Privacy Policy & Data Practices

2. Information We Collect

We collect data under three distinct categories depending on your engagement with the platform:

A. Information Provided Voluntarily

• Member Registration: Username, email address, display name, and password hash (passwords are one-way hashed using high-cost cryptographic algorithms; we never store plain-text passwords).
• Billing & Payment Data: Payment details (credit card number, expiration, billing address) are collected and processed directly by our PCI-DSS compliant third-party payment gateways. The platform only stores non-sensitive transaction tokens, subscription tiers, and payment status.
• Direct Communications: Support tickets, emails, or content dispute filings submitted to our staff.

B. Creator & Performer KYC Information

• Identity Proofing: Government-issued photo identification (passport, driver’s license), real legal name, date of birth, proof of age, and liveness selfies required for compliance with 18 U.S.C. § 2257 and anti-money laundering regulations.
• Payout Credentials: Bank account routing or electronic payout details used exclusively for disbursing creator subscription royalties.

C. Automatically Collected Technical Information

• Connection Telemetry: Anonymized or truncated IP addresses, user-agent strings, device hardware profiles, browser types, and approximate geographic region (used solely for legal age-gate enforcement and geo-blocking restricted territories).
• Security Logs: Timestamped logs of authentication attempts, rate-limit counters, and security exception traces stored for denial-of-service prevention and fraud detection.

• Visitor Age Gate: When you confirm you are 18+ on our entry screen, we store a temporary cookie/session token (adult_age_confirmed=true). This record contains no personal identifying information and merely records that age consent was given for the active browsing session.
• Mandatory Statutory Age Proofing (Where Mandated by Law): In jurisdictions requiring third-party identity proofing prior to accessing mature media, verification is conducted through independent, certified age-verification providers. The platform does NOT store or have access to your raw biometric scans or government ID documents submitted during automated viewer checks; we only receive an encrypted binary confirmation of adult eligibility.
• Creator § 2257 Identity Records: Performer identification documents are encrypted at rest using AES-256 and stored in an isolated, access-controlled vault segregated from regular public web application servers. Access is restricted strictly to legal compliance officers.

4. Cookies, Session Tokens & Local Storage

Our platform relies primarily on essential technical storage to deliver core functionality. We utilize:

We do not use invasive third-party tracking pixels, Facebook Pixel, or cross-site tracking cookies. You may disable cookies in your browser settings, but doing so will require you to re-confirm the age gate on each navigation and prevent account login.

5. How We Use Your Information

We process your personal information strictly for lawful purposes, including:

• Delivering media streaming, studio editing tools, and member community features.
• Validating adult age eligibility and preventing minors from accessing age-restricted media.
• Processing payments, memberships, and creator royalty disbursements.
• Detecting, preventing, and prosecuting fraudulent activity, unauthorized account access, and cybersecurity attacks.
• Enforcing our Terms of Service, responding to copyright takedown requests (DMCA), and removing non-consensual imagery.
• Fulfilling legal and regulatory statutory obligations under applicable local, national, and international laws.

6. Media Storage, Cloudflare Infrastructure & Encryption

Media hosted on the platform (photographs, videos, stories, audio clips) is stored within secure, private object storage repositories (including Cloudflare R2 and distributed edge infrastructure). Media objects are served through tokenized, signed edge URLs designed to prevent unauthorized hotlinking and scraping. All data transmissions across the platform are encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS).

7. Third-Party Service Providers & Disclosures

We do not disclose personal information except to authorized service providers under strict data processing agreements:

• Payment Processors: Reputable adult-friendly merchant banks and processors handling credit transactions under PCI-DSS compliance.
• Infrastructure & CDN Providers: Cloudflare edge networks providing DDoS mitigation, CDN caching, and encrypted DNS resolution.
• Legal & Law Enforcement: We disclose information when required by valid subpoena, court order, or warrant, or where necessary to prevent severe physical harm or investigate violations of Child Sexual Abuse Material (CSAM) laws.

8. Your Privacy Rights (GDPR, UK-GDPR & CCPA/CPRA)

Depending on your geographic residency, you possess statutory rights regarding your personal information:

• Right of Access & Portability: You may request an export of personal data held about your account.
• Right to Rectification: You may correct inaccurate or incomplete profile information through your account settings.
• Right to Erasure (“Right to be Forgotten”): You may request permanent deletion of your account and associated personal data, subject to legal record retention requirements (such as tax laws or § 2257 records).
• Right to Restrict or Object: You have the right to object to automated processing or request limitation of data handling.
• Non-Discrimination: We will never discriminate against you, alter pricing, or degrade service quality for exercising your privacy rights.

To exercise any of these rights, visit your member settings or contact our Data Protection Officer at contact@ninakurainservices.in.

If we discover or receive notice that an individual under the age of 18 has submitted personal information or created an account, we will immediately lock the account, securely purge all associated data, and, where applicable, report relevant details to law enforcement authorities. Parents, legal guardians, or concerned parties who believe a minor has accessed the platform may contact us immediately at contact@ninakurainservices.in.

10. Data Security Protocols

We implement comprehensive physical, organizational, and technical safeguards to protect your personal data against unauthorized access, loss, or alteration. These safeguards include multi-factor authentication for administrative access, role-based database permissions, continuous edge vulnerability scanning, and automated firewall filtering.

11. Data Retention & Deletion Schedules

We retain personal information only for as long as necessary to fulfill the operational and legal purposes outlined in this policy:

• Active Accounts: Retained for the duration of your active subscription and membership.
• Deleted Accounts: Core personal data is purged within thirty (30) days of account closure, except for financial billing records retained for seven (7) years to comply with statutory accounting and tax laws.
• Performer KYC & § 2257 Records: Retained for the statutory duration mandated by federal regulations (typically five (5) to seven (7) years post-publication).

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When material modifications occur, we will update the “Last Modified” date at the top of this document and, where appropriate, provide visible notice across our web portal or via electronic notification to registered members.

13. Privacy Contact & Data Protection Officer

If you have questions, complaints, or wish to submit a data subject access request, contact our Data Protection Office: