Privacy Policy
VersaForge LLP (No. 70E, SK Tower, VG Panneer Das Town I, Reddiyarpatti, Tirunelveli 627007, Tamil Nadu, India) is the data controller for QeepX. This policy explains what we collect, why, who we share it with, how long we keep it and what your rights are. Contact for privacy questions: [email protected].
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Username, email, phone (optional), password hash, date of birth / age confirmation, country, language, profile photo, bio | You |
| Google sign-in | Google account ID, name, email, profile picture | Google, with your consent, only if you use "Continue with Google" |
| Content | Live audio and video, room chat, posts, stories, comments, messages, gifts sent and received, cards traded | You and other users |
| Transactions | QP purchases, gift, card and VIP history, Citrine, payouts; payment status and last digits from our payment partners (never full card numbers) | You, payment partners |
| Identity verification | Government ID images, selfie, name, tax identifier, payout account details | You, only for payouts, partner programmes or the blue tick |
| Device and usage | IP address, device model, OS, app version, language, time zone, crash logs, pages and features used, session and sign-in times, approximate location from IP | Automatically |
| Precise location | GPS coordinates | Only if you allow it, for nearby rooms and geo-targeted ads |
| Camera, microphone, photos | Live stream, profile and post uploads | Only while you use those features, with permission |
| Contacts and referrals | Referral code, who invited you | You |
| Support and reports | Messages to support, reports you file or that concern you, moderation decisions | You, other users, our staff |
2. Why we use it and the legal basis
| Purpose | Legal basis |
|---|---|
| Providing the Services: accounts, rooms, messaging, gifts, cards, games, payouts | Contract |
| Payments, fraud prevention, chargeback handling, money-laundering checks, sanctions screening | Contract, legal obligation, legitimate interest |
| Safety: moderation, age enforcement, abuse detection, reports, cooperation with authorities | Legitimate interest, legal obligation |
| Security: sign-in protection, device recognition, rate limiting, logs | Legitimate interest |
| Improving and measuring the Services, crash fixing, analytics | Legitimate interest |
| Notifications about your account, rooms you follow, gifts and payouts | Contract; marketing notifications need your consent and can be switched off |
| Geo-targeted ads shown in the app (GAIA) | Consent for precise location; legitimate interest for approximate |
| Tax and accounting records | Legal obligation |
3. Who we share it with
- Other users: your public profile, streams, posts, room activity, gifts and rankings are visible to others; direct messages are visible to the people in the conversation.
- Service providers acting on our instructions: hosting (Hetzner, Germany), real-time audio/video (LiveKit and TURN servers we operate), payment processors (Razorpay, Stripe, PayPal), Google (sign-in and, if used, push), email delivery, app stores. Each receives only what it needs.
- Payout and verification partners to verify identity and pay creators.
- Authorities when required by law, court order, or to protect someone's safety, including reporting child sexual abuse material to the relevant authorities.
- A successor if VersaForge LLP is merged, sold or reorganised, under the same protections.
We do not sell personal data and do not share it with data brokers.
4. International transfers
Our servers are in the European Union (Germany). Data may be processed in India, where VersaForge LLP is established, and in the countries where our providers operate, with contractual safeguards where the law requires them.
5. How long we keep it
- Account and profile: while the account exists and up to 30 days after deletion, so you can undo a deletion request.
- Transactions, payouts, tax and fraud records: as long as tax, anti-money-laundering and accounting laws require (typically 7 years).
- Identity documents: deleted 90 days after verification completes unless a law or an open investigation requires longer.
- Live streams are not stored; safety recordings, if any, are deleted within 30 days unless part of a report.
- Logs, sign-in and security events: 12 months.
- Messages and posts: until you delete them or the account is deleted; reported content may be kept while a case is open.
6. Your rights
Depending on your country you may have the right to access, correct, download, restrict, object to, or delete your personal data, to withdraw consent, and to complain to a data protection authority. You can change most data in Settings, export it by asking [email protected], and delete your account at qeepx.com/pages/account-deletion.php. We answer within 30 days. Where we need to keep data for legal reasons we tell you what and why.
7. Children
QeepX is for adults. We do not knowingly collect data from anyone under 18; if we learn that a child has an account we delete it and its data. See the Child Safety Policy.
8. Security
Data is encrypted in transit (TLS) and passwords are stored as one-way hashes. Staff access is limited, logged and protected with two-factor sign-in. Sign-ins are rate-limited and locked after repeated failures; you are notified when your account is used from a new device. Identity documents are stored outside the web root and are viewable only by verification staff. No system is perfectly secure; tell us at [email protected] immediately if you suspect a problem.
9. Cookies and similar technologies
See the Cookie Policy. The app uses a session cookie and local storage; we do not use third-party advertising cookies.
10. Changes
We will announce material changes in the app or by email before they apply. The date at the top shows the current version.