Privacy Policy

This Privacy Policy describes how Gayvi.com (the "Website") collects, uses, and shares information. The Website is an adult streaming store. It is not directed to children.

1. Data we collect. Account data (email address, password hash, authenticator or passkey credentials, public user code). Purchase metadata (title, SKU, amount paid, NATS transaction identifier, approval time). Playback tickets and session identifiers (hashed; not stored in application logs in raw form). Watch and bandwidth logs used to compute GB per revenue. Age-gate cookies. Affiliate cookies placed under NATS / zBUCKz rules when you arrive from a tagged link. Messages you send through Contact.

2. Data we do not collect. We do not store full payment-card numbers, CVV codes, or magnetic-stripe data. Card processing is performed on Gayvi or CCBill hosted payment pages. We do not log raw playback tokens or ticket secrets in application logs.

3. How we use data. To create and secure your account (including two-factor authentication or passkeys). To grant, enforce, and expire rentals, permanent access, and creator passes. To prevent concurrent main-feature playback beyond one session per account. To pay affiliates through NATS / zBUCKz. To detect fraud, chargebacks, and abuse. To respond to Contact and content-removal requests. To comply with 18 U.S.C. § 2257 record-keeping where applicable and with lawful process.

4. Cookies. Essential cookies keep you logged in and remember the age gate. Affiliate cookies attribute a sale to a NATS partner according to the same cookie window used by zBUCKz. We do not use the Website as a PWA and we do not serve third-party advertising pixels as part of the core product.

5. Sharing. Billing processors (CCBill / Gayvi hosted checkout) receive the information needed to complete a one-time sale. NATS receives the information needed to credit an affiliate. We do not sell mailing lists. We may disclose information to counsel, auditors, or law enforcement when required by law or to protect the Website and its users.

6. Retention. Account and purchase records are kept for the life of the account and for tax, chargeback, and 2257-related periods afterward. Playback tickets expire within minutes. You may request account closure through Contact; some records must be retained by law.

7. Security. Passwords are stored as one-way hashes. Administrative access is IP-restricted or via VPN. 2257 documentation is stored off the public CDN.

8. International visitors. The merchant of record is in the United States. If you access the Website from another country, you consent to processing in the United States.

9. Your choices. You may close your account or ask what data we hold via Contact. Do not send card numbers in that request.

10. Changes. We may update this Policy by posting a new version. Material changes will appear on this page.

Date of last revision: September 8, 2026.