Privacy Policy

1 Who We Are

SwapFlow ("we", "us", "our") is a service that provides automated swap management for OnlyFans model managers. We operate at swapflow.live and are based in the United Kingdom.

For any privacy-related enquiries, please contact us at: privacy@swapflow.live

2 What Data We Collect

We collect the following personal data when you use our service or contact us:

• Name — your full name or preferred name, provided via our contact form
• Email address — used to communicate with you about your account and service updates
• Telegram username — used to contact you and coordinate your swap management
• Account access credentials — to provide the service, we require access to your OnlyFans and Telegram accounts; this access is handled securely and confidentially
• Business information — the number of models you manage and approximate swap volumes, provided via our enquiry form
• Communications — any messages you send us via the contact form or directly

We do not collect payment card details directly. Payment processing is handled by a third-party provider and is subject to their privacy policy.

3 How We Use Your Data

We use your personal data solely to provide and improve our service. Specifically:

• To set up and operate your automated swap management system
• To communicate with you about your account, updates, and support requests
• To send service notifications relevant to your account
• To comply with our legal obligations

We do not use your data for marketing purposes without your explicit consent, and we do not engage in any automated decision-making or profiling that produces legal or similarly significant effects.

4 Account Access & Confidentiality

To deliver the SwapFlow service, we require secure access to your OnlyFans and Telegram accounts. This access is:

• Used exclusively to manage swap notifications on your behalf
• Never shared with third parties outside of our operating team
• Treated with the same level of care and discretion as a trusted employee
• Revoked and deleted upon cancellation of your subscription

We understand the sensitive nature of this industry and take the security of your account access extremely seriously. We operate under strict internal confidentiality obligations.

5 How We Store & Protect Your Data

We take reasonable technical and organisational measures to protect your personal data against accidental loss, unauthorised access, alteration, or disclosure. These include:

• Access controls limiting data access to authorised team members only
• Secure, encrypted communication channels
• Regular review of who has access to client data

Your data is stored on systems located within the UK or European Economic Area (EEA), or with providers that offer equivalent protections under UK GDPR adequacy decisions or standard contractual clauses.

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations or resolve disputes. Upon your request, we will delete your data promptly (see Your Rights below).

6 Sharing Your Data

We do not sell, rent, or trade your personal data to any third party, ever.

We may share data only in the following limited circumstances:

• Service providers — third-party tools we use to operate the service (e.g. form processing, payment providers). These are bound by data processing agreements and cannot use your data for their own purposes.
• Legal requirements — if required to do so by law, court order, or a regulatory authority.

7 Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct any inaccurate data we hold
• Right to erasure — you can ask us to delete your personal data ("right to be forgotten")
• Right to restriction — you can ask us to restrict how we process your data in certain circumstances
• Right to data portability — you can request a copy of your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time

To exercise any of these rights, please email us at privacy@swapflow.live. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8 Cookies

Our website does not currently use tracking cookies or third-party analytics. If this changes, we will update this policy and provide appropriate notice and consent mechanisms.

9 Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. Where changes are material, we will notify active clients via email.

10 Contact Us

For any questions, data requests, or concerns about how we handle your personal data, please contact: