INTRODUCTION.

Welcome to Blu Ocean LLC, doing business as GoFans Media (“GoFans,” “we,” “us,” or “our”). This Privacy Policy governs the collection, use, and protection of personal information obtained from individuals (“users” or “you”) who access, interact with, and use the features, functionalities, services, content, and offerings provided through our website, sub-domains, and affiliated platforms (collectively, the “Platform”). This Privacy Policy explains the types of data we collect, how we use, store, and protect that information, and your rights regarding your personal data. By accessing or using our Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

At GoFans, your privacy is our priority. We are committed to respecting your privacy rights and safeguarding the confidentiality and security of your personal information. If you do not agree with the practices outlined in this Privacy Policy, we kindly ask that you refrain from using our Platform.

By continuing to use the Platform, you signify your acceptance of this Privacy Policy and consent to the collection, use, storage, and disclosure of your personal data as described herein and in accordance with applicable laws and regulations. If you have any questions, concerns, or feedback about this Privacy Policy, please contact us using the information provided in the Contact Us section.

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. Any updates will be effective upon posting the revised Privacy Policy on our Platform. We encourage you to review this Privacy Policy regularly to stay informed about how we collect, use, and protect your information.

Thank you for choosing GoFans. Your trust and privacy are essential to us, and we are dedicated to providing a secure and enjoyable experience on our Platform.

TYPES OF DATA WE COLLECT.

At GoFans Inc., we collect and process various types of information to provide and improve our services, personalize user experiences, ensure security, and comply with legal obligations. The categories of data we collect include:

• Personal Information: When users sign up or engage with our platform, we collect personal details such as full name, email address, phone number, and social media handles, including OnlyFans profile links. This data is used to identify and communicate with users, manage accounts, and verify creator status when applicable.
• Creator and Engagement Data: For creators, we may collect account status (e.g., creator or fan), revenue earned, and follower count. This helps us support creator-specific features and analyze platform performance.
• Technical and Usage Data: We collect data about how users interact with the platform, including IP address, browser type, device information, page visits, and other usage data. This information helps us maintain platform security, monitor performance, and understand user behavior for improvements.
• Cookies and Tracking Technologies: We use cookies and similar tracking tools to enhance user experience, remember preferences, and gather analytics. Users are given the option to accept or decline cookies when accessing the platform.

We handle all data with care, following industry best practices for privacy, transparency, and security. Users can access, update, or request deletion of their data through account settings or by contacting our support team.

HOW WE COLLECT DATA.

At GoFans Inc., we collect data through a combination of user-submitted information and automated technologies. This ensures we can deliver a personalized and secure experience while maintaining operational efficiency and compliance with applicable laws.

Information Provided Directly by Users: We collect information that users voluntarily submit through our platform when they:

• Create or update an account
• Apply for or verify creator status
• Provide contact information or link social media accounts (including OnlyFans)
• Communicate with our support team or submit inquiries
• Participate in promotional events, surveys, or user feedback sessions

This may include personal details such as name, email address, phone number, social media handles, creator profile links, follower count, and revenue-related data.

Information Collected Automatically: When users access or interact with the platform, we automatically collect certain technical and behavioral data, which may include:

• IP address
• Device type and operating system
• Browser type and version
• Referral source or exit pages
• Pages visited and time spent on the platform
• Date and time of access
• Interaction logs and usage behavior

This data is gathered through tools such as cookies, web beacons, and similar tracking technologies, which help us analyze trends, monitor system performance, ensure platform security, and enhance the user experience.

Third-Party Tools and Integrations: We may use third-party services, such as analytics providers, to assist in collecting and analyzing certain data about user interactions. These tools operate under their own privacy terms and help us better understand how our platform is used.

HOW WE USE DATA.

At GoFans Inc., we use the data we collect to operate, improve, and personalize our services, maintain platform security, and support user growth and collaboration opportunities. The ways in which we use your personal and technical information include, but are not limited to, the following:

Application Assessment and Account Management: We use the information you provide to review and evaluate your application for professional management services, confirm your identity, and determine your eligibility based on factors such as revenue, follower count, content niche, and online presence. This helps us tailor our services to creators who are the right fit for our network.

Communication and Support: We use your contact information—including phone number, email address, and preferred messaging platforms such as WhatsApp, Telegram, or iMessage—to reach out to you regarding:

• Updates on your application status
• New management or partnership opportunities
• Platform notifications or service-related communications
• Responses to your inquiries or support requests

Partner and Agency Introductions: Your data may be used to facilitate introductions or discussions with potential management partners, agencies, or collaborators. This may include sharing select non-sensitive information (such as public social media handles, content categories, or engagement metrics) when necessary to explore potential collaborations, with your consent.

Service Delivery and Platform Optimization: We use technical and usage data to:

• Monitor and improve the functionality, performance, and user experience of our platform
• Conduct analytics to understand user behavior and engagement
• Maintain system integrity and prevent unauthorized access or misuse
• Troubleshoot technical issues and enhance security measures

Marketing and Opportunity Alerts: We may use your information to send tailored updates, growth resources, promotional content, and partnership invitations relevant to your creator profile. These communications are designed to help you expand your reach and explore monetization opportunities. You may opt out of non-essential communications at any time.

Legal and Compliance Obligations: We may use or disclose your information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests. We may also use your data to enforce our terms of service, investigate violations, and protect the rights, safety, or property of GoFans Inc. and its users.

LAWFUL BASIS FOR COLLECTION.

At GoFans, we collect and process your personal data in accordance with applicable privacy laws and regulations. The lawful basis for our data collection and processing activities depends on the nature of the information and the specific context in which it is collected. We rely on the following lawful bases:

• Consent: Your consent is the foundation for many of our data collection practices. For instance, when you voluntarily provide your information during account registration or enable location tracking, you explicitly agree to the collection and use of this data for the purposes outlined in this Privacy Policy. You can withdraw your consent at any time by adjusting your settings or contacting us, although this may limit your access to certain features of the Platform.
• Contractual Necessity: The processing of your personal data is essential for the performance of the contract between you and GoFans. For example, we require your data to create your account, provide access to the app, and enable its core features. Without this information, we would be unable to fulfill our contractual obligations to you.
• Legitimate Interests: We process certain data to pursue our legitimate business interests in providing a secure, high-quality, and personalized user experience. These interests include app optimization, fraud prevention, and system security. When processing your data based on legitimate interests, we ensure that your privacy rights are not overridden by our operational needs.
• Legal Obligations: In some cases, we are required to collect, retain, or disclose personal data to comply with applicable laws, regulations, or legal processes. For example, we may process your data to respond to a court order or government request.
• User Protection: We may process your data when necessary to protect your vital interests or the interests of others, such as ensuring the safety and security of the Platform or addressing unauthorized access.

By relying on these lawful bases, we ensure that our data collection and processing activities are conducted responsibly, transparently, and in compliance with all applicable legal requirements. If you have questions about the lawful basis for a specific data processing activity, please contact us using the details provided in the Contact Us section of this Privacy Policy.

HOW WE SHARE DATA.

At GoFans Inc., we value your privacy and are committed to handling your information responsibly. We only share your personal data when it is necessary to provide services, facilitate meaningful opportunities, comply with legal obligations, or with your explicit consent. We do not sell your personal data to third parties. Below are the circumstances under which your information may be shared:

• With Affiliated Management Agencies and Collaborators: We may share your information with trusted management agencies, creators, or collaborators within our vetted network who may be interested in working with you. This includes sharing information such as your name, contact details, OnlyFans profile, content category, creator status, and follower metrics to explore potential partnerships or representation.
• To Facilitate Partnerships and Professional Opportunities: If you are being considered for brand deals, co-marketing opportunities, or management representation, we may share select information—including your public profiles, earnings bracket, and engagement statistics—with relevant parties. We do so only to the extent necessary to initiate and support a professional relationship that aligns with your stated goals and preferences.
• With Service Providers and Platform Partners: We may engage third-party vendors to help operate, analyze, or improve our services (e.g., payment processors, analytics providers, communication tools, or hosting platforms). These providers are contractually obligated to handle your data securely and are prohibited from using it for any purpose other than providing services on our behalf.
• With Your Consent: In any situation not explicitly outlined in this policy, we will seek your express consent before sharing your personal information. This includes cases where a partner or third party requests access to non-essential details not needed for service delivery.
• For Legal Compliance and Protection: We may disclose your information if required to do so by law, subpoena, court order, or other legal processes. We may also disclose information as necessary to:
  • Enforce our Terms of Use

• • Respond to claims or requests from law enforcement
  • Prevent fraud, security breaches, or harmful activity
  • Protect the rights, safety, or property of GoFans Inc., our users, or the public

• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring, your data may be transferred as part of that transaction. If such a transfer occurs, we will take steps to ensure your privacy rights continue to be protected, and we will notify you of any material changes to data practices.

DATA SECURITY.

At GoFans Inc., protecting the security and confidentiality of your information is a top priority. We implement and maintain industry-standard security measures to safeguard your personal data from unauthorized access, disclosure, alteration, and destruction. While no system is completely immune to risks, we are committed to minimizing vulnerabilities and responding swiftly to any potential threats.

• Technical Safeguards: We use encryption protocols, firewalls, secure server environments, and access control systems to help protect your data both in transit and at rest. Sensitive data—including identity verification details and financial information—is stored and transmitted using secure technologies designed to prevent interception or unauthorized retrieval.
• Organizational Measures: Access to your personal data is strictly limited to authorized personnel who require it to perform their roles. All team members, contractors, and service providers are subject to confidentiality obligations and are trained on data privacy and security best practices.
• Third-Party Security Compliance: We work with third-party vendors (such as payment processors and analytics platforms) who are required by contract to maintain security practices that meet or exceed our standards. For example, payment processing is handled exclusively by Stripe, which is PCI-DSS compliant and widely recognized for its security infrastructure.
• Monitoring and Incident Response: We continuously monitor our systems for potential vulnerabilities, suspicious activity, or breaches. If we detect any data breach involving your personal information, we will promptly investigate the issue and notify affected users in accordance with applicable laws and regulatory requirements.
• Your Role in Security: We encourage users to take reasonable steps to protect their accounts, such as choosing strong passwords, enabling two-factor authentication, and avoiding the use of shared or public devices to access the Platform. You are responsible for maintaining the confidentiality of your login credentials and for any activity that occurs under your account.

Despite our best efforts, no digital platform can guarantee absolute security. However, we remain committed to continuously improving our infrastructure and practices to protect your information and uphold your trust.

DATA RETENTION.

At GoFans Inc., we retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Use and Account Management: We retain personal information—such as your name, contact details, social media profiles (including OnlyFans), creator status, revenue data, and engagement metrics—for as long as your account remains active or as needed to provide you with services, respond to inquiries, or support ongoing partnerships or collaborations.
• Legal and Regulatory Obligations:
  Certain types of data, such as financial or transactional records, may be retained for longer periods as required by tax, accounting, or other legal obligations. This includes data required to comply with applicable laws, enforce our terms, or resolve disputes.
• Data Minimization and Deletion: Once the data is no longer necessary for the original purpose or required by law, we will either securely delete or anonymize it. Anonymized data may be retained for internal analytics or business purposes that do not identify individual users.
• Your Rights to Deletion: You may request the deletion of your personal data at any time by contacting our support team. Upon verified request, we will remove your data from our systems unless retention is necessary for legal compliance or legitimate business purposes, as outlined above.

We apply strong data governance principles to ensure that retention periods are regularly reviewed and that information is not held longer than necessary.

COOKIE POLICY.

At GoFans Inc., we use cookies and similar tracking technologies to provide a secure, efficient, and personalized experience on our platform. Cookies are small text files stored on your device when you visit our website, allowing us to recognize your browser, remember your preferences, and enhance your interaction with our services.

We utilize several types of cookies for different purposes. Essential cookies are required for the basic operation of the site, including enabling secure logins and access to user-specific features. Performance and analytics cookies help us understand how users navigate and interact with the platform by collecting information such as page visits, session durations, and device/browser types. This insight allows us to improve site functionality, identify errors, and enhance usability. We may work with third-party services like Google Analytics to support these efforts. Functionality cookies enable us to remember user preferences, such as language or communication methods, so we can tailor the platform to each user’s needs. In some cases, we may also use targeting or advertising cookies to deliver relevant messages or promotional content and evaluate the effectiveness of our marketing efforts. These cookies may be set by trusted third-party partners, including integrated payment processors and social media platforms.

When you first access the GoFans platform, you are presented with a cookie consent banner that allows you to accept or reject non-essential cookies. You may also manage your cookie preferences at any time by adjusting your browser settings or clearing your cookies. Please note that disabling certain cookies may limit your ability to access specific features or services.

Some cookies are placed by third-party services embedded in our site. These third parties have their own privacy and cookie policies, which we encourage you to review. Our use of cookies is subject to periodic updates to reflect changes in technology, regulations, or user needs. We recommend reviewing this Cookie Policy regularly to stay informed about how we use tracking technologies and how your data is collected and used in connection with them.

If you have any questions or concerns about our cookie practices, please contact our support team.

CHILDREN’S PRIVACY.

Our Platform is committed to protecting the privacy of children. Consistent with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws and regulations, we do not knowingly collect, use, or disclose personal information from children under the age of 18.

• Age Restriction: Our services are not directed to children under the specified age. We do not knowingly engage in transactions or communications with children under this age. Our Terms and Conditions prohibit users under this age from accessing our Platform and services.
• Deletion: If we learn that we have collected personal information from a child under the specified age without parental consent, we will take steps to delete the information as soon as possible.
• Commitment to Data Security: We understand the importance of safeguarding children’s privacy and security online. We implement stringent security measures to protect children’s personal information and comply with relevant legal requirements pertaining to data protection and privacy.
• Updates to our Children’s Privacy Policy: This policy may be updated periodically to reflect changes in our practices or legal requirements. We encourage parents and guardians to review this policy regularly.
• Reporting Concerns: We take concerns about children’s privacy seriously. If you have any questions or concerns about our Children’s Privacy Policy or our practices concerning children’s personal data, please contact us using the information provided in the “Contact Us” section.

USER RIGHTS.

We respect and uphold users’ rights regarding their personal data. Users have full control over their information and may access, modify, restrict, or delete their data as permitted by applicable privacy laws. This section outlines the rights available to users and how they can exercise them.

• Right to Access Personal Data Users have the right to request a copy of the personal data we hold about them. This includes information such as their account details, transaction history, and preferences stored on the Platform. Requests for access can be made through account settings or by contacting our support team.
• Right to Correct or Update Data If any personal information is inaccurate, outdated, or incomplete, users have the right to correct or update their data. Profile information, including name, email, and address, can be updated directly through the Platform. If further corrections are needed, users may submit a request to customer support.
• Right to Data Portability Users may request that their personal data be provided in a structured, commonly used, and machine-readable format so that they can transfer it to another service provider. This applies to data that users have actively provided to the Platform.
• Right to Delete or Request Data Removal Users have the right to request the deletion of their personal data when:

• 1. They no longer wish to use the Platform.
  2. The data is no longer necessary for the purposes for which it was collected.
  3. They withdraw consent for processing (where applicable).

• Right to Restrict or Object to Data Processing Users can request that we limit or restrict the processing of their data under certain circumstances, such as when they dispute the accuracy of the information or object to specific uses of their data. If processing restrictions are applied, users may experience limited access to certain features of the Platform.
• Right to Withdraw Consent Where data processing is based on user consent (e.g., marketing communications or certain cookies), users may withdraw consent at any time by adjusting their privacy settings or contacting support. Withdrawal of consent does not affect the legality of data processing conducted before consent was withdrawn.

THIRD-PARTY LINKS.

Our Platform may contain links to third-party websites or services that are not operated or controlled by us. These third-party links are provided for your convenience and reference only. Please note that we have no control over the content, policies, or practices of these third-party websites or services.

By clicking on these third-party links, you acknowledge and agree that we are not responsible for the privacy practices or the content of such websites or services. This Privacy Policy applies solely to the information collected by our Platform. We encourage you to read the privacy policies of any third-party websites you visit to understand their data collection, use, and disclosure practices.

While we strive to include only reputable and trusted third-party links on our Platform, we cannot guarantee the accuracy, completeness, or quality of the information, products, or services provided on these external sites. The inclusion of any third-party link on our Platform does not imply our endorsement, sponsorship, or recommendation of the linked website or its content.

Please be aware that when you leave our Platform and access a third-party website, your interactions and any information you provide are subject to the terms and policies of that website. We encourage you to exercise caution and review the privacy policies of any website you visit.

DATA BREACH RESPONSE.

At GoFans, we are committed to protecting your personal data and have implemented robust measures to ensure its security. In the unlikely event of a data breach, we have a structured response plan in place to manage the situation promptly and effectively while complying with all legal obligations.

If a breach occurs, we will act immediately to identify and contain the issue. This includes isolating affected systems to prevent further unauthorized access or data loss. Once contained, we will conduct a thorough investigation to determine the cause, scope, and impact of the breach. Our goal is to assess the risks posed to affected individuals and ensure appropriate remediation measures are implemented.

We will notify affected users as required by applicable laws. Notifications will include relevant details about the breach, such as the nature of the incident, the type of data affected, potential risks, and steps users can take to protect themselves. Regulatory authorities will also be informed when necessary, following prescribed timelines and reporting requirements.

Following a breach, we will enhance our security measures to address any identified vulnerabilities and prevent similar incidents in the future. Our response plan undergoes regular reviews and updates to align with evolving industry standards and best practices.

If you suspect a security incident involving your personal data or need additional information about our response procedures, please contact us through the details provided in the Contact Us section of this Privacy Policy.

HOW TO EXERCISE YOUR RIGHTS.

We are committed to ensuring that users can exercise their privacy rights in a clear and accessible manner. Users may access, update, delete, or restrict the use of their personal data through their account settings or by submitting a request to our support team. All data-related requests are handled in compliance with applicable privacy laws and processed within a reasonable timeframe.

Users who wish to access their personal data can log into their account settings to view and update details such as their name, email address, and account preferences. If additional corrections are required beyond what is editable within the Platform, users may request modifications by contacting customer support.

For those who no longer wish to use the Platform, a data deletion request may be submitted through the user’s account or by contacting support. Upon receiving a valid request, we will permanently delete personal data within 30 days, unless legal, financial, or regulatory obligations require us to retain certain records. If specific transaction history or compliance-related data must be maintained, users will be informed of the retention period before deletion is finalized. Once an account is deleted, access to the Platform will be revoked, and all associated personal data will be securely removed.

Users may also request that we restrict the processing of their data in situations where they dispute its accuracy or object to specific uses, such as analytics tracking. While we will honor requests to limit processing whenever possible, users should be aware that restricting certain data may impact the functionality of key Platform features. Similarly, users have the right to request a copy of their personal data in a structured, machine-readable format, including account details and communication history stored within the Platform.

Where data processing is based on user consent, such as for marketing communications or analytics tracking, users have the right to withdraw their consent at any time. This can be done by adjusting privacy preferences in account settings, managing cookie preferences, or contacting support to request removal from specific data processing activities. Withdrawing consent does not affect the legality of past data processing but may limit the availability of certain Platform functionalities.

To submit a request, users can utilize the tools available in their account settings, contact customer support, or, where applicable, submit a formal request through our privacy request portal. In some cases, identity verification may be required to prevent unauthorized access or fraudulent data requests.

DO NOT TRACK SIGNALS.

Our Platform currently does not respond to “Do Not Track” (DNT) signals from web browsers. DNT is a privacy preference that you can set in your web browser to indicate your preference regarding the tracking of your online activities.

While many web browsers support the DNT feature, there is no standard interpretation or industry consensus regarding the meaning of DNT signals. As a result, our Platform does not currently recognize or respond to DNT signals.

Please note that even if you have enabled the DNT feature in your web browser, certain third-party services integrated into our Platform may still collect and track your online activities in accordance with their own privacy policies. We encourage you to review the privacy policies of these third-party services for more information on their tracking practices.

MODIFICATION.

We reserve the right to modify or update this Privacy Policy at any time. Any changes we make will be effective immediately upon posting the revised Privacy Policy on our Platform. We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information.

By continuing to use our Platform after any changes to this Privacy Policy, you acknowledge and agree to the updated terms. It is your responsibility to review this Privacy Policy periodically and ensure that you are aware of any modifications. If you disagree with any changes, you should discontinue your use of our Platform and contact us if you would like to request the deletion of your personal information.

Please note that any provision of this Privacy Policy that imposes an obligation on you or grants us a right will survive the termination or expiration of this Privacy Policy or your use of our Platform.

WEB BEACONS.

Web beacons are small graphic images or other web programming code that can be included in our web pages and e-mail messages. Invisible to the user, these beacons are typically as small as a single pixel and function in a similar manner to cookies. Web beacons are used to track online movements of web users or to access cookies. They help us understand how users interact with our Platform by transmitting information back to us or our partners. Web beacons track user behavior on our Platform, such as page views and email interaction. This information helps us understand user preferences and improve the content and functionality of our Platform.

In our email communications, web beacons allow us to determine whether our emails are opened and if the links within them are clicked. This data assists us in making our communications more relevant and informative for our users.

We use web beacons to gauge the effectiveness of our advertising campaigns. By understanding user interactions and responses to our marketing efforts, we can tailor our strategies to better meet user interests and needs.

While web beacons are inherently anonymous, you have the option to control their use through various browser settings and third-party tools. Disabling cookies in your browser will also limit the functionality of web beacons associated with those cookies.

CONTACT US.

We value open communication with our users and welcome any questions, concerns, or feedback regarding this Privacy Policy or our data handling practices. Our dedicated team is committed to addressing your inquiries and providing timely and clear responses. Please find below the various channels through which you can reach us:

• Email Communication: For direct and convenient communication, you can email us at info@gofansmedia.com. We aim to respond to all email inquiries within 48 hours during business days.
• Accessibility: We are committed to ensuring that our communication channels are accessible to all our users, including those with disabilities. If you require any special accommodations, please let us know, and we will do our best to assist you.
• Language Support: Our customer service team is capable of handling inquiries in multiple languages. If you require assistance in a language other than English, please indicate this in your communication, and we will endeavor to accommodate your needs.

We are dedicated to providing a prompt response to all inquiries. If your issue requires more in-depth investigation, we will keep you informed about the status of your query and provide a timeframe for resolution.