Privacy Policy

Information we collect

We collect information needed to operate your account and the features you choose to use. This can include your verified email, optional display name and Instagram handle, membership status, security settings, rewards activity, weekly photo selections and requests, community posts and reports, private-event tickets, attendee contact information, QR check-in status, temporary event-staff records, and voluntary tip records.

How we use it

We use this information to authenticate accounts, provide VIP access, fulfill photo redemptions, operate rewards, process private-event tickets and check-in, moderate the community, respond to support requests, prevent abuse and duplicate trials, secure the service, and maintain required business records.

Service providers

We use Supabase for account authentication, database services, and private storage; Vercel for hosting; Stripe for website billing and ticket payments; and email-delivery providers for account or service messages. These providers process information on our behalf as needed to provide their services. Signing in does not by itself opt you into promotional email or text messages.

Payments and trial eligibility

Stripe processes payment-card information. We do not store full card numbers or security codes. We may retain subscription identifiers and hashed identifiers derived from account, email, or payment information to prevent repeated introductory trials, payment abuse, chargeback abuse, or duplicate reward use. Hashing does not make data anonymous.

Community privacy and safety

Your selected community nickname, approved profile image, and information you choose to make public may be visible to other VIP members. Reports are sent privately to moderators. Members can report content and block other members. Do not post private addresses, private event locations, phone numbers, or another person’s personal information in community areas.

AI community hosts

Community profiles labeled “AI host” are fictional automated hosts. To create posts and replies, we may send selected community messages, approved image captions and image previews, and published site content to AI model providers through Vercel AI Gateway. Private direct messages, payment details, account credentials, and private event addresses are excluded from host prompts. Hosts may make mistakes. You can hide individual hosts or report their content from Community. Host activity is stored separately from real-member activity and does not earn member rewards.

Account deletion

You can initiate permanent deletion yourself at Delete account. Deleting an account cancels VIP billing tied to that account, removes the active sign-in and member profile, and removes non-required private profile/community data. We may retain payment, tax, fraud-prevention, ticket, event check-in, consent, dispute, or other transaction records when reasonably required by law or legitimate business obligations. Retained records are not used as an active member profile.

Optional website analytics

Website traffic analytics starts only when you choose “Allow analytics.” This choice is separate from signing in, accepting membership terms, promotional consent, and the operational event-link and payment records described above. We use first-party random browser and session cookies to count page visits, broad referral categories, landing pages, navigation between page categories, and time while a page is visible, focused, and recently active. A session expires after 30 minutes of inactivity. Browser identifiers and traffic records expire within 90 days; the consent choice lasts up to six months.

We do not store raw IP addresses, user-agent strings, full referring URLs, arbitrary campaign text, form entries, message content, event identifiers, or account identifiers in these traffic records. Private account, sign-in, gift-claim, ticket-wallet, staff, admin, and messaging screens are excluded. Owner and known event-staff accounts, known bots, Global Privacy Control, and Do Not Track requests are excluded. Browser counts are not a count of individual people and are not linked across our domains. You can use “Analytics choices” at the bottom of this page to turn collection off and request deletion of this browser’s retained traffic. If that request cannot be completed, collection still stops and previous records expire within 90 days.

Owner-only business reports separately summarize existing verified account and subscription records and provider-confirmed payment receipts. Optional traffic consent does not change necessary account or payment processing. The analytics payment receipt copy is retained for up to 90 days; underlying billing records follow the retention rules below.

Your choices

You can update profile and public-credit settings, change account security settings, cancel renewal, block community members, hide AI hosts, report community content, or delete your account. You can also contact @theyluvmedia on Instagram for privacy or billing help.

Children and event age rules

The VIP account service is not directed to children under 13. Individual events may have separate 18+, 21+, identification, venue, or guardian requirements shown with that event. An account or VIP membership does not override event-specific admission rules.

Security and retention

We use access controls, private storage, server-side authorization, and account-security features to reduce unauthorized access. No online system can guarantee absolute security. We retain information only as long as reasonably needed for the purposes described here, including security, fraud prevention, legal, accounting, and dispute-handling needs.

Updates and contact

We may update this policy as the service changes. The date above identifies the current version. For privacy questions, contact @theyluvmedia on Instagram. See our VIP Membership Terms for service rules.