Privacy Policy

1. Who is responsible for your data

DigitLumin LLC is the controller of the personal data described here. You can reach us about anything in this policy at privacy@planetjoi.com.

This policy explains what we collect when you use planetjoi.com, why, how long we keep it, who else sees it, and the rights you have over it.

2. What we collect

Information you give us:

• Account: your email address, a password (stored only as an Argon2id hash, never in a form we can read), your display name and handle.
• Profile: your bio, avatar, album images, and the tags you choose.
• Content: posts, direct messages, and anything you upload.
• Creator verification: if you apply as a creator, your legal name, date of birth, a government-issued identity document, and a selfie holding it.
• Support: what you write to us in a ticket.

Information we generate:

• Transactions: token purchases, what you spent tokens on, and creator earnings. This is our financial record.
• Call metadata: who called whom, when, for how long, at what price, and whether a relay was used. Never call content.
• Security: IP address, user agent, and timestamps for sign-ins, sessions and sensitive actions, kept as an audit log.
• Technical: request logs, error reports and performance data, carrying a request identifier rather than your name where they can.

Information from others: your payment provider tells us that a payment succeeded and gives us a token that identifies the payment method. We never receive your full card number.

3. What we deliberately do not collect

This is a design decision, not an omission, and it is the most important thing in this policy.

Call audio and video never reach us. Calls connect directly between two people and are encrypted in transit. We do not record, store, transcode, monitor or intercept them. Where a network blocks a direct connection, traffic passes through a relay we operate as opaque encrypted packets that we cannot decrypt or read.

We therefore cannot export the content of a call to you, disclose it to anyone, lose it in a breach, or produce it under subpoena. It was never ours to hold.

We also do not run advertising, do not embed third-party trackers or advertising pixels, do not build advertising profiles, and do not fingerprint your device.

4. Why we use it, and on what legal basis

Where the GDPR or UK GDPR applies, our legal bases are as follows.

• To provide the service you asked for — your account, your messages, your calls, your purchases. Performance of a contract.
• To take payment and keep financial records. Performance of a contract, and a legal obligation for the records.
• To verify that creators are adults and are who they say they are. Legal obligation, and substantial public interest for the identity document.
• To keep Planet safe: fraud prevention, abuse detection, rate limiting, and enforcing our policies. Legitimate interests — ours and those of everyone else here.
• To meet legal duties, including reporting child sexual abuse material and responding to lawful process. Legal obligation.
• To communicate with you about your account and about changes to these documents. Performance of a contract, and legitimate interests.

We do not use your personal data for automated decisions producing legal effects, and we do not profile you for advertising.

5. Who else sees it

Other people on Planet see what you choose to show them: your profile, your posts, and the messages you send. A fan’s profile is not visible to other fans.

We use a small number of processors, each bound by contract to use your data only as we instruct:

• infrastructure hosting and object storage;
• a transactional email provider, to send you sign-in codes and notifications;
• a payment provider, to take payments; and
• a TURN relay we operate ourselves, used only when a direct call connection is impossible.

We translate messages on infrastructure we run ourselves. Your messages are not sent to a third-party translation service to be processed.

We disclose personal data outside that list only where we must: to comply with a law or valid legal process, to report child sexual abuse material as the law requires, to protect someone’s life or safety, to establish or defend legal claims, or to a successor as part of a merger or sale of assets — in which case we will tell you before your data is transferred.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under California law. We never have.

6. Where your data is held

Planet is operated from the United States, and your data is processed there and in the places our processors operate. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on the European Commission’s Standard Contractual Clauses, together with the UK Addendum where it applies. Ask us at privacy@planetjoi.com for details.

7. How long we keep it

We keep personal data only as long as it has a reason to exist.

• Account and profile data: while your account is open.
• Message content: erased 30 days after your account is erased.
• Media you uploaded: purged from object storage when your account is erased.
• Transaction and call records: kept after erasure, unlinked from your identity where possible, because payment disputes can be raised long after the fact and we are obliged to keep financial records.
• Security and audit logs: kept for a limited period proportionate to their purpose.
• Creator identity documents: kept for as long as the law requires us to hold records for content that was published, and no longer.
• An erased-accounts register: a minimal record that a specific account was erased, kept so that we do not resurrect it and can prove the erasure happened.

Deactivating is reversible and hides your profile. Deleting is not. A fan who deletes is erased immediately and forfeits any unspent tokens. A creator who deletes is held for 30 days, with a cancel path, because earnings still owed have to be settled — and they are paid on the next payday even after the erase completes.

8. Your rights

Wherever you live, you can:

• get a copy of your data — build one yourself, any time, from Settings; it assembles everything the schema holds about you;
• correct anything inaccurate;
• delete your account and have your data erased;
• object to or restrict processing based on our legitimate interests;
• ask us to transfer your data to another service in a portable format; and
• complain to a regulator.

If the GDPR or UK GDPR applies to you, those are your Articles 15 to 22 rights, and you may complain to your national supervisory authority or to the UK Information Commissioner’s Office.

If you are a California resident, you have the rights to know, to delete, to correct, and to opt out of sale or sharing — we do neither — and we will not discriminate against you for exercising them.

Exercise any of these at privacy@planetjoi.com, or from Settings where the product does it for you. We answer within 30 days, and we will ask you to confirm you control the account before we act on a request that would disclose or destroy data.

9. Security

Passwords are hashed with Argon2id. Sessions use httpOnly cookies with rotating refresh tokens. Traffic is encrypted in transit. Access to production data is limited to the people who need it and is logged. We never log a password, a one-time code, a session token or the body of a message.

No system is perfectly secure. If you believe you have found a vulnerability, write to support@planetjoi.com and we will work with you in good faith.

10. Cookies

We use cookies and similar storage only for things the product cannot work without — keeping you signed in, protecting forms against cross-site request forgery, remembering your language, time zone and theme, and remembering that you confirmed your age. We run no advertising or analytics cookies. The Cookie Policy lists every one of them by name.

11. Children

Planet is strictly for adults and is not directed to anyone under 18. We do not knowingly collect personal data from a minor. If we learn that a minor has created an account, we close it and erase it.

If you believe a minor is using Planet, or that material depicting a minor is present here, write to support@planetjoi.com immediately. We act on those reports before anything else, and we report child sexual abuse material to the National Center for Missing and Exploited Children as required by law.

12. Changes

We will update this policy as Planet changes. The effective date at the top always reflects the current version, and we give notice in the product or by email before a material change takes effect.

13. Contact

Data protection and privacy rights: privacy@planetjoi.com
Everything else, content removal and legal notice included: support@planetjoi.com