Privacy Policy

1 Who We Are

instabang.chat is an adult AI-powered chat platform. References to “the Service,” “we,” “us,” or “our” in this policy refer to instabang.chat and its operators.

If you have any questions about this Privacy Policy or how we handle your information, you can contact us at privacy@instabang.chat.

2 Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

Information you provide:

• Account registration details (username, email address, date of birth for age verification);
• Profile information (display name, profile photo, bio);
• Messages, content, and media you create or transmit through the Service;
• Communications you send to us (support requests, feedback, reports);
• Payment information (processed by third-party payment providers — we do not store full card details).

Information collected automatically:

• Log data (IP address, browser type, pages visited, timestamps, referring URLs);
• Device information (hardware model, operating system, unique device identifiers);
• Usage data (features used, interactions with AI, session duration, click patterns);
• Cookies and similar tracking technologies (see Section 6);
• Location data inferred from IP address (country/region level).

Information from third parties:

• If you connect a third-party account (e.g., social login), we may receive basic profile information from that provider;
• Analytics and advertising partners may share aggregated or pseudonymous data about your interactions.

3 How We Use Your Information

We use the information we collect to:

• provide, operate, and maintain the Service;
• verify your age and identity to restrict access to adults only;
• personalise your experience and deliver AI-powered features;
• process transactions and send related notices;
• detect, investigate, and prevent prohibited conduct, fraud, abuse, and safety threats;
• enforce our Terms of Use and other policies;
• comply with applicable laws and legal obligations;
• send service-related communications (account notices, security alerts, policy updates);
• send promotional communications where you have opted in (you may opt out at any time);
• analyse usage trends to improve the Service; and
• respond to your support requests and feedback.

We do not sell your personal information to third parties.

4 Legal Bases for Processing (EEA / UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

• Contract performance — processing necessary to provide the Service you have signed up for;
• Legitimate interests — detecting abuse, improving the Service, security, fraud prevention, and internal analytics;
• Legal obligation — compliance with applicable laws, court orders, or regulatory requirements;
• Consent — where you have given explicit consent, such as for marketing emails or the use of non-essential cookies.

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

5 Sharing Your Information

We may share your information in the following circumstances:

• Service providers — trusted vendors who help operate the Service (hosting, payments, analytics, customer support, age verification). These parties are contractually bound to protect your data and may not use it for their own purposes.
• Legal requirements — when required by law, subpoena, court order, or government request; or to protect the rights, property, or safety of users, the public, or the Service.
• Child safety — we will report suspected CSAM and related violations to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
• With your consent — in any other circumstances with your explicit consent.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6 Cookies & Tracking Technologies

We use cookies and similar technologies (pixels, local storage, session storage) to operate the Service and understand usage patterns.

Types of cookies we use:

• Essential cookies — required for the Service to function (e.g., session management, authentication, age-gate state). Cannot be disabled.
• Analytics cookies — help us understand how visitors interact with the Service (e.g., pages visited, session length). Used in aggregate form.
• Preference cookies — remember your settings and preferences across visits.
• Marketing cookies — used to deliver relevant advertisements and measure campaign effectiveness. Set only with your consent.

You can control non-essential cookies through our Cookie Preferences centre or your browser settings. Note that disabling certain cookies may affect Service functionality. For full details, see our Cookie Policy.

7 Data Retention

We retain your personal information for as long as necessary to provide the Service, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data — retained for the duration of your account plus a reasonable period after deletion (typically up to 90 days), unless a longer retention period is required by law.
• Chat and message data — retained according to our data retention schedule and may be deleted sooner upon your request, subject to legal hold requirements.
• Log and usage data — typically retained for up to 12 months for security and analytics purposes.
• Safety-related data — records of prohibited conduct reports and enforcement actions may be retained longer as required by law or child safety obligations.

When retention periods expire, we securely delete or anonymise your data.

8 Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you;
• Correction — request that we correct inaccurate or incomplete data;
• Deletion — request that we delete your personal data (subject to legal retention obligations);
• Portability — request a machine-readable copy of your data where technically feasible;
• Objection / Restriction — object to or request restriction of certain processing activities;
• Withdraw consent — withdraw consent for consent-based processing at any time;
• Marketing opt-out — unsubscribe from promotional emails via the link in any email or by contacting us.

To exercise any of these rights, contact us at privacy@instabang.chat. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

If you are in the EEA or UK and believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority.

10 International Data Transfers

The Service is operated from [COUNTRY] and your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that differ from the laws of your country.

Where we transfer personal data originating from the EEA, UK, or Switzerland to countries not recognised as providing an adequate level of protection, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• the UK International Data Transfer Agreement (IDTA); or
• other legally recognised transfer mechanisms.

You may contact us at privacy@instabang.chat to obtain a copy of the safeguards we use.

11 Security

We implement industry-standard technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include:

• encryption of data in transit (TLS/HTTPS) and at rest;
• access controls limiting who can access personal data within our organisation;
• regular security reviews and vulnerability assessments; and
• prompt investigation and notification of data breaches where required by law.

HOWEVER, NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. WHILE WE STRIVE TO USE COMMERCIALLY ACCEPTABLE MEANS TO PROTECT YOUR INFORMATION, WE CANNOT GUARANTEE ABSOLUTE SECURITY.

If you believe your account has been compromised, contact us immediately at security@instabang.chat.

12 Third-Party Links & Services

The Service may contain links to third-party websites, applications, or services that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. This Privacy Policy applies only to information collected by the Service.

Our AI features may be powered by third-party AI providers. Any content you submit to AI features may be processed by those providers subject to their own data processing terms, which we have contractually bound to appropriate data protection standards.

13 Changes to This Policy & Contact Us

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, where appropriate, by sending you an email or an in-app notice.

Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• General privacy enquiries: privacy@instabang.chat
• Safety & CSAM reports: safety@instabang.chat
• Security issues: security@instabang.chat

We aim to respond to all legitimate requests within 30 days, or within the timeframe required by applicable law.