Privacy Policy
Last updated: November 6, 2026
1. Who this applies to
This policy covers Revenue Radar ("the App"), a third-party application built on the Fanvue API. It applies to creators who connect their Fanvue account to the App. Fans are not direct users of the App — their data reaches us only as part of a connected creator's own Fanvue account data, accessed through that creator's authorized connection.
2. Data we access from Fanvue
When you connect your account, the App requests the following OAuth scopes and the data that comes with them: your own creator profile (read:self), your subscriber/fan list and subscription details (read:fan), spend and engagement insights (read:insights), and chat activity metadata (read:chat). The App only drafts messages for you to review and send yourself; it never sends messages on your behalf. We never request or receive your Fanvue password.
3. What we store
For each connected creator: your Fanvue profile (handle, display name, avatar), and encrypted OAuth access/refresh tokens (AES-256-GCM, stored as ciphertext — never in plaintext). For each fan in your account: identity fields visible to you on Fanvue (handle, display name, avatar), subscription status and pricing, spend totals and last-purchase timestamps, and chat activity timestamps — all sourced directly from the Fanvue API, nothing inferred or purchased from third parties. We also store the opportunity scores and message drafts the App generates, and any actions you take on them (contacted, converted, skipped, snoozed).
4. AI message drafting
When you request a drafted message, we send the relevant fan facts (the same ones described above — no fan email, payment details, or Fanvue password) to Anthropic's Claude API to generate the draft text. This is the only third party we share fan-level data with, and only for this specific feature, only when you trigger it.
5. Other service providers
The App runs on Vercel (application hosting) and Neon (PostgreSQL database hosting). Both process data on our behalf under their own security commitments; neither has independent access to use your data for their own purposes.
6. What we don't do
We do not sell your data or your fans' data. We do not use your data for advertising. We do not share data with other creators or third parties beyond what's described above. We do not scrape Fanvue — all data comes through Fanvue's official, authorized API.
7. Data retention
We retain your data for as long as your Fanvue account stays connected to the App, so it can keep working. If you disconnect the App (via Fanvue's account settings) or request deletion (see below), we delete your stored data.
8. Your rights and data deletion
You can request deletion of all data we hold about your account at any time, from the App's Settings page or by emailing simmonstia10@gmail.com. Deletion requests are honored promptly and no later than 30 days. If you are in the EU/UK, you have the right under GDPR to access, correct, or delete your data, and to object to or restrict certain processing — contact us at the address above to exercise these rights.
9. Security
OAuth tokens are encrypted at rest. Sessions use signed, httpOnly cookies — your Fanvue credentials never reach the browser or client-side code. All traffic is served over HTTPS. If you discover a security vulnerability, please report it to simmonstia10@gmail.com.
10. Changes to this policy
We may update this policy as the App evolves. Material changes will be reflected here with an updated "Last updated" date.
11. Contact
Questions about this policy or your data: simmonstia10@gmail.com.