Privacy Policy

Overview & Our Commitment

DaddyBear Den™ is operated by Topman Media LLC. We understand that our users value their privacy deeply — particularly given the nature of our service. We are committed to handling your personal information with discretion, transparency, and respect.

This Privacy Policy explains what data we collect, why we collect it, how it is stored and protected, who we share it with, and what rights you have over your data. By using DaddyBear Den™, you agree to the practices described in this policy.

This service is intended for adults 18 years of age or older. If you are under 18, do not use this service or provide any personal information.

What Data We Collect

Account & Registration Data:

• Email address (required to create an account or access the free trial)
• Password (stored in encrypted form — we never see your plain-text password)
• Age verification confirmation (date of acceptance, not date of birth)

Payment Data:

• Payment processing is handled entirely by our third-party payment processor (Segpay). We do not store your full credit card number, CVV, or billing address on our servers. We receive only a transaction token and subscription status from the processor.

Conversation Data:

• Messages you send to AI personas and the AI-generated responses
• Persona selections and session metadata (timestamps, session length)
• Conversation history is stored to enable persona memory and continuity features

Technical Data:

• IP address (used for fraud prevention and geographic access controls)
• Browser type and device type
• Pages visited and features used (analytics only — no behavioral advertising)
• Cookie data (see Section 06)

Communications:

• If you contact us by email, we retain that correspondence to respond to your inquiry and maintain records of any dispute resolution.

How We Use Your Data

We use your data only for the following purposes:

• Service delivery — to operate your account, process your subscription, and deliver AI persona conversations
• Persona memory — to allow AI personas to remember context from previous conversations (paid subscribers only)
• Account security — to authenticate your identity and protect your account from unauthorized access
• Billing & payments — to manage your subscription, process renewals, and handle refund or dispute requests
• Communications — to send transactional emails (receipts, password resets, subscription confirmations). We do not send marketing emails without your explicit opt-in.
• Fraud prevention — to detect and prevent fraudulent activity, chargebacks, and abuse
• Legal compliance — to comply with applicable laws and respond to lawful requests from authorities
• Service improvement — anonymized, aggregated usage data to improve the product. This data cannot be used to identify you.

We do not use your data to train AI models. Your conversations are not used to improve any AI model, including the models powering our personas.

How We Store & Protect Your Data

Your data is stored on secure servers with industry-standard protections including:

• Encryption in transit (TLS/SSL) for all data transmitted between your browser and our servers
• Encryption at rest for sensitive data including passwords and conversation history
• Access controls — only authorized personnel with a legitimate need can access user data
• Regular security audits and vulnerability assessments

We retain your account data for as long as your account is active. If you delete your account, your personal data and conversation history will be permanently deleted within 30 days, except where retention is required by law.

Payment transaction records are retained for 7 years as required for financial and tax compliance.

Third-Party Processors

We work with the following categories of third-party service providers who may process your data on our behalf. All processors are contractually obligated to handle your data securely and only for the purposes we specify:

• Payment Processing: Segpay (segpay.com) — processes subscription payments and manages billing. Subject to Segpay’s own Privacy Policy and PCI-DSS compliance standards.
• Authentication & Database: Supabase — stores account credentials and conversation history. Data is encrypted at rest and in transit.
• AI Processing: Featherless.ai — processes conversation messages through AI language models to generate persona responses. Messages are transmitted securely. Please review Featherless.ai’s data policy for details on their data handling.
• Hosting: Hostinger — hosts the DaddyBear Den™ website and application infrastructure.
• Email: A transactional email provider for account notifications. No marketing emails are sent without explicit opt-in.

We do not sell, rent, or share your personal data with any third party for advertising or marketing purposes.

Cookies & Tracking

We use cookies and similar technologies for the following purposes:

• Essential cookies — required for the site to function (session management, authentication, age gate confirmation). Cannot be disabled.
• Analytics cookies — anonymized data to understand how users navigate the site. No personally identifiable information is collected. You may opt out via your browser settings.

We do not use advertising cookies, tracking pixels, or third-party behavioral advertising of any kind. We do not display ads on DaddyBear Den™.

You can control cookie settings through your browser. Disabling essential cookies may prevent the site from functioning correctly.

We Do Not Sell Your Data

Topman Media LLC does not sell, rent, lease, or otherwise transfer your personal information to any third party for monetary compensation or other consideration.

This applies to all user data including email addresses, conversation history, payment data, and usage behavior. Your data is used solely to operate and improve the DaddyBear Den™ service for you.

California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know that we do not sell your personal information. No opt-out is required because we do not engage in this practice.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data and account (“right to be forgotten”)
• Portability — request your data in a machine-readable format
• Restriction — request that we restrict processing of your data in certain circumstances
• Objection — object to processing of your data for certain purposes
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.

California residents (CCPA): You have the right to know what personal information is collected, the right to delete, the right to opt-out of sale (we do not sell data), and the right to non-discrimination for exercising your privacy rights.

European/UK residents (GDPR): If you are located in the EU or UK, you have the rights described above and may lodge a complaint with your local data protection authority.

Children’s Privacy

DaddyBear Den™ is strictly for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will immediately terminate their account and delete all associated data.

If you believe a minor has accessed this service, please contact us immediately at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will notify active subscribers by email at least 14 days before the changes take effect.

Your continued use of DaddyBear Den™ after changes take effect constitutes your acceptance of the updated policy.