Privacy Policy

Version 1.0 (effective 8 September 2026)

Summary: We do our best to protect your privacy and security. We collect only the information necessary to provide the Service (account details, content you share, and technical data). We do not sell your data or use third-party advertising trackers. Age-verification images are permanently deleted as soon as a decision is made. You can access, correct, export, or delete your data at any time. Do not hesitate to contact us at [email protected] if you have any questions. This summary is provided for convenience; please refer to the full policy below for complete details.

This Privacy Policy explains how MANUFACTURES X-I & CO. SAS ("we", "us", "our") processes personal information when you use https://purrdate.com and related services (the "Service").

MANUFACTURES X-I & CO. SAS operates the Service. The Service is offered in the United Kingdom, the United States, Canada, Australia and New Zealand. Additional rights may apply depending on your User Market (Section 8). Mandatory local rights always prevail.

Controller: MANUFACTURES X-I & CO. SAS, 60 rue François 1er, 75008 Paris, France, a société par actions simplifiée registered with the R.C.S. Paris under SIREN 944 780 840. Email: [email protected] Privacy officer / DPO: Khalil Chahine ([email protected])

1. Scope

The Service is reserved for persons aged 18 or over. We do not knowingly process data of minors. If we learn that data relates to a minor, we delete it and terminate the related account.

2. Data We Process

2.1 Data you provide

Account data: username, email address, password, gender, date of birth, city, country, profile attributes and biography.
Consent records: each acceptance or withdrawal of the Terms, the privacy and content-policy acknowledgements, marketing and push opt-ins, and age attestations, with timestamp, IP address, user agent and document version.
User content: photos, videos, messages, likes and other interactions.
Age-verification captures: if you use capture-based verification, the image you submit. It is stored in a dedicated private area, never made public, and deleted automatically once a decision is made, at the latest after 30 days. The image and any identifiers derived from it are destroyed; we retain only a minimal, non-biometric record of the decision.
Payment data: transactions, purchases, subscription status and tokens from our payment processors. We do not store full card numbers.
Support communications.

2.2 Data collected automatically

Technical data: IP address, user agent, device type, language, approximate location derived from IP, login timestamps.
Device fingerprint data for fraud prevention, ban enforcement and account security.
Usage data: pages viewed, features used, session activity.
Cookies and similar technologies as described in the Cookie Policy.

2.3 Data from third parties

Social sign-on providers, if you use them: name, email, avatar, provider ID.
Advertising and affiliate partners: campaign identifiers attached to your registration.
Payment providers: payment confirmation and anti-fraud signals.

3. Purposes and Legal Bases

The legal basis depends on your User Market; equivalent concepts apply under the laws applicable to you.

Purpose	Typical legal basis
Providing the Service, account management, messaging	Contract; legitimate interests
Processing payments and purchases	Contract; legal obligation
Age attestation and verification, minor protection	Legal obligation; legitimate interests; consent where required
Consent audit trail	Legal obligation; legitimate interests
Content moderation	Legitimate interests; legal obligation where mandated
Fraud prevention and security	Legitimate interests
Marketing emails and push notifications	Consent, withdrawable at any time
Marketing text messages, where offered	Prior express written consent; separate opt-in; reply STOP to opt out
Product analytics and service improvement	Legitimate interests; consent where required
Age-verification capture analysis	Explicit consent

Where we rely on legitimate interests, we balance them against your rights. You may object where your jurisdiction provides that right (Section 8).

3.1 Sensitive data

Some data you provide may reveal information about your sex life or sexual orientation. Where your User Market treats this as sensitive data:

we process it on the basis of your explicit consent or another safeguard recognised by that law; providing the information through profile fields and features constitutes that consent where permitted;
you may withdraw consent at any time by removing the information or deleting your account;
we never use this data for third-party advertising and never sell it.

3.2 Biometric and facial data

Where age estimation analyses a facial image, this may constitute processing of biometric data under the laws of certain User Markets:

we collect it only with your prior express consent, requested immediately before capture or before analysis of an existing photo;
the image and any derived identifiers are destroyed as soon as the verification decision is made, at the latest after 30 days (Content & Age Policy, Section 4);
we do not sell, lease, trade or otherwise profit from biometric data, and we do not disclose it to anyone; age estimation runs on our own systems.

4. Automated Decision-Making

Where automated age estimation is used, age-verification decisions may be taken by automated means. You have the right to human review of an automated rejection, to express your point of view and to contest the decision at [email protected]. A rejected verification never leads to account termination without human review.

5. Recipients

We share personal data only with:

Processors acting on our instructions, such as hosting, content delivery, email and push delivery and payment processing, bound by data-processing agreements;
Payment providers, for the execution of purchases;
Authorities, where required by law. Suspected child sexual abuse material is reported to competent authorities;
Successors, in the event of merger or acquisition, under equivalent safeguards.

We do not sell your personal data.

6. International Transfers

We and our processors may store and process personal information in Canada, where the Service is hosted, and the countries where our authorised service providers operate. Cross-border transfers are protected by safeguards required by applicable law. Details for your region: [email protected].

7. Retention

Deactivated accounts: the public profile is hidden immediately. Deactivation is reversible and does not start the deletion period. Optional marketing and push consents are withdrawn on deactivation and are not restored automatically.
Deletion requests: the profile is hidden and access revoked immediately; account and profile data are deleted or anonymised within 30 days. Deleted accounts cannot be reactivated.
Consent and age-attestation records: as long as needed to demonstrate compliance, no longer than applicable limitation periods after deletion.
Age-verification captures: deleted upon decision, at the latest after 30 days.
Payment and accounting records: statutory retention periods.
Security logs: up to 12 months; longer only for an ongoing investigation or ban enforcement.
Messages: for the life of the account. Content authored by a deleted account is redacted within the deletion period; limited copies may be retained where necessary for legal claims, abuse reports, security investigations or mandatory law.

Limited records may remain after anonymisation where necessary for tax, legal claims, statutory compliance, fraud prevention, security or enforcement of a ban.

8. Your Rights by User Market

Rights depend on where you use the Service. Contact [email protected] or use account settings. You may request a full export of your consent history.

8.1 All users

Access, correction, deletion subject to legal retention, withdrawal of consent, and opt-out of marketing via unsubscribe links, STOP replies and account settings.
Data export before deletion: request through support before confirming permanent deletion. We may verify your identity first.

8.2 United States

State privacy laws grant rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination. We do not sell or share personal data as defined by those laws. We honour Global Privacy Control signals where legally required. Residents of states with biometric laws have the additional protections in Section 3.2. Complaints: state Attorneys General and privacy regulators.

8.3 United Kingdom

UK GDPR and Data Protection Act 2018: access, rectification, erasure, restriction, portability, objection, and complaint to the ICO at https://ico.org.uk. Automated decision-making rights apply to age-verification rejections (Section 4).

8.4 Canada

PIPEDA and provincial laws: access, correction, and complaint to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.

8.5 Australia

Privacy Act 1988 and Australian Privacy Principles: access, correction, and complaint to the OAIC at https://www.oaic.gov.au.

8.6 New Zealand

Privacy Act 2020: access, correction, and complaint to the Office of the Privacy Commissioner at https://www.privacy.org.nz.

8.7 Other territories

Local privacy law may grant additional rights; contact us to exercise them.

8.8 Response times

We respond within the timeframes required by your User Market's law. Identity verification may be required.

9. Security

Encryption in transit, hashed passwords, private storage for age-verification captures segregated from public media, access controls, audit logging and periodic review. No system is perfectly secure; notify us of any suspected breach at [email protected].

10. Cookies

See the Cookie Policy.

11. Changes

We notify you of material changes in-product or by email and, where required, seek renewed acknowledgement. The version you acknowledged is recorded in your consent history.

12. Contact

MANUFACTURES X-I & CO. SAS 60 rue François 1er, 75008 Paris, France Email: [email protected]