Privacy Policy

1. Introduction

OnlyU (“we,” “our,” or “us”) operates the website and platform (the Service). This Policy explains how we collect, use, and disclose personal data when you use the Service.

1.1. Acceptance

• This Policy applies to all registered users.
• By registering and using the Service, you agree to this Policy and other applicable terms.

2. Age & Legal Restrictions

2.1. Age Requirements OnlyU strictly prohibits use by anyone under 18. By accessing the Service, you:

• confirm you are 18+;
• acknowledge we do not serve minors;
• agree not to create/transfer accounts to persons under 18;
• leave the site if you are under 18.

During sign-up we request 18+ confirmation and acceptance of this Policy.

2.2. Legal Restrictions OnlyU is a CPA platform connecting marketers and creators. By using the Service, you:

• acknowledge certain countries may restrict or prohibit access;
• remain responsible for local compliance;
• accept that accounts may be closed when accessed from prohibited locations;
• will not use VPN or similar tools to bypass geo-restrictions.

If your jurisdiction limits or bans our services, do not use the Service. Geolocation may be checked via IP.

2.3. Service Limitation OnlyU may:

• limit functionality or deny service (per the Terms of Use);
• upon limitation/termination, return available balance via the original funding method (same crypto asset for crypto deposits); processing may take up to 30 days.

This right may be exercised without prior notice where violations are suspected.

3. Information We Collect & Use

3.1. Personal Data We may request: email, first/last name, payment details, crypto wallet addresses, identity documents, bank details, address and contact data. Data may be required for payment verification (e.g., Stripe), invoicing, etc.

3.2. Usage Data We collect technical/diagnostic data: browser type/version, visit timestamps, time on pages, device identifiers, and similar information.

3.3. Advertising Accounts If you provide access to ad accounts, we may process conversion and analytics data to:

• optimize campaigns; measure performance;
• build reports; improve targeting.

We keep such data confidential, do not share it with third parties, use it solely for optimization, and protect it with standard security controls.

3.4. Cookies We use necessary cookies for core functionality and security, and analytics cookies (including web analytics tools) to understand usage. You can disable analytics cookies via your browser or our on-site cookie controls.

3.4.1. Necessary Cookies — session continuity, security, anti-fraud, basic settings, sign-in state. Disabling may break core functionality.

3.4.2. Analytics & Advertising Cookies — improve product experience and measure marketing (analytics tools, ad tags, social pixels). Data is used within the company and the tools required for collection. Controls: browser settings, on-site cookie panel, settings of the respective analytics tools. We request consent for non-essential cookies on first visit.

4. Payments

4.1. Cards

• Payment data is encrypted and sent directly to the payment processor;
• we receive a tokenized reference only and do not store full card details;
• transactions are monitored for fraud.

4.2. Cryptocurrency We collect/store wallet addresses to process deposits and withdrawals and apply appropriate safeguards.

5. Data Security & Retention

5.1. Security Measures TLS 1.2+ in transit; AES-256 at rest; periodic third-party audits/pentests; MFA for admin access; real-time monitoring; staff training; secure SDLC.

5.2. Payment Data PCI DSS compliance is provided via the payment processor; we do not store PAN/CVV; we log payment events and conduct periodic compliance checks.

5.3. Retention We retain personal data only as long as necessary to provide services, meet legal obligations, resolve disputes, and enforce agreements.

6. Disclosures

We may disclose data to authorities: upon valid legal process; during investigations of serious offenses/fraud; when user safety is at risk; when required by law. We validate requests, limit scope, notify users when permitted, and keep records.

7. Your Rights & Controls

7.1. Rights Access, rectification, deletion, objection, portability, and withdrawal of consent.

7.2. Account Deletion & Residual Records Request via the dashboard/support. We promptly delete: contact info, profile/preferences, crypto wallet addresses, marketing/analytics data, communication history, uploaded content. We must retain: financial records (up to 7 years), KYC/AML documents, tax data, records of disputes/investigations, age-verification proofs, critical audit logs—to meet legal/financial obligations, prevent fraud/abuse, support tax reporting, and protect users.

7.3. Data Export Before deletion you may request export of transaction history, campaign statistics, performance metrics, and other activity.

8. International Transfers

Your data may be processed outside your country. We apply appropriate safeguards for such transfers.

9. Changes to This Policy

We may update this Policy by posting a new version on the site and updating the “last updated” date. Additional notices may appear in your dashboard notifications.

10. Contact

For privacy questions, contact support via the dashboard/contact form.

11. Compliance & Certifications

We aim to comply with applicable data-protection and financial-services requirements, including: GDPR; CCPA; PCI DSS; BSA; AML; KYC.