Privacy Policy

Last updated: 10 October 2026

HARDLIFE Pty Ltd (ACN 671 401 595) trades as Creator Inbox Management (“CIM”, “we”, “us”). We run the OnlyFans inbox for creators: chatting, mass messages and pay-per-view. This policy explains what personal information we hold, why, who we share it with, how long we keep it, and what you can ask us to do with it.

It applies to creators who enquire, book a call, take a free week or sign our Services Agreement, to creators we contact about working with us (including creators referred to us), and to people who visit creatorinboxmanagement.com and app.creatorinboxmanagement.com.

1. Who is responsible

We are responsible for information about you as a creator or visitor (in GDPR terms, we are the controller).

You are responsible for information about your fans that we handle while running your inbox. We handle it on your behalf and on your instructions (in GDPR terms, you are the controller and we are your processor). Section 7 covers this.

Contact: admin@creatorinboxmanagement.com

2. What we collect about you

• When you enquire: your name, email, OnlyFans and Instagram handles, how your inbox is run now, how long you’ve been on OnlyFans, your earnings figures, how you’d like to start, how you heard about us, and anything you write in the message field.

• When we contact you first: your name, the social handles we found you through, any contact details you share with us, our messages with you, and our notes on the conversation.

• When someone refers you: your Instagram handle and, if they give it, your email, along with who referred you. We ask anyone who refers you to let you know first.

• When you book and take a call: your booking details, and the call recording, transcript and written summary. We tell you the call is recorded before it starts.

• When you sign: your legal or business name, address, country, the business details you sign as, your signature record (time, IP address, device), and the version of the agreement you signed.

• During onboarding and while we work together: your onboarding answers (persona, pricing preferences, content notes, and the boundaries you set for what we say and sell), access details you give us for your account, content you upload for us to use, account and earnings figures, invoices and payments, any referrals you make and referral rewards paid to you, and our messages with you in your Telegram group.

• When you use our site and app: device and browser information, IP address, sign-in records (passkeys and one-time codes), basic site analytics and usage logs. We don’t use advertising trackers.

We collect this from you directly, from your OnlyFans account and the tools we use on it, and from the service providers described in section 5.

3. Why we use it

• To answer your enquiry, run the call and send you a summary.

• To get in touch about working with CIM, if we contact you first or someone refers you, and keep a record of that contact.

• To provide the service: run your inbox in your voice, send mass messages and PPV, and show you your figures on your dashboard.

• To invoice you, receive payment and keep financial records.

• To track the referrals you make and pay any referral reward.

• To keep your account and ours secure, and to investigate problems.

• To meet our legal obligations, including tax and record-keeping.

For creators under GDPR / UK GDPR, our lawful bases are: performing our contract with you (or taking steps before one); our legitimate interests in running and securing the business, where they are not overridden by yours; and legal obligation.

Sensitive information. Some onboarding answers, such as your boundaries and content notes, can describe your sexual preferences or practices. The law treats this as sensitive information (special category data under GDPR / UK GDPR). We ask for your explicit consent before we collect it, at the onboarding step, and use it only to run your inbox within the limits you set. You can withdraw that consent at any time by telling us. We’ll then delete those answers, but we may not be able to keep running your inbox the way you want without them.

We don’t sell your information, and we don’t use it for advertising.

4. Discretion

We work behind your account. We don’t tell fans, other creators or anyone else that we run your inbox. Our team works under confidentiality obligations, and access inside our app is limited by role: chatters see what they need to chat in your voice, and your personal details, documents and access credentials are restricted to a small number of senior roles.

5. Who we share it with

We share information only with the kinds of service providers we use to run the business, and only what each one needs:

• app hosting and database

• email, file storage and email delivery

• accounting, invoicing and payments

• the chatting and account-management tools we use on your OnlyFans account

• call booking, call recording and transcription

• AI drafting and analysis tools

• messaging with you

• our website

• our accountant and legal advisers

We may also disclose information where the law requires it. A current list of the providers we use is available on request. For creators we work with, we’ll let you know before we add a provider that handles your fans’ information.

6. Where it is held

Our app and database are hosted in Singapore. Some of our providers store or process information in other countries, including the United States, Australia and the European Union. Where we send information out of the EU or UK, we rely on appropriate safeguards such as standard contractual clauses. Before sending personal information overseas, we take reasonable steps to make sure the recipient handles it consistently with the Australian Privacy Principles.

7. Your fans’ information

While running your inbox we see fan usernames, messages, purchase and spending history, and any notes and tags kept in your account and chatting tools. We also keep records of custom requests and sales. We use this only to run your inbox for you. We don’t use it for our own purposes or share it with other creators. The processor terms in your agreement with us set this out in full: we act on your instructions, keep it confidential and secure, use only providers on our current list, help you respond to fan requests, and tell you without undue delay if we become aware of a breach affecting it.

8. How long we keep it

• Your content: deleted from our systems within 14 days of the service ending, and we confirm it to you. Your OnlyFans vault isn’t touched.

• Fan information: our fan notes are deleted when the service ends, and we stop accessing your account and our chatting tools. Custom-request and sales records stay only as part of the business record below. Fan information in your OnlyFans account stays there, because it’s yours.

• Business records (your agreement, figures, invoices, payments, referral rewards and the record of your Telegram group): kept for 7 years, then deleted.

• Enquiries that don’t go ahead: kept for 24 months, so we have a record if you get in touch again, then deleted.

• People we contact who don’t go ahead (including creators referred to us): if we contact you about working with CIM and you don’t go ahead, we keep your details and our messages as a record of that contact. You can ask us to delete them at any time at admin@creatorinboxmanagement.com.

9. Security

We use role-based access, encrypted connections, passkey sign-in and limited access to credentials. No system is perfectly secure. If a data breach is likely to cause you serious harm, we’ll tell you and, where required, the regulator.

10. Your rights

You can ask to access the information we hold about you or correct it. Under GDPR / UK GDPR, you can also ask us to delete it, restrict or object to how we use it, or give you a copy in a portable format. Some records we have to keep for legal reasons even if you ask us to delete them, and we’ll tell you if that applies. Email admin@creatorinboxmanagement.com and we’ll reply within 30 days.

If you’re not happy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the EU or UK, to your local data protection authority.

11. Changes

We’ll post any changes here with a new date, and tell current creators in the app if a change affects them.