FlirtPersona

Privacy Policy

1. Who we are

Pepperose LTD (company registration number 06112811) is the data controller responsible for your personal data when you use FlirtPersona.

Registered office: The Maylands Building, Office 42, Maylands Avenue
Hemel Hempstead, England, HP2 7TG
Contact: help@flirtpersona.com or +44 1494 326040
Website: https://pepperoseltd.com/

2. Scope

This Privacy Policy explains how we collect, use, store, and share personal data when you visit FlirtPersona, create an account, purchase credits, chat with AI companions, or contact customer care. It applies to users aged 18 and over only.

3. Data we collect

We may collect the following categories of data:

  • Account and identity data: email address, display name, subscriber token, country (if provided), and authentication data from our identity provider.
  • Transaction data: credit purchases, payment status, amounts, currency, and transaction references (payment card details are processed by our payment provider and are not stored by us in full).
  • Usage and chat data: messages you send, AI responses, companion selections, credit usage, conversation metadata, and optional companion creation inputs.
  • Technical data: IP address, browser type, device information, session cookies, and similar logs needed to secure and operate the Service.
  • Communications: content of emails or support tickets you send to us.
  • Compliance data: age confirmation, acceptance of terms, and records needed for legal and fraud-prevention purposes.

4. How we use your data

We use personal data to:

  • provide, maintain, and personalise the Service;
  • authenticate you and manage your account and credit balance;
  • process payments and prevent fraud;
  • generate AI companion responses based on your inputs;
  • send service-related communications (for example, purchase confirmations or support replies);
  • comply with legal obligations and enforce our Terms;
  • improve safety, security, and performance of the platform.

5. Legal bases (UK GDPR / GDPR)

Where UK GDPR or GDPR applies, we rely on the following legal bases:

  • Contract: to provide the Service you request, including chat and credit purchases.
  • Legitimate interests: to secure the platform, prevent abuse, and improve the Service, balanced against your rights.
  • Legal obligation: where we must retain or disclose data to comply with law.
  • Consent: where required (for example, non-essential cookies or certain marketing — if offered).

6. AI processing

Your chat messages are processed by AI systems (via third-party AI infrastructure) to generate companion responses. Do not share sensitive personal data (such as financial account numbers, government ID numbers, or health records) in chat. We implement safeguards to reduce harmful outputs, but AI systems may produce unexpected content.

7. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in, remember age-gate confirmation, and protect against cross-site request forgery. We may use analytics cookies to understand aggregate usage if enabled — you will be notified where consent is required.

You can control cookies through your browser settings; disabling essential cookies may limit functionality.

8. Sharing your data

We share personal data only as needed with:

  • Identity / authentication providers to verify your account;
  • Payment processors to complete transactions;
  • AI infrastructure providers to deliver chat functionality;
  • Hosting and infrastructure providers that store and process data on our behalf under contract;
  • Professional advisers and authorities where required by law or to protect rights and safety.

We do not sell your personal data.

9. International transfers

Some service providers may process data outside the UK or EEA. Where we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under UK GDPR.

10. Retention

We retain personal data only as long as necessary for the purposes described above:

  • account and chat data — while your account is active and for a reasonable period afterward;
  • transaction records — as required for tax, accounting, and legal compliance (typically up to 7 years);
  • support correspondence — typically up to 3 years.

You may request deletion of your account and associated data subject to legal retention requirements.

11. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based, and lodge a complaint with a supervisory authority.

In the UK, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk. EEA residents may contact their local data protection authority.

To exercise your rights, email help@flirtpersona.com. We may need to verify your identity before responding.

12. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit (TLS), access controls, and secure hosting. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.

13. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it promptly.

14. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.

15. Contact

Data protection enquiries: help@flirtpersona.com or +44 1494 326040.

Pepperose LTD
The Maylands Building, Office 42, Maylands Avenue
Hemel Hempstead, England, HP2 7TG

Last updated July 7, 2026.