01
Data Controller
LuxureVerse is an independent digital publishing label operated from Colombia. The natural person responsible for the project and the processing of personal data is Carlos Jiménez Duarte, domiciled at Carrera 45 # 15 Sur-38, Medellín, Antioquia, Colombia, telephone (+57) 333 225 6078.
02
Scope of this Policy
This Policy applies to the LuxureVerse website, Android application, user accounts, Reading Room, newsletter and related services. It applies to visitors, registered readers and Premium members regardless of their country of access, without limiting additional rights granted by their jurisdiction.
LuxureVerse processes data under Colombian Law 1581 of 2012 and its regulations. Where applicable, it also observes requirements from other jurisdictions, including the European Union General Data Protection Regulation.
03
Information We Process
LuxureVerse does not request, receive or store payment-card numbers, bank details or any other payment-instrument data. Premium membership is billed entirely by Patreon; LuxureVerse only ever receives your patron status, not your payment details.
- Account and identity data: first and last names, email address, date of birth, username, profile image, registration dates and acceptance records.
- Security data: password hash, email verification, optional 2FA settings, sessions, access dates, device user agent and session IP address.
- Reading activity: selected books, chapters, progress, favorites, bookmarks, private notes and the history required to continue reading.
- Patreon membership data: your Patreon patron ID, patron status, entitled pledge tier/amount and the timestamp of the last membership sync, received from Patreon after you sign in with “Login with Patreon” or through a Patreon webhook notification.
- Newsletter data: email address, optional name, subscription status and subscribe, unsubscribe and provider-synchronisation records.
- Support data: information voluntarily included in support or contact requests.
04
How We Use Information
LuxureVerse does not sell personal information and does not use reading activity for behavioural advertising.
- Create, verify, secure and administer accounts.
- Confirm that a user declares that they are at least 18 years old.
- Authenticate accounts via “Login with Patreon” and read the resulting patron status.
- Maintain and revoke active sessions.
- Provide the Reading Room and requested reading continuity.
- Display a personal library, progress, favorites, bookmarks and private notes.
- Keep active Premium and expired membership access in sync with Patreon.
- Send verification, password-recovery, transactional and security messages.
- Send newsletters only to people who requested them.
- Handle access, correction, complaint and deletion requests.
- Prevent unauthorised access, technical abuse and service disruption.
- Meet applicable legal, accounting, contractual and payment obligations.
05
Privacy of Reading Activity
Reading data is used to personalise the user’s own experience: remember where they stopped, organise their library and display private statistics. Current recommendations are random and are not built for advertising or to infer a reader’s sexual orientation, intimate life or identity.
Bookmarks and notes belong exclusively to the account that created them. They are not public profiles, are not shared with other readers and do not form part of a social network. Administrative access is restricted to what is strictly necessary for authorised security, support, legal compliance or incident recovery.
06
Authorisation and Legal Bases
In Colombia, users authorise processing in an informed manner when they register and accept this Policy. In jurisdictions that distinguish legal bases, processing may be necessary to perform the requested service, comply with law, protect service security or pursue legitimate interests that do not override user rights.
The newsletter and any future optional technology rely on separate, revocable consent. Refusing the newsletter does not restrict an account or Premium access.
07
Service Providers
Patreon collects and processes all payment details itself, on patreon.com; LuxureVerse never receives or stores card numbers, security codes or bank account details. Providers receive only the information required for their function and are not authorised to use private reading activity for their own advertising.
- Hostinger: VPS, application and database infrastructure provider.
- Resend: delivery of verification, password-recovery, account and newsletter communications.
- Patreon, Inc.: identity and membership provider used for sign-in and billing. LuxureVerse receives, through Patreon OAuth (scopes: identity, identity[email], identity.memberships) and Patreon webhook notifications, your Patreon user ID, name, email, patron status and entitled pledge amount for the LuxureVerse campaign — never your payment-card or bank details.
08
International Processing and Transfers
Some providers, including Patreon (based in the United States), store and process information outside Colombia as part of providing the service. LuxureVerse uses the transfer or transmission mechanisms required by applicable law, and each provider is bound by its own privacy and security terms for the data it processes on LuxureVerse’s behalf.
09
Retention and Deletion
After permanent account deletion, data is removed from active systems. It may remain in an existing backup for up to 30 additional days until rotation completes. It is not used or accessed during that period except where restoration is indispensable. After a restoration, applicable deletion requests will be applied again.
Deleting your LuxureVerse account only deletes the data LuxureVerse holds. It does not touch, suspend or delete your Patreon account, its profile or any pledges to other creators — LuxureVerse never has permission to access, modify or delete data held by Patreon itself. Managing or deleting your Patreon account is done separately, directly on patreon.com.
- Ordinary sessions last no longer than 30 days and may be revoked earlier.
- Account data is retained while the account remains active and the data is needed to provide the service.
- Closing an account begins a 30-day recovery period; if it is not restored, permanent deletion is scheduled.
- Newsletter information remains until withdrawal, subject to retaining a minimal suppression record to prevent later mailings.
- Legal, accounting or transaction records may be retained for the period required by law or necessary to resolve disputes.
- LuxureVerse creates weekly encrypted backups, isolated from the primary environment and subject to automatic rotation and deletion.
10
User Rights
Requests may be sent to support@luxureverse.com. LuxureVerse may request reasonable information to verify identity. Never send a password or 2FA code.
- Know what information is retained and how it is used.
- Access a reasonable copy of personal data.
- Correct incomplete or inaccurate information.
- Withdraw optional consent, including newsletter consent.
- Request deletion where applicable.
- Object to or restrict certain processing.
- Request portability where recognised by applicable law.
- Complain to Colombia’s Superintendence of Industry and Commerce or another competent authority.
11
Security
LuxureVerse applies or plans technical and organisational measures appropriate to the service, including password hashing, HttpOnly session cookies, email verification, optional 2FA, session revocation, access controls, production HTTPS, credential separation, updates and protected backups.
Backups are generated weekly solely for service continuity and recovery from technical failure, corruption or accidental loss. They are encrypted, isolated, restricted to the operator and automatically deleted after a maximum 30-day rotation. They are not used for advertising or reader analysis.
No system is completely invulnerable. LuxureVerse will investigate and mitigate incidents and provide legally required notifications when user rights may be affected.
12
Adults Only
LuxureVerse contains explicit erotic literature and is not directed to minors. Account holders must provide a date of birth, declare that they are at least 18 and confirm that access is lawful in their jurisdiction.
An account reasonably believed to belong to a minor or to have used false information to evade this restriction may be suspended and deleted.
14
Changes to this Policy
This Policy may change because of legal, technical, editorial or provider developments. Material changes will be communicated through the website, account or email when appropriate. A new purpose requiring consent will not be applied retroactively without obtaining it.
15
Contact
For access, correction, deletion, privacy or security requests, contact support@luxureverse.com. For editorial or corporate matters, contact contact@luxureverse.com.