Privacy Policy

Last updated: January 27, 2026

1. Introduction

This Privacy Policy explains how Influencestage LTD, a company registered in Hong Kong (registration number 856485650), with its registered office at Room 1305, 13/F, Hollywood Centre, 233 Hollywood Road, Sheung Wan, Hong Kong ("Backstage.cam", "Backstage", "we", "us", or the "Platform"), collects, uses, discloses, and protects personal data when you access or use Backstage.cam.

This Privacy Policy applies to all users of the Platform, including visitors, registered users, subscribers, and Creators, and should be read together with our Terms of Service and other applicable policies.

2. Data Controller

For the purposes of the EU General Data Protection Regulation (GDPR) and UK GDPR, Influencestage LTD is the data controller of your personal data.

Contact details:
Email: privacy@backstage.cam
Postal address: Room 1305, 13/F, Hollywood Centre, 233 Hollywood Road, Sheung Wan, Hong Kong

3. Categories of Personal Data We Collect

We collect the following categories of personal data, depending on how you use the Platform:

3.1 Account and Profile Data

• Full name
• Username
• Email address
• Date of birth
• Profile information and preferences
• Account status and verification status

3.2 Identity Verification and Compliance Data (Creators and Restricted Features)

Where required for legal, safety, or payment purposes, we collect:

• Government-issued identification documents (passport, national ID, driver's license)
• Date of birth and age confirmation
• Selfie images and biometric liveness verification data
• Verification metadata (verification date, method, outcome)
• AML, sanctions, and PEP screening results

Biometric data is processed solely for identity verification, fraud prevention, and compliance purposes.

3.3 Financial and Transaction Data

• Payment method identifiers (tokenized)
• Subscription and purchase history
• Payout details (bank account or payout provider identifiers)
• Transaction metadata (amounts, timestamps, currency)
• Chargeback and refund history

We do not store full payment card numbers.

3.4 Content and Communications

• Content uploaded to the Platform
• Messages sent through Platform messaging features
• Moderation decisions and enforcement history
• Reports, complaints, and support communications

3.5 Technical and Usage Data

• IP address
• Device identifiers
• Browser type and operating system
• Log files
• Access times
• Interaction data
• Cookies and similar tracking technologies

3.6 Legal and Law Enforcement Data

• Requests from law enforcement or regulators
• Compliance reports
• Legal claims and dispute records

4. Legal Bases for Processing (Article 6 GDPR)

We process personal data only where a lawful basis applies, including:

4.1 Performance of a Contract (Art. 6(1)(b))

• Account creation and management
• Content access and delivery
• Subscription and payment processing
• Creator payouts

4.2 Legal Obligations (Art. 6(1)(c))

• Identity verification and age verification
• AML, sanctions, and fraud prevention
• Tax and financial reporting
• Record-keeping obligations
• Law enforcement cooperation

4.3 Legitimate Interests (Art. 6(1)(f))

• Platform security and abuse prevention
• Content moderation and enforcement
• Fraud detection and transaction monitoring
• Customer support
• Platform improvement and analytics

We balance these interests against your fundamental rights and freedoms.

4.4 Consent (Art. 6(1)(a))

• Optional cookies and tracking technologies
• Marketing communications (where applicable)
• Certain verification steps where legally required

You may withdraw consent at any time, without affecting prior lawful processing.

4.5 Substantial Public Interest (Art. 9(2)(g)) – Special Category Data

Biometric data used for identity verification is processed where necessary for:

• Preventing fraud and impersonation
• Ensuring platform safety
• Complying with AML and financial crime laws

5. Purpose of Processing

We process personal data to:

• Provide and operate the Platform
• Verify identity and age
• Moderate content and enforce policies
• Facilitate payments and payouts
• Prevent fraud, abuse, and illegal activity
• Comply with legal and regulatory obligations
• Communicate with users
• Improve Platform functionality and security

6. Data Retention

We retain personal data only for as long as necessary, including:

Account data: for the duration of the account and a reasonable period thereafter
Identity verification records: as required by law and payment processor rules
Transaction records: as required by financial, tax, and AML regulations
Content and moderation records: for enforcement, audit, and legal defense
Legal records: for the duration required by applicable law

Retention periods may be extended where necessary for legal claims or investigations.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the EU/UK, including the United States, where our service providers are located.

Where such transfers occur, we ensure appropriate safeguards, including:

• European Commission approved Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Additional technical and organizational safeguards

8. Sharing of Personal Data

We may share personal data with:

• Payment processors and financial institutions
• Identity verification and AML providers
• Cloud hosting and infrastructure providers
• Customer support and analytics providers
• Law enforcement, regulators, or courts, where required or permitted by law
• Professional advisors (legal, accounting, auditing)

In some instances, our third-party verification providers act as joint controllers; we have entered into appropriate arrangements with them to ensure your rights are protected.

We do not sell personal data.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable essential Platform functionality
• Improve performance and security
• Analyze usage
• Remember user preferences

You can manage cookie preferences through browser settings. For more information, see our Cookie Policy.

10. Your Rights Under GDPR / UK GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data ("right to be forgotten")
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

Requests can be made at privacy@backstage.cam.

11. Automated Decision-Making

We may use automated systems to assist with:

• Fraud detection
• Risk scoring
• Transaction monitoring

Final decisions affecting users are subject to human review where required by law.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption
• Access controls
• Secure storage
• Monitoring and logging
• Vendor due diligence

No system is completely secure, but we take reasonable steps to protect your data.

13. Children's Data

Backstage.cam is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. Accounts identified as involving minors are terminated and reported as required by law.

14. Law Enforcement and Regulatory Disclosures

We may disclose personal data where:

• Required by law or legal process
• Necessary to protect the safety of users or the public
• Required to prevent fraud or illegal activity
• Requested by payment processors or regulators

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. Continued use of the Platform constitutes acceptance of the updated Policy.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) in accordance with the GDPR.

The DPO can be contacted at:
Email: dpo@backstage.cam

The DPO acts independently and is responsible for overseeing compliance with data protection laws and serving as a point of contact for supervisory authorities and data subjects.

For privacy-related inquiries, contact privacy@backstage.cam.