Privacy Policy
This policy describes what OF.ai keeps when a creator or an agency connects a model, why it is kept, who can see it and how it is deleted. It is written for the product as it actually works, not as a template.
What we store
Your OF.ai account (email, name, sign-in method), the OnlyFans session of each connected model (the signed-in browser state — never the password, which you type yourself in an isolated browser), fan conversations the AI took part in, the model’s content library with its descriptions and prices, the persona and its rules, the billing ledger (top-ups, monthly fees, commission) and the contact details you leave on this site.
Why we store it
To write to fans in the model’s voice, to sell her content at her prices, to remember what a fan said before, to show you every conversation, and to bill what the published pricing says. Visitor measurement on this site is used to see which pages and buttons lead to a connected model.
Who can see it
You and the people you invite into your workspace. Our operators see conversations and content only to investigate an incident or a support request you raised. Nothing is sold or shared for advertising.
Third-party services
OnlyFans (through the model’s own session and her own dedicated IP), the AI providers that generate replies (text and content descriptions are sent to them; no payment data is), Stripe for card payments, the TRON network for USDT top-ups, Telegram for notifications you enable, Resend for email, and Google for sign-in if you choose it. Each is governed by its own privacy terms.
Where the data lives and how long
In our own infrastructure and in cloud services under our account. An OnlyFans session is deleted the moment you disconnect or delete the model. Conversation history, the content library and the persona are deleted within 30 days of your request to delete the account; the billing ledger is kept as long as accounting rules require.
Cookies and measurement
The site asks for consent before setting analytics cookies and loads a session recorder only after it. A headline-experiment cookie and your consent answer are stored for the site to work the same way on your next visit; neither identifies you.
Your rights
You can export or delete your data, disconnect any model and close the account yourself in the workspace at any time. For anything the workspace does not offer, write to us and we will do it within 30 days.
Incidents and contact
If you believe a session or a conversation was accessed in a way you did not authorise, write to us immediately through the contact form or Telegram; we investigate every such report and tell you what we found.
AI providers
To write replies and describe content, the text of fan conversations, your persona and descriptions of your library are sent to third-party AI providers — at present OpenAI, and models we host ourselves. They receive no payment data and no OnlyFans session. We do not use your conversations or your content to train models.
Session recordings and operator notifications
With your consent, the cabinet records how you use it — clicks, scrolling, the screens you open; passwords are masked and never recorded — so we can see where people get stuck. These recordings are kept for 14 days. Our team receives notifications about new accounts and visits, including a short replay of the visit, in a private Telegram chat used only by our operators.
We send account emails — confirmation, password changes, receipts — that you cannot opt out of while you have an account, and a few onboarding and product emails that you can: every one of them carries an unsubscribe link, honoured immediately, and our postal address.
Security incidents
We protect your data with access controls, encryption in transit and an isolated browser per model. If a security incident affects your personal information, we notify you without unreasonable delay and no later than 30 days after we determine it, as Florida law (Fla. Stat. §501.171) requires, and tell you what happened and what we did.
Illegal content
OF.ai is for adults and for content made by verified adults. Content involving minors or non-consenting persons is not allowed; we report child sexual abuse material to the National Center for Missing & Exploited Children as U.S. law requires, and close the accounts involved.
Last updated: October 2026