← Back to NSFW Money

Legal · Privacy Policy

Privacy Policy

Effective date: 2026-05-09. Subject to review by counsel · final version coming soon.

1. Who we are

NSFW Money is a platform operated from the Philippines that pays verified Filipino members for short engagement actions on social media platforms and live cam websites. Members opt in voluntarily, complete identity verification, and receive payment to a destination of their choice.

Contact for privacy concerns: privacy@nsfw.money

2. What data we collect

  • Identity: full name, date of birth, government ID image (front and back), selfie photo for ID match, phone number
  • Demographics: gender, region, city, languages, interests, account maturity (self-reported)
  • Behavioral: tasks accepted, submissions, submission proofs (screenshots/videos), approval status, time of activity
  • Device: anonymized device fingerprint hash, IP address at session, browser user agent
  • Financial: payout destination (GCash number, Maya number, bank account), tax ID if required, total earnings
  • Communications: notifications history, support tickets, KYC review reasons

3. Why we collect each category

  • Identity data: legal compliance, anti-fraud, payout dispatch matching
  • Demographics: task targeting based on segment match
  • Behavioral: paying you correctly, anti-abuse detection
  • Device + IP: detecting multiple accounts per person, sybil prevention
  • Financial: routing payouts via Xendit to your destination
  • Communications: customer support and dispute resolution

4. How long we keep your data

  • KYC documents: 7 years from account close, per BSP / AMLA recordkeeping rules [TBD: counsel to confirm exact retention]
  • Behavioral logs: 2 years rolling, then anonymized
  • Wallet ledger: 7 years, append-only and immutable for audit
  • Active member account: until you request deletion or 12 months inactivity
  • Deleted account: 30-day reversible window, then irreversibly anonymized except for legally required records

5. Who we share data with

  • Xendit: receives your name and payout destination to dispatch funds
  • Supabase (database): stores all data encrypted at rest, EU region
  • Vercel (hosting): serves the application, US region
  • Resend: dispatches transactional email when notifications are sent
  • Government / regulators: only if compelled by valid legal order under Philippine law

We do not sell, rent, or trade your data to advertisers, marketers, or third parties.

6. Your rights under RA 10173

The Philippine Data Privacy Act gives you the right to:

  • Access a copy of all data we hold about you (download via /support)
  • Correct inaccurate data
  • Request deletion (30-day reversal window)
  • Object to processing
  • Withdraw consent (you stop earning, existing balance cashes out at next cycle)
  • File a complaint with the National Privacy Commission

7. Cross-border data transfer

Your data is stored on servers in the European Union (Supabase) and the United States (Vercel edge). Both jurisdictions provide adequate protection per NPC guidelines. Your consent at signup includes consent to this transfer.

8. Children

We do not knowingly accept members under 18. KYC requires a government-issued ID with verifiable date of birth. If you believe a minor has signed up, email us and we will terminate the account immediately.

9. Changes to this policy

Material changes will be notified by email and in-app notification at least 14 days before they take effect. Continued use of the platform after the effective date constitutes acceptance.

This document is a draft pending review by Philippine privacy counsel. The final version will replace this notice.