Privacy Policy
1. Data Controller
The data controller responsible for processing personal data in connection with EpicBDSM (the “Platform”) is the Operator of EpicBDSM, an independent online platform dedicated to AI-generated video content.
The Operator is established within the European Union and processes personal data in accordance with applicable Czech and European Union law.
2. EpicBDSM Platform
EpicBDSM is an independent creative project focused exclusively on digitally generated and AI-generated video content exploring BDSM, historical punishment, ritual, power, submission, restraint, and dramatic storytelling.
The Platform may provide free and paid Content as well as services allowing registered creators to publish and monetize eligible Content.
3. Contact Information
For questions, requests, or concerns regarding privacy and personal data, users may contact the Operator by email at epicbdsm@proton.me.
The Operator may also be contacted through the following public channels: Reddit at reddit.com/u/epicbdsm, X at x.com/epicbdsmcom, and DeviantArt at deviantart.com/epicbdsm.
4. Legal Basis
Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable Czech legislation.
Depending on the circumstances, processing may be based on contractual necessity, legitimate interests, consent, or compliance with a legal obligation.
1. Account Registration
When a user creates an account, the Operator may process the email address, nickname, password-related security information, account status, and other information necessary to create and maintain the account.
2. Platform Usage
The Operator may process technical and usage information relating to the use of the Platform, including login activity, accessed features, transactions, Content interactions, and other service-related information.
3. Technical Information
The Platform may automatically process technical information such as IP address, browser type, device information, operating system, approximate location derived from technical data, timestamps, and server logs.
This information may be used for security, troubleshooting, performance monitoring, and operation of the Platform.
4. Payments
When users purchase credits, subscriptions, or other paid services, payment-related information may be processed as necessary to complete and document the transaction.
Payment card details may be processed directly by the applicable payment provider rather than stored by the Operator.
5. Communications
If users contact the Operator by email or through other communication channels, the Operator may process the information contained in the communication, including contact details and the content of the message, in order to respond and provide support.
6. User-Generated Content
Where users upload or publish Content through the Platform, the Operator may process the Content and associated metadata as necessary to host, display, distribute, moderate, secure, and operate the Platform.
The Operator does not request unnecessary personal information as part of the Content itself.
1. Providing the Platform
Personal data is processed to create and manage user accounts, provide access to Platform features, deliver purchased Content, manage credits, and provide other services requested by users.
2. Security and Fraud Prevention
Technical and account information may be processed to protect the Platform, detect unauthorized access, prevent fraud and abuse, investigate security incidents, and maintain the integrity of the service.
3. Payments and Accounting
Transaction and payment-related information may be processed for payment processing, transaction verification, accounting, taxation, fraud prevention, and compliance with applicable legal obligations.
4. Communication and Support
Personal data may be processed to respond to inquiries, resolve account or payment issues, handle complaints, and communicate important information relating to the Platform.
5. Platform Improvement
Technical and aggregated usage information may be used to monitor performance, identify problems, improve functionality, and develop new features.
Where possible, information used for analytical purposes is aggregated or otherwise minimized.
1. Service Providers
The Operator may share personal data with trusted third-party service providers where necessary to operate the Platform.
These may include hosting and infrastructure providers, payment processors, email providers, analytics providers, security services, and other technical service providers.
2. AI and Technical Services
Certain Platform functions may rely on third-party AI, hosting, storage, processing, or other technical services.
Where personal data is processed by such providers, the Operator takes reasonable steps to ensure that appropriate contractual and data protection safeguards are in place where required by applicable law.
3. Legal Requirements
Personal data may be disclosed where necessary to comply with applicable law, court orders, lawful requests from public authorities, or to establish, exercise, or defend legal claims.
4. No Sale of Personal Data
The Operator does not sell users' personal data as a commercial product.
Personal data is shared with third parties only where reasonably necessary for the operation of the Platform, provision of services, legal compliance, security, or other legitimate purposes described in this Privacy Policy.
1. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected, including providing the Platform, maintaining accounts, processing transactions, resolving disputes, preventing abuse, and complying with legal obligations.
2. Account Deletion
Users may request deletion of their User Account and associated personal data, subject to applicable legal obligations and legitimate reasons for retaining certain information.
Some information may need to be retained for accounting, legal, security, fraud-prevention, or dispute-resolution purposes.
3. Data Security
The Operator applies reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no internet-based service can guarantee absolute security.
1. Access and Rectification
Subject to applicable law, users have the right to request access to their personal data and correction of inaccurate or incomplete information.
2. Erasure
Users may request deletion of their personal data where the legal requirements for erasure are met.
This right is subject to statutory exceptions, including situations where the Operator is required to retain certain information.
3. Restriction and Objection
Users may have the right to request restriction of processing or object to certain processing activities, including processing based on legitimate interests, where the conditions of the GDPR are satisfied.
4. Data Portability
Where applicable under the GDPR, users may request their personal data in a structured, commonly used, and machine-readable format and may request its transmission to another controller.
5. Withdrawal of Consent
Where processing is based on consent, users may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
6. Exercising Your Rights
Requests concerning personal data should be sent to epicbdsm@proton.me.
The Operator may request reasonable information necessary to verify the identity of the person making the request and protect personal data from unauthorized disclosure.
7. Right to Lodge a Complaint
Users have the right to lodge a complaint with a competent data protection supervisory authority if they believe that their personal data has been processed unlawfully.
In the Czech Republic, the competent supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
1. Use of Cookies
The Platform may use cookies and similar technologies necessary for account functionality, security, preferences, analytics, and other legitimate purposes.
Where required by applicable law, non-essential cookies will only be used following the user's consent.
2. Cookie Information
Further information concerning the types and purposes of cookies used by the Platform is provided in the Platform's Cookie Policy and, where applicable, through the cookie consent mechanism.
1. Changes
The Operator may update this Privacy Policy from time to time to reflect changes in applicable law, technology, services, data processing practices, or the Platform.
Material changes will be communicated through the Platform where appropriate.
2. Effective Date
This Privacy Policy is effective as of 01 September 2026.
3. Contact
For any privacy-related questions or requests, please contact the Operator at epicbdsm@proton.me.