PRIVACY POLICY

Who is responsible for your data

The data controller is ALLURE (SAS), the publisher of the website, whose full identity is given in the legal notice (“Publisher”), and who can be reached at any time at allure.agency.paris@gmail.com. ALLURE has not appointed a data protection officer: write to this address with any question about your data.

What we collect, why and on what basis

The application form (/postuler and its Italian, Spanish and Portuguese versions) collects your answers, your photos, your WhatsApp number, your email address and your social media accounts (Instagram, and TikTok or Telegram if you add them), as well as technical data: IP address, approximate city derived from the IP address, type of phone and browser, language, time zone and screen size of the phone, and the origin of your visit (originating link or ad). Your answers and your photos do not leave your phone until you click “Send my application”.

• Reviewing your application, getting back to you and preparing a possible collaboration: these are pre-contractual steps taken at your request (Article 6(1)(b) GDPR). The fields marked as mandatory are needed to review your application; without them, we cannot do so.
• The content you agree to create (lingerie, adult content…) may reveal information about your sex life, which the GDPR gives special protection. We only process it with your explicit consent, given through the mandatory box at the last step (Article 9(2)(a) GDPR). You can withdraw it at any time by writing to us: we then delete your application, since we can no longer review it.
• The check that a face appears in your photos is done on your phone: nothing is sent or kept for this check.
• To organise the review of applications, our internal tool calculates an indicative score based on your answers (current experience and earnings, content accepted, whether or not you show your face, audience, availability, past experience with an agency) and on the number and technical quality of your photos (sharpness, lighting, contrast, resolution). It never judges your appearance, and it is always a person on the team who decides on the next steps: no decision is taken in a fully automated way. As it takes into account the content you accept, it relies on the same explicit consent as the review of your application.
• Alerting the team: each application sends your full profile (answers, content accepted and limits, city and approximate location of your IP address, device, origin, WhatsApp, email and social media accounts), then your photos, to a private Telegram channel reserved for the team, so that we can reply quickly. These messages are kept by Telegram; they follow the same legal basis as the review of your application.
• Follow-up and reminder emails, Google ad measurement and the presentation to partner agencies are detailed below, each with its legal basis.
• Questions on WhatsApp: the “Ask your question” window asks for your first name, your email address, your profile and your question (or a few words about yourself to apply), and, if you provide them, your city and your Instagram. When you confirm the window (button sending you to WhatsApp), these answers are passed on to the team in the private Telegram channel described above, with the same technical data as for an application (IP address and approximate city, type of phone and browser, language, time zone and screen size, origin of your visit), so that we can reply to you even if you do not send the message, including by email. The message itself is processed by WhatsApp (Meta) under its own terms. We keep these exchanges for as long as it takes to reply to you and follow up on your request, at most 2 years after our last contact (legitimate interest).
• Security: to block bots and abuse, the website’s forms have your browser check that a real person is sending them (Vercel BotID), and our host limits the number of submissions per IP address. This technical data is used solely to protect the website (legitimate interest).

How long we keep it

• Application not selected: we delete it no later than 2 years after our last contact, sooner if you ask.
• Application selected: for the whole collaboration, then for the periods required by law (contract, accounting).
• If we learn that an applicant is under 18, her application is deleted without delay.
• Email reminders, Google ad measurement and partner agencies: the periods are given in their sections below.
• Technical logs (security, errors): at most 60 days. Audience measurement: see “Cookies and trackers”.

Who can access it

Only the members of the ALLURE team who handle applications have access to it. We also use technical service providers acting on our behalf:

• Vercel (hosting of the website, the form and our application management tool, bot protection), United States;
• Supabase (database of the application management tool), servers in Ireland;
• Cloudflare (photo storage);
• Resend (sending emails);
• Telegram (private team alert, with your contact details and your photos; public channel of the partner agencies, see below);
• Anthropic (Claude artificial intelligence assistant, which helps the team process applications, and automatic check of photos before a publication for the partner agencies, only with your consent);
• WhatsApp (Meta), when we contact you on the number you gave us;
• Google (ad measurement, only with your consent).

Without your consent, your data is never passed on or sold. Vercel, Cloudflare, Resend, Anthropic, Meta and Google are established in the United States or transfer data there: these transfers are governed by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses. Telegram is a company established outside the European Union, which applies its own terms to the messages passing through it.

Your rights

At any time, you can access your data, have it corrected or deleted, request the restriction of its processing, object to processing based on our legitimate interest, receive the data you provided to us in a readable format (portability), withdraw any consent given, and set instructions regarding what happens to your data after your death. Write to allure.agency.paris@gmail.com: we reply within one month. We only ask you for proof of identity if there is reasonable doubt as to who made the request.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, cnil.fr/fr/plaintes), or with the data protection authority of your country.

Adults only

The form is reserved for people aged 18 or over: it stops, without sending anything, if the age given is lower.

Email reminders

After you send your application, we send you an email with our OnlyFans, MYM and Reveal referral links so you can create your accounts: this is the follow-up to your application, and it is sent only once per application. If you also tick the “email reminders” box at the last step of the form, we then send you an email every two days: reminders and tutorials to create and verify your accounts for as long as you have not told us you have created them, then our tips to start earning and an invitation to write to us on WhatsApp, until you unsubscribe. Each reminder contains an “I have already created all my accounts” button, and all our emails contain a one-click unsubscribe link. This box is optional: without it, you receive no reminders or tips, and your application is reviewed in the same way.

The first email is based on our legitimate interest in following up on your application. The legal basis for these reminders and tips is your consent, which you can withdraw at any time via the unsubscribe link or by writing to us. We keep your address, your first name and the status of your reminders (emails sent, clicks, accounts declared as created) for as long as you remain subscribed, then at most 3 years after you unsubscribe or after your last contact, to prove your consent and to stop writing to you. These are referral links: the platform may pay us for your sign-up.

Google ad measurement

If you arrive on the website through a Google ad and you tick the box provided at the last step of the form, we send Google Ads the identifier of the click on the ad (gclid) and the date and time of your application, to measure which ads bring in applications. Never your name, your number, your photos or your answers. This box is optional: without it, none of this is sent to Google, and your application is reviewed in the same way. We only send applications less than 90 days old.

The legal basis for this transfer is your consent. You can withdraw it at any time by writing to us at allure.agency.paris@gmail.com: nothing more will be sent to Google for your application (withdrawal does not affect what was sent before). Google (Google Ireland Limited and Google LLC) processes this data under its own privacy policy, policies.google.com/privacy. It may be transferred outside the European Union, in particular to the United States, under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Partner agencies (network marketplace)

If you tick the “partner agencies” box at the second-to-last step of the form, we publish your profile, without your name or contact details, on our network’s public Telegram channel, Network Marketplace OFM (t.me/networkmarketplace_ofm), which anyone can view: your photos (at most 5, without their metadata or GPS location), your age, your country of residence, your languages, the model of the phone you use, the content you accept, your platforms, your experience, your monthly earnings goal, your availability, the countries you block, your answers to the “For agencies” questions asked just above the box (level of English, content ready to publish, status of your OnlyFans account, linked and verified payment method, other payment methods, desired fixed pay and payment frequency), a reference number and the price of the introduction. These answers are only sent if the box is ticked: without it, they do not leave your device. Never your first name, your nationality, your number, your email, your Instagram, your other social media accounts or your city. Your face only appears in these photos if you chose to show it in the form; otherwise, it is blurred in the published photos.

Before publication, each photo is automatically checked by an artificial intelligence tool (Anthropic): a blurry photo, one in which you do not appear, one that shows your genitals or a sexual act, or one that could suggest a minor is never published; bare breasts, a face you did not choose to show, a username, a number or a watermark are blurred, and the blurred copy is checked again before publication. This check never judges your appearance. A partner agency interested in your profile contacts ALLURE, which then passes on your first name, your WhatsApp number and your Instagram so that it can offer you a collaboration, which you remain free to turn down. ALLURE is paid by the agency for this introduction, never by you.

The legal basis for this publication and this transfer is your consent. This box is optional, and your application is reviewed in the same way. Without it, only an ANONYMOUS profile, without any photo, may be published on the same channel: your age, your country of residence, your languages, the content you accept, your platforms and the size of your Instagram audience (a range, never your account), your experience, your availability, the countries you block, a reference number and the price of the introduction. Never your first name, your photos, your number, your email, your Instagram, your city, your nationality or your phone, and nothing is passed on to an agency without your consent: if an agency is interested, ALLURE first asks you whether you want to be introduced. The legal basis for this anonymous profile is the legitimate interest of ALLURE and your own (offering you work with agencies); you can object to it at any time by the means below, and it is then removed within 72 hours. It only exists for applications sent from October 8, 2026, and it disappears from the channel as soon as your full profile is published with your consent. If you did not tick the box, we may send you a single email offering to introduce you to the partner agencies: your consent is only recorded if you yourself click “Yes, introduce me to the partner agencies” on the page that opens, after reading these terms, and you can unsubscribe from these emails in one click. You can withdraw your consent at any time by writing to us at allure.agency.paris@gmail.com or on WhatsApp: your profile is removed from the channel within 72 hours and your contact details are no longer passed on to anyone (withdrawal does not affect introductions already made). Your profile remains published for at most 12 months. The channel is hosted by Telegram, and the partner agencies may be established outside the European Union.

The website sets no advertising or audience measurement cookies, and loads no script from another website (social networks, ad networks, external fonts or videos): our host’s measurement and anti-bot scripts are served from our own domain. That is why it does not display a cookie banner. Your browser only keeps the following few pieces of information, all exempt from consent:

• the draft of the application form (session storage “allure_postuler_brouillon”), so that you do not lose your answers if the page reloads. It is deleted when you close the tab or when your application is sent;
• the origin of your visit (session storage “allure_source”: utm parameters of the originating link or ad, website you came from, landing page), attached to your application only if you send it, and deleted when you close the tab. It is not kept if you object to audience measurement with the button below. Ad click identifiers (gclid, fbclid…) are never written to your browser: they stay in the page’s memory until you close it;
• the website’s sound setting, muted by default on phones (“allure-muted”);
• your objection to audience measurement, if you have expressed it (“allure_mesure_refusee”);
• the anti-bot check of the form (Vercel BotID), which may set a technical security cookie, necessary to protect the website.

Audience measurement

The website uses Vercel Web Analytics, without cookies, to count visits in aggregate (pages viewed, country, type of device, referring website and type of referral: search engine, artificial intelligence assistant, social network or ad). Vercel recognises a visit by a fingerprint calculated from the request, deleted after 24 hours; the statistics are not used to identify you, are not cross-referenced with any other processing, and ad click identifiers are not sent to Vercel Web Analytics (they only go to Google with your consent, see “Google ad measurement”). This measurement is exempt from consent, but you can object to it at any time with the button below; if your browser sends the “Global Privacy Control” signal, it is switched off automatically.

External websites

Links to WhatsApp, OnlyFans, MYM, Reveal, Instagram, TikTok or Telegram open their own websites or apps, which apply their own rules on cookies and personal data.

Hosting

Vercel Inc.
440 N Barranca Ave #4133, Covina, CA 91723, United States
vercel.com/contact

Contact

For any question, write to us at allure.agency.paris@gmail.com.