how Maison d'Amour collects, uses, stores, and shares personal information when you use the Platform, including when identity or business verification is provided through Sumsub.

1. Information We Collect

Account information: name, email address, password security data, roles, preferences, and account status.
Adult-access and trust information: age declarations, declaration version and time, date of birth where requested, identity, selfie, liveness, age or business review status, and related moderation outcomes.
Mobile verification information: phone number, OTP request and verification times, delivery or verification status, consent wording version, consent time, domain, locale, and hashed IP and device/browser evidence.
Profile and media information: public profile fields, availability, rates, photos, videos, stories, private-media settings, and access requests.
Technical, registration, and usage information: registration and login IP addresses, a keyed IP fingerprint, registration domain, device and browser information, session and trusted-device evidence, security logs, cookies, analytics choices, and interaction events.
Billing information: purchases, subscription state, invoices, and limited payment metadata supplied by payment providers.

2. How We Use Information

We use information to operate accounts and profiles, apply adult-access controls, verify contact details, deliver security codes, moderate content, prevent fraud and exploitation, provide support, process Platform purchases, personalise permitted features, keep audit records, and comply with legal obligations.

3. Sumsub Identity, Age, and Business Verification

Phone verification confirms control of a mobile number; it does not establish a person's age or identity. Maison keeps age declarations and stronger identity or age-assurance checks separate from SMS consent and may request additional evidence for higher-risk features.

Maison uses Sumsub, provided by Sum and Substance Ltd and relevant affiliates, for configured identity, age, liveness, fraud, and business checks. Maison generally determines why a Platform check is required and which available verification level applies. Sumsub processes verification information under its contract with Maison and its applicable service privacy notice; the parties' precise legal roles may differ by processing activity and jurisdiction.

Depending on the configured check, Sumsub may process identity-document images and data, date of birth, nationality, address, selfie, video, audio or liveness evidence, facial characteristics or biometric templates, IP address, device and approximate-location signals, company records, screening results, and fraud or risk indicators. Sensitive or biometric information is processed only where a lawful basis exists and consent is obtained where required.

Maison ordinarily retains the Sumsub applicant and external reference, applicant type and level, status, review answer, reject or risk labels, moderation or client comments, correlation references, timestamps, payload digests, and encrypted webhook event records. Maison's hosted integration is not designed to copy raw identity-document or selfie images into the Maison application database. Authorised staff may nevertheless view information made available through Sumsub where necessary to review a decision, investigate fraud, provide support, or comply with law.

Sumsub and automated risk signals assist, but do not guarantee, verification or safety. Maison keeps final Platform enforcement under authorised human control where required and permits a user to request review through support.

4. SMS Consent and Communications

Evidence of consent to receive a requested transactional verification code is stored separately from age declarations, legal-document acceptances, cookie choices, and any future marketing preference. Requesting an OTP does not subscribe you to promotional SMS.

We do not sell or share mobile numbers or SMS opt-in records with third parties for their own marketing. We may provide the information needed to messaging providers, telecommunications carriers, fraud-prevention services, and regulators solely for delivery, security, troubleshooting, and compliance.

5. Public and Private Content

Information published on a public profile can be viewed and copied by others. Private or request-only original media is access-controlled, but no online system can guarantee that an authorised viewer will not capture or misuse content. Preview images may be generated and displayed according to the selected privacy mode.

6. Legal Bases and Regional Rights

Where applicable, we process information to perform a contract, meet legal obligations, pursue legitimate interests in safety and Platform operation, and act on consent where consent is required. Privacy rights vary by jurisdiction and may include access, correction, deletion, restriction, objection, portability, and withdrawal of consent.

7. Sharing and Service Providers

We may share necessary information with hosting, storage, email, SMS verification, analytics, moderation, identity-verification providers including Sumsub, support, payment, and security providers acting for Maison. We may also disclose information where law requires it or where reasonably necessary to protect people, rights, or Platform integrity.

We do not sell identity documents, biometric information, phone numbers, SMS consent records, or registration security evidence. Service providers may not use information for their own marketing merely because they process it for Maison.

8. Retention

We retain information only as long as reasonably necessary for the purpose collected, account and security operation, consent evidence, legal compliance, dispute resolution, and enforcement. Retention periods differ by record type. Registration and login security evidence may be retained for the life of an active account and for a limited period afterward where needed to investigate fraud or defend claims. Some audit, consent, billing, verification, and safety records may remain after account closure where law or legitimate risk-management needs permit.

Where information is no longer required, we delete, de-identify, or securely isolate it in accordance with applicable law and operational backup cycles. Sumsub applies its own retention and deletion rules to information in its systems, subject to Maison's instructions, legal obligations, and its service privacy notice.

9. Security and International Processing

We use reasonable technical and organisational safeguards, access controls, encryption for selected high-risk records, keyed IP fingerprints, and audit records. Registration IP and registration-device evidence are restricted account-security fields and are not returned in ordinary user serialization or displayed publicly. No system is completely secure.

Information may be processed in countries where Sumsub and our other service providers operate. We use contractual and other safeguards required by applicable law, but overseas recipients may be subject to different privacy and government-access rules.

10. Cookies and Analytics

Essential cookies support security and operation. Optional analytics and marketing technologies are controlled through cookie preferences where required. SMS consent is not inferred from cookie consent.

11. Children and Minors

The Platform is not for anyone under 21. We do not knowingly permit accounts for people under 21 or content depicting anyone under 21. If we reasonably suspect underage access or content, we may restrict the account, request evidence, preserve necessary records, and report the matter where required.

12. Requests and Contact

For privacy questions, access or correction requests, deletion requests, objections, or a review of a verification-related restriction, email admin@maisondamour.club. We may need to verify your identity before completing a request and may lawfully retain limited fraud, consent, billing, or legal evidence after other account data is deleted.

13. Changes to This Policy

We may update this Policy when verification providers, legal requirements, or Platform practices change. Material changes will be published with a new version or effective date and, where required, brought to affected users' attention.