KLS Digital Solutions Limited ("Company", "we", "us") is committed to protecting the privacy and personal data of all users of the SovereignChat platform ("Platform"). This Privacy Policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
KLS Digital Solutions Limited
Data Protection enquiries: privacy@sovereignchat.uk
Email address, display name, encrypted password hash, account role (fan, creator, moderator), and account status. For Creators, we additionally collect stage name, biography, branding preferences, and payout details.
We use Yoti as our age verification provider. Yoti processes a facial scan or identity document to confirm you are 18 or older. SovereignChat receives only a verification receipt confirming the result and the document country. We do not receive, store, or have access to your biometric data, facial images, or identity document details. Yoti permanently deletes your biometric data immediately after the verification check.
In compliance with applicable record-keeping laws, Creators are required to provide government-issued identification. We store: legal name, date of birth, performer aliases, identification document type, a cryptographic hash of the document number (not the number itself), and the document country. This data is stored securely and retained for the legally required period.
Records of credit purchases, tips, subscriptions, pay-per-view transactions, and payout history. All transactions are recorded with a timestamp, amount, type, and associated parties. We do not store full credit card numbers — payment processing is handled by our third-party processor (CCBill).
IP address (used for geoblocking, fraud detection, and security), device type, browser type, and session data. IP geolocation data is used for analytics and creator-configured geoblocking features.
Messages sent in public (unencrypted) rooms are stored on our servers. Messages sent in end-to-end encrypted rooms are encrypted on the sender's device and can only be decrypted by intended recipients. We cannot access the content of end-to-end encrypted messages unless a specific message is reported by a participant using the in-app reporting function.
We process your personal data for the following purposes:
We process your data under the following legal bases: performance of a contract (providing the service you signed up for), legal obligation (age verification, record-keeping, law enforcement cooperation), legitimate interests (fraud prevention, platform security, service improvement), and consent (where specifically requested).
We share personal data only with the following categories of third parties, and only to the extent necessary:
We do not sell your personal data to any third party. We do not share your data with advertisers.
Under the UK GDPR, you have the following rights:
To exercise any of these rights, contact privacy@sovereignchat.uk. We will respond within 30 days.
We implement appropriate technical and organisational measures to protect your data, including: encryption in transit (TLS) and at rest, end-to-end encryption for private communications, access controls and role-based permissions, regular security updates and monitoring, and encrypted off-site backups.
Our servers are located in the European Economic Area (Netherlands). Where data is transferred outside the EEA (for example, to payment processors), we ensure appropriate safeguards are in place as required by UK GDPR.
The Platform uses essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before taking effect.
If you have concerns about how we handle your data, please contact privacy@sovereignchat.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.