Privacy Policy (Datenschutzerklärung)

1.1 Personal Data You Provide Directly

Account data may include email address, username, password hash, date of birth for age verification, and optional phone number. Provider profiles may include professional alias, photos, descriptions, rates, availability, city or region, languages, physical characteristics, boundaries, and verification status.

Client profile data may include display name, optional photo, preferences, review history, and blacklist entries. Verification data may include government ID, selfie photos, proof of age, business licenses, and address verification.

1.2 Automatically Collected Technical Data

We collect usage, connection, authentication, performance, and error data such as pages accessed, search queries, browser and device type, hashed IP address, time zone, login events, token activity, page load times, and API errors.

1.3 Data From Third Parties

Payment processors may provide transaction status, confirmation, and chargeback information. We do not receive full credit card numbers. Identity and age verification services may provide verification results.

1.4 Special Category Data

In an adult-services context we may process sensitive data voluntarily disclosed by users, including health-related information, data concerning sex life, or biometric verification data. Processing relies on explicit consent, legal obligations, or legitimate interests where applicable.

1.5 Data We Do NOT Collect

• Full credit card numbers or payment details
• Precise GPS coordinates or exact private addresses
• Social security or AHV numbers
• Health insurance information
• Information about minors
• Political opinions, religious beliefs, or trade union membership
• Third-party tracking cookies

We process data to create and manage accounts, display profiles, process verification, enable search and messaging, provide support, send notifications, manage subscriptions, and enable reviews.

We also process data for safety, security, age verification, identity verification, authentication, fraud detection, abuse prevention, legal compliance, incident response, platform improvement, performance optimization, and service communications.

Public profiles may display alias, photos, service descriptions, rates, availability, location, verification badges, reviews, and response time. Communications are delivered to recipients and stored for account and legal retention needs.

We may share limited data with identity verification services, payment processors, hosting providers, customer support tools, and security services. We may disclose data when required by subpoena, court order, legal claim, safety duty, law enforcement request, regulatory investigation, merger, acquisition, or bankruptcy.

• We do not sell personal data.
• We do not share data with advertisers or ad networks.
• We do not use third-party tracking.
• We do not use private messages for marketing.
• We do not disclose identity in reviews.
• We do not share verification documents beyond legal requirements.

Technical and organizational measures include TLS in transit, encryption at rest, password hashing, encrypted backups, role-based access, MFA for admins, audit trails, secure cookies, short-lived tokens, CSRF protection, rate limiting, patching, monitoring, incident response, data minimization, pseudonymization, and privacy-by-design defaults.

High-risk breaches are reported to the FDPIC without undue delay and affected individuals are notified when required. We document security incidents and perform containment, remediation, recovery, and post-incident review.

No system is completely secure. Users remain responsible for strong passwords, credential protection, MFA use, signing out from shared devices, reporting suspicious activity, and keeping software updated.

Data is primarily stored in Swiss data centers and secondarily in EU/EEA data centers. Transfers within the EEA rely on the EU-Swiss adequacy decision. Transfers to certified US organizations may rely on the Swiss-US Data Privacy Framework.

For third countries without adequacy decisions, we use FDPIC-approved safeguards such as Standard Contractual Clauses. We prioritize Swiss storage where possible.

We retain data only as long as necessary for stated purposes. Active account data is retained while the account remains active. Inactive accounts may be suspended or deleted after notice.

After deletion, profiles are removed quickly, database records are deleted within operational windows, and backups are purged according to backup retention schedules, subject to legal retention.

Anonymous and aggregated data may be retained indefinitely for statistical analysis.

You may request information about processed data, purposes, categories, recipients, retention period, data source, automated decisions, and transfer safeguards.

• Right to rectification of inaccurate or incomplete data.
• Right to erasure when data is no longer necessary or processing is unlawful.
• Right to restriction in legally recognized cases.
• Right to data portability in a structured, machine-readable format.
• Right to object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent without affecting prior lawful processing.
• Right to lodge a complaint with the FDPIC.

We use strictly necessary cookies for authentication and CSRF protection, functional cookies for preferences and search filters, and security cookies for rate limiting and anomaly detection.

• No third-party advertising cookies
• No Google Analytics or similar third-party analytics
• No Meta or Facebook Pixel
• No cross-site tracking pixels

Disabling essential cookies will prevent login and core security functions.

CompanionHub is strictly 18+ only. Age verification may include self-attestation, document verification, third-party verification services, and photo verification.

If we discover that a user is under 18, we terminate the account, delete data where legally possible, and report to authorities when required. We do not knowingly collect data from minors.

We may update this Privacy Policy to reflect practice changes, new features, legal changes, FDPIC guidance, or user feedback. Material changes will be announced before the effective date when required.

We provide privacy controls for discretion, anonymous browsing, private messaging, blur controls, and city-level location only. Providers may use professional aliases, visibility controls, and blocking features.

Client privacy is protected through no public client directory, review privacy, message-history protections, and no cross-platform tracking. Verification data is stored separately, restricted, encrypted, and deleted when no longer needed.

Safety reporting may include anonymous reports, emergency escalation, coordination with Swiss law enforcement, blacklist features, and emergency disclosure where necessary to prevent harm.