LUKSUS Legal
Privacy Policy and Personal Data Processing
This policy explains how LUKSUS collects, uses, stores, shares, and protects personal data on an adult platform for premium content, companionship, private communications, gifts, payments, and transfers.
Platform exclusively for people over 18 years old.
We process sensitive data only with explicit authorization or when strictly necessary.
We do not sell personal data or allow exploitation, coercion, trafficking, or non-consensual content.
Data subjects may access, update, correct, request deletion, and revoke authorizations.
Applicable legal framework
- Law 1581 of 2012 and related regulations on personal data protection in Colombia.
- Law 1266 of 2008 where financial, credit, commercial, or service information applies.
- Law 1480 of 2011, Law 2439 of 2024, and applicable e-commerce rules.
- International rules applicable when we process data from users located outside Colombia, including GDPR, CCPA/CPRA, or other mandatory standards.
1. Data controller
LUKSUS, the digital platform available at luksus.me and its domains, subdomains, web applications, panels, APIs, and related services, acts as the controller of the personal data it collects to operate the platform.
When an agency, model, payment provider, verification provider, gateway, bank, hosting provider, analytics provider, or support provider processes data on behalf of LUKSUS, it acts as a processor or subprocessors under contractual instructions, confidentiality duties, and reasonable security controls.
For privacy requests, data rights petitions, child protection reports, abuse complaints, or legal requests, the main channel is privacy@luksus.app. Formal legal notices may be sent to legal@luksus.app.
2. Scope of this policy
This policy applies to clients, models, creators, independent escorts, agencies, referrals, visitors, registered users, providers, support applicants, and any person whose data is processed by LUKSUS.
The platform is aimed at consensual adult content, companionship experiences, premium content, private communications, digital gifts, wallet, Diamonds, identity verification, payments, transfers, and administrative tools. Because of this nature, some data may reveal intimate preferences, sexual life, orientation, adult consumption habits, or sensitive information.
- check_circleIf a person does not accept this policy, they must not create an account, upload content, buy Diamonds, start chats, unlock content, send gifts, or contract services within the platform.
- check_circleUse of LUKSUS is prohibited for minors under 18. If we detect an underage account, it will be blocked and evidence will be retained as needed to protect rights, investigate, and report to authorities where appropriate.
3. Data we collect
We collect only the information reasonably necessary to operate, protect, personalize, charge, pay, audit, and improve LUKSUS. The specific categories may vary depending on the user role and features used.
Account and basic identity
- Name, alias, email, phone number, country, city, language, date of birth, or confirmation of legal age.
- User role, verification status, security preferences, login history, and account settings.
- If the user chooses to sign up or log in with Google or Facebook, we may receive the user-authorized data needed to authenticate the account, such as external identifier, name, email address, profile photo, language, and technical security signals.
Verification, KYC, and compliance
- Identity document, selfie, liveness check, date of birth, nationality, address, tax information, and checks against risk lists where necessary.
- Agency data, mandates, authorizations, contracts, bank accounts, payment methods, transfer history, and account ownership support.
Content, profile, and activity
- Photos, videos, biography, published services, availability, rates, categories, premium content, received gifts, and interaction metrics.
- Chats, messages, requests, support tickets, reports, complaints, moderation evidence, blocks, and security decisions.
Payments and transactions
- Diamond purchases, gifts, subscriptions, unlocks, receipts, invoices, reversals, chargebacks, balances, commissions, and settlements.
- Payment gateway tokens or references. LUKSUS should not store full card numbers, CVV, or sensitive banking credentials when processing can be handled by certified providers.
Technical data
- IP, device, operating system, browser, session identifiers, cookies, logs, events, errors, approximate location, anti-fraud activity, and security signals.
- Aggregated or pseudonymized metrics for performance, stability, abuse prevention, internal analytics, and product improvement.
4. Sensitive data and adult content
Because of the nature of the platform, some data may be sensitive. This includes biometric data used for verification, information about sexual life, intimate preferences, orientation, body imagery, explicit content, health data voluntarily disclosed by the user, or information that could lead to discrimination if misused.
The data subject is not required to authorize the processing of sensitive data except when it is necessary for a requested function, a legal duty, age verification, prevention of exploitation, security protection, or legal defense. If the user does not authorize an essential sensitive processing activity, some features may be unavailable.
- check_circleWe do not use sensitive data to discriminate, humiliate, extort, expose, sell intimate profiles, or create abusive advertising.
- check_circleWe may process sensitive evidence to investigate abuse, fraud, trafficking, sexual exploitation, impersonation, non-consensual content, minors, threats, extortion, or serious breaches.
- check_circlePrivate communications and calls must not be recorded by users. LUKSUS may retain metadata and strictly necessary evidence when there is a report, legal obligation, legal defense, or security investigation.
5. Purposes of processing
- check_circleCreate, authenticate, manage, and protect accounts.
- check_circleAllow login through email, Google, Facebook, or other enabled identity providers, validate sessions, prevent unauthorized access, and synchronize basic account data.
- check_circleVerify legal age, identity, model authorization, and agency legitimacy.
- check_circleOperate profiles, discovery, chat, premium feed, vault, gifts, wallet, Diamonds, support, and dashboards.
- check_circleProcess payments, refunds, reversals, invoicing, transfers, commissions, accounting reports, and tax obligations.
- check_circlePrevent fraud, abuse, money laundering, chargebacks, exploitation, trafficking, non-consensual content, access by minors, spam, scraping, harassment, and illegal uses.
- check_circleModeration, report review, enforcement of terms, blocks, internal auditing, and community protection.
- check_circleSend transactional communications, security alerts, legal changes, support messages, confirmations, and operational notices.
- check_circleSend commercial communications only where authorization or legal basis exists, with an opt-out option when applicable.
- check_circleMeasure performance, fix errors, improve experience, train non-discriminatory internal processes, and develop new features.
- check_circleRespond to authorities, comply with laws, exercise legal defense, preserve evidence, and protect the rights of LUKSUS, users, and third parties.
6. Authorization and legal bases
We process personal data with prior, express, and informed authorization where the law requires it. We may also process data when necessary to perform a contractual relationship, comply with a legal obligation, protect vital interests, respond to authority requests, exercise legal defense, prevent fraud, or fulfill security duties.
Consent may be granted through forms, checkboxes, acceptance of terms, use of features, document uploads, electronic signatures, account settings, or any mechanism that allows us to demonstrate authorization. We will retain proof of authorization when reasonably and legally necessary.
7. Minors and zero tolerance
LUKSUS is a platform exclusively for adults. Minors are prohibited from creating accounts, accessing adult content, participating in chats, appearing in content, being referred, being represented by agencies, or being the subject of any interaction within the platform.
If we receive information about a minor, child sexual abuse material, exploitation, trafficking, coercion, or non-consensual material, we may block accounts, preserve evidence, remove content, suspend payments, notify processors, and report to the competent authorities.
8. Cookies and similar technologies
We use cookies, local storage, session storage, pixels, SDKs, device identifiers, and similar technologies for authentication, security, preferences, fraud prevention, analytics, performance, attribution, and product improvement.
The user may configure their browser to block or delete cookies, but some essential functions such as login, wallet, chat, payments, language, verification, or security may fail.
9. Who we share data with
We do not sell personal data. We share data only when necessary, proportionate, and permitted to operate LUKSUS, comply with the law, or protect the community.
- check_circlePayment gateways, banks, acquirers, processors, anti-fraud providers, accounting, invoicing, and payout providers.
- check_circleGoogle, Facebook, Meta, or other identity providers when the user chooses to sign up, log in, link, or recover access through those external accounts. Those providers may also process data under their own policies.
- check_circleKYC providers, age verification services, document review providers, hosting, cloud, storage, CDN, messaging, support, analytics, email, SMS, and security providers.
- check_circleModels, clients, or agencies to the extent necessary to perform a requested interaction, display profiles, coordinate permitted services, resolve reports, or manage represented accounts.
- check_circleAuthorities, judges, police, regulators, the Colombian Superintendence of Industry and Commerce, payment processors, or legitimate third parties where there is a legal duty, valid request, legal defense, harm prevention, or abuse investigation.
- check_circleBuyers, investors, advisors, or successors in a reorganization, merger, acquisition, asset sale, or transfer of operations, subject to confidentiality obligations.
10. International transfers
Data may be stored or processed in countries other than the user residence country, including cloud infrastructure, payment providers, analytics, support, verification, and security providers. Where required, we will apply contractual clauses, security controls, provider assessments, and measures required by applicable law.
By using LUKSUS, the user understands that a global platform may require cross-border processing to operate securely, reliably, and at scale.
11. Retention
We retain data for as long as necessary for the purposes described, the user relationship, tax, accounting, contractual, regulatory, anti-fraud, security, auditing, dispute resolution, and legal defense obligations.
When an account is deleted, we may anonymize, block, or retain minimum information if needed to prevent fraud, address claims, comply with laws, preserve evidence of abuse, prevent repeat access by offenders, or protect rights. Public content may be removed, but technical copies or backups may temporarily remain until scheduled purge.
12. Data subject rights
The data subject may exercise the rights recognized by applicable law, including access, update, correction, request for proof of authorization, information about the use of their data, inquiries, complaints, deletion where applicable, and revocation of authorization when there is no legal or contractual duty to retain the information.
- check_circleInquiries will be handled within the legally applicable deadlines. In Colombia, the general term is ten (10) business days, extendable according to law when necessary.
- check_circleClaims for correction, update, deletion, or revocation will be handled within the legally applicable deadlines. In Colombia, the general term is fifteen (15) business days, extendable according to law when necessary.
- check_circleTo protect privacy, we may verify identity before delivering information, modifying data, deleting an account, or processing sensitive requests.
- check_circleIf the data subject believes we did not properly address the request, they may contact the competent authority, including the Colombian Superintendence of Industry and Commerce where applicable.
13. Security
We apply reasonable administrative, technical, and organizational measures to protect data against unauthorized access, loss, alteration, abuse, improper disclosure, or destruction. These measures may include encryption in transit, access segmentation, monitoring, audit logs, anti-fraud controls, provider reviews, backups, least privilege, and internal processes.
No system is absolutely invulnerable. The user must protect credentials, activate available security controls, avoid sharing accounts, and immediately report suspicious access.
14. Analytics, moderation, and automated decisions
We may use rules, anti-fraud models, risk signals, analytics, security scoring, and automated systems to detect abuse, prioritize reviews, block suspicious transactions, limit features, recommend content, or protect the platform.
When an automated decision produces relevant effects, the user may request human review where required by applicable law, unless the measure is necessary for security, fraud prevention, child protection, legal compliance, or evidence preservation.
15. Changes to this policy
We may update this policy to reflect legal, technological, operational, security, or business changes. We will publish the current version at /privacy and indicate the update date.
If a change is material, we may notify it through reasonable means. Continued use of LUKSUS after publication implies acceptance of the current version, without prejudice to non-waivable rights of the data subject.
