Privacy Policy

Last updated: April 18, 2026

1. Introduction

RVR ("we," "our," or "us") operates chat.redvelvetrenders.com ("RVR.Chat" or "the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account via Patreon OAuth, we collect:

  • Patreon user ID and email address
  • Patreon tier membership status
  • Public profile information (avatar, display name)

2.2 User-Provided Information

Information you voluntarily provide:

  • Username and display name
  • Profile avatar and bio
  • Custom character cards and descriptions
  • Chat messages and conversation history
  • Reviews and ratings for character cards

2.3 Automatically Collected Information

When you access the Service, we may automatically collect:

  • IP address (hashed for privacy)
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referring URL and search queries
  • Geographic location (country, city)
  • VPN/proxy detection indicators

2.4 Payment Information

Payment processing is handled by Stripe. We do not store credit card information. We only receive transaction identifiers and confirmation of payment status.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service
  • Process transactions and manage credits
  • Authenticate users and manage accounts
  • Generate AI responses in chat interactions
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse
  • Send service-related notifications
  • Display relevant content and recommendations
  • Comply with legal obligations

4. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

Patreon

Used for OAuth authentication and tier verification.

Stripe

Processes credit purchases. See Stripe Privacy Policy.

Supabase

Provides database and file storage services.

Google Analytics

Tracks website usage and performance.

Microsoft Clarity

Provides heatmaps and user session recording.

Facebook Conversions API

Tracks conversion events for advertising attribution.

AI Services (AIML API)

Processes chat messages to generate AI responses.

5. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Service:

  • Session cookies: Required for authentication and maintaining login state
  • Analytics cookies: Help us understand how visitors use the Service
  • Persistent cookies: Remember your preferences and settings

Third-party services (Google Analytics, Microsoft Clarity, Facebook) may also set their own cookies. See Section 4 for links to their privacy policies.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services:

  • Account data: Retained until account deletion
  • Chat history: Retained while account is active
  • Analytics data: Retained for up to 90 days
  • Transaction records: Retained per legal requirements

Upon account deletion, we will remove your personal data within a reasonable timeframe, except where retention is required by law.

7. Data Security

We implement appropriate security measures to protect your data:

  • Encrypted data transmission (HTTPS)
  • Secure session management with iron-session
  • Rate limiting to prevent abuse
  • Access controls on databases
  • Regular security assessments

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but we strive to protect your data.

8. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a structured format
  • Object: Object to processing of your data
  • Restrict: Request limited processing of your data

To exercise these rights, contact us through our support channel. We will respond within applicable timeframes.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through our support channel.