Fanduit / Legal / Privacy Policy

Privacy Policy

Last updated 23 July 2026

Effective date: 23 July 2026

This Privacy Policy explains how DarkRhino ("Fanduit") handles personal data in connection with the Fanduit developer platform (API, MCP server, dashboard, website). Fanduit is B2B developer infrastructure.

1. Data we handle as a business (controller)

For our own customers and site visitors we process: account and contact details, authentication data, billing details (via our payment processor — we do not store full card numbers), support communications, and usage/telemetry needed to operate, secure, and improve the Service.

2. Data we process for customers (processor)

When a customer connects a Platform account, the Service processes personal data of that account's subscribers/fans and the creator on the customer's behalf. For that data the customer is the controller and Fanduit is the processor; our handling is governed by the Data Processing Addendum. We do not use it for our own purposes.

3. Connected credentials

We store Platform session credentials solely to provide the Service. They are encrypted at rest, access-restricted, and never sold. Customers can disconnect an account at any time, which deletes its stored credentials.

4. How we use business data

To provide, secure, meter, bill, and support the Service; to comply with law; and to communicate with customers. Legal bases (where GDPR applies): contract, legitimate interests, consent (where required), and legal obligation.

5. Sharing

We share data with sub-processors (hosting, proxy, email, billing) under contract, and where required by law. We do not sell personal data. A current sub-processor list is at /subprocessors.

6. Retention

We keep business data for as long as needed for the purposes above and legal requirements; processor data per the DPA and customer instructions.

7. Your rights

Depending on your location you may have rights to access, correct, delete, port, or object to processing of your personal data. Contact privacy@fanduit.co. Fans whose data is processed via a customer's account should contact that customer (the controller); we will assist them.

8. Security, international transfers, changes

We use appropriate safeguards (see the DPA) and rely on lawful transfer mechanisms for cross-border data. We may update this policy on notice.

Contact: privacy@fanduit.co.