Privacy Policy

PerformerVerify is operated by Upscale Media LLC, 409 Parkside 2, Dubai, UAE ("we", "us", "our"). We provide a compliance and identity verification platform for adult content creators and performers.

For questions about this policy or your personal data, contact us at privacy@performerverify.com.

From Creators (platform operators):

• Name, email address, and password (account registration)
• Signature image (embedded in generated release documents)
• Platform and business configuration

From Performers (via intake form):

• Legal name, date of birth, contact details, and address
• Government-issued identity documents (front and back images)
• Verification selfie (photo holding ID)
• Digital signature
• Sexual health certificate information (optional)
• Stage name and professional information
• Content scope and approved platform consents

Technical data: IP address, browser/device type, pages visited, timestamps, and authentication logs. This is collected automatically when you use the platform.

We process personal data for the following purposes:

• Identity verification and age compliance — to verify performers are 18 or older, as required by applicable regulations including 18 U.S.C. § 2257
• Contract and release management — to generate, store, and provide access to signed release documents
• Platform operations — to provide you with the features of the PerformerVerify platform
• Security and fraud prevention — to protect the integrity of the platform and user accounts
• Legal compliance — to meet our obligations under applicable law
• Communications — to send account-related and compliance notifications (with your consent where required)

Our legal bases under GDPR are: contract performance (operating your account), legal obligation (regulatory compliance), legitimate interests (security, fraud prevention), and consent (marketing communications).

All data is stored on secure servers provided by Supabase (EU/US regions). Identity documents and images are stored in encrypted object storage with access controlled by signed URLs that expire after one hour.

We implement the following security measures:

• Encryption in transit (TLS) and at rest
• Row-level security on all database tables
• Immutable audit logs for all sensitive actions
• Time-limited signed URLs for document access
• Access controls — creators can only access their own performers' data

Legal name and identity documents are never displayed publicly. Only stage names are shown on public-facing pages.

We do not sell or rent personal data to third parties. We share data only as follows:

• Creators who submitted the intake form — the creator who collected your information can access your identity documents and generated releases
• Secure share links — creators can share a limited profile view with third parties; you can see what data is included before any link is shared
• Infrastructure providers — Supabase (database and storage), Vercel (hosting), Resend (email delivery)
• Law enforcement — only when required by valid legal process

We retain personal data for as long as an account is active or as required by law. Identity documents and records may be retained for a minimum of [X] years to comply with applicable regulations.

You may request deletion of your data — see Section 8 for your rights. Note that some records (consent logs, audit trails) are retained for legal compliance even after account deletion.

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to certain processing activities
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise these rights, use the Privacy tab in your dashboard or contact us at privacy@performerverify.com. We will respond within 30 days.

Your data may be processed in countries outside your own, including the United States and the European Union. Where we transfer data internationally, we use appropriate safeguards including Standard Contractual Clauses where required.

We may update this policy from time to time. We will notify you of material changes by email and update the version number and date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

For privacy enquiries: privacy@performerverify.com

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority.