PRIVACY POLICY

STIMULUS AI LTD (trading as Only-Fans.AI) · Last updated: November 12, 2025


1. INTRODUCTION

This Privacy Policy explains how STIMULUS AI LTD (“Company,” “we,” “us,” or “our”), trading as Only-Fans.AI, collects, uses, and protects personal data when you access or use our websites, products, and services (collectively, the “Services”).

Our Services provide AI-powered infrastructure that allows users to create AI-generated media (images and videos) for personal and professional use. We do not host or distribute user-generated content publicly; we only process it on your behalf to deliver AI outputs. If you do not agree with this Privacy Policy, please discontinue use of our Services immediately.

2. COMPANY INFORMATION

  • Legal Entity: STIMULUS AI LTD
  • Trading Name: Only-Fans.AI
  • Company No.: 16413762
  • Registered Office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
  • Public Email: [email protected]
  • Website: https://only-fans.ai

3. AGE RESTRICTION AND GEOGRAPHIC AVAILABILITY

Our Services are strictly intended for adults 18 years or older. We do not knowingly collect information from minors.

Access is restricted to users physically located in the following countries:

US, CA, GB, AU, NZ, BR, MX, CL, CO, RS, CH, BA, AL, ZA

Users from all other regions are blocked via Cloudflare geo-access controls.

4. WHAT INFORMATION WE COLLECT

a) Information you provide

  • Name / display name or alias
  • Email address
  • Account credentials (encrypted)
  • Uploaded media (images / video / voice samples) for AI generation
  • Prompts and metadata related to avatar configuration
  • Billing or business information (if applicable)

All uploaded media are stored securely within our controlled Google Cloud environment. We never sell user data or use it to train public AI models.

b) Information collected automatically

  • IP address and country (via Cloudflare CF-IPCountry)
  • Device type, browser, OS, referring URLs
  • Session IDs, API usage logs, error and performance data
  • General location (city/region level only)

This data is used to maintain security, analyze usage, and improve stability.

5. ACCOUNT AUTHENTICATION (VIA GOOGLE SIGN-IN)

You may log in using Google Sign-In. When you do, Google shares with us your verified email address, name (if attached to your Google account), and optional profile photo. We never receive your Google password or access to other Google services.

Authentication tokens are stored securely and used only to maintain your login session. You can revoke our access at any time via Google Account → Security → Third-party access.

See Google’s Privacy Policy: https://policies.google.com/privacy.

6. HOW WE USE YOUR INFORMATION

  • Operate and maintain AI infrastructure
  • Authenticate and manage accounts
  • Generate requested AI media outputs
  • Provide customer support and service updates
  • Prevent fraud, abuse, and unauthorized access
  • Analyze aggregated system performance
  • Comply with legal and tax obligations

We do not sell personal data, use it for advertising, or train external AI models with it.

7. LEGAL BASES FOR PROCESSING (UK GDPR / US EQUIVALENTS)

  • Consent — for uploads and optional AI processing.
  • Contract — to fulfil our obligations in providing Services.
  • Legitimate interest — maintaining security and service integrity.
  • Legal obligation — compliance with law and financial records.

You may withdraw consent any time by emailing [email protected].

8. THIRD-PARTY SERVICE PROVIDERS

We use trusted providers under binding agreements:

  • Google Cloud / Drive — Storage & infrastructure
  • Cloudflare — CDN + security + geo-blocking
  • OpenAI — AI language/image generation
  • RunPod — GPU compute for model execution
  • Authentication (Google Sign-In) — User login
  • Billing providers — Payments / subscriptions

All partners comply with UK GDPR and confidentiality standards.

9. COOKIES AND TRACKING

  • Maintain session state and security
  • Remember user preferences (language/UI)
  • Collect basic first-party analytics for diagnostics

We do not use advertising or cross-site tracking cookies. You can manage cookies in your browser settings.

10. AI DATA PROCESSING

When you use AI features, your inputs (text, images, prompts) are processed by our AI infrastructure (OpenAI, RunPod):

  • Processing occurs only to generate the requested output.
  • Data is not reused for unrelated training.
  • Logs are retained temporarily for security and diagnostics.

You retain ownership of AI-generated content, subject to our Terms of Service.

11. DATA STORAGE AND INTERNATIONAL TRANSFERS

Your data may be processed in the UK, EU, or US, depending on provider location. Transfers outside the UK / EEA use Standard Contractual Clauses (SCCs) or equivalent mechanisms to ensure adequate protection.

12. SECURITY MEASURES

  • TLS/HTTPS encryption in transit
  • Encryption at rest (Google Cloud Storage, RunPod nodes)
  • Access controls and multi-factor authentication
  • Continuous monitoring and security auditing

No system is 100% secure; transmission of data online is at your own risk.

13. DATA RETENTION

  • Provide and support Services
  • Comply with laws and audit obligations
  • Resolve disputes and enforce agreements

Upon account termination or prolonged inactivity, data is securely deleted or anonymized, unless law requires longer retention.

14. USER RIGHTS

  • Access, correct, delete, or export your data
  • Restrict or object to processing
  • Withdraw consent at any time

To exercise these rights, contact [email protected]. UK residents may also contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.

15. DEVELOPER AND PARTNER RESPONSIBILITIES

  • Ensure their users are 18+ and consent to processing
  • Implement age verification where applicable
  • Comply with local laws and content rules
  • Prevent unlawful or harmful use of AI-generated media

16. U.S. STATE PRIVACY DISCLOSURES (SUMMARY)

We do not sell or share personal data for targeted advertising.

Residents of California, Virginia, Colorado, Connecticut, and Utah may request access, correction, deletion, and appeal rights by emailing [email protected].

We do not process sensitive information for marketing purposes.

17. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect operational or legal changes. The latest version is always available at https://only-fans.ai/privacy. Material updates will be communicated via email or in-app notice.

18. CONTACT INFORMATION

STIMULUS AI LTD (trading as Only-Fans.AI)
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
[email protected]