Privacy notice
Last updated 8 July 2026
This notice explains what FindomLink collects, what we do with it, what we never see, and the rights you have over your data. It is written in plain English on purpose. If something is unclear, write to us and we will explain it again.
1. Who we are
FindomLink is operated by CG APPS Ltd, a company registered in England and Wales (company number 17266903), at 66 Paul Street, London EC2A 4NA. CG APPS Ltd is the data controller for the personal data described in this notice.
2. What we collect
We collect only what the product actually needs in order to work. For creators that is:
- Account details: your email, your FindomLink handle, your display name, your payout currency, and the fact that you confirmed you are 18 or older.
- Your single profile photo, when you upload one.
- The public links you add to your profile.
- Tip records: the amount, currency, time, the supporter's optional alias, the supporter's optional note, and the state of the tip (pending, available, refunded, and so on).
- Delivery records: which thank-you content item was sent for each tip and when the private link expired, so we can evidence delivery and resolve disputes.
- Payout records: when you withdraw, where to, the amount, and the outcome.
- Identity verification status, as verification (KYC) is required before payout. Identity documents themselves are handled by our verification provider and are not stored on our servers.
- Sign-in records and a basic audit log of sensitive actions on your account.
For supporters sending a tip, that is:
- The amount and currency of the tip.
- Your email address, which you provide at checkout. We use it for two purposes only: to deliver the creator's thank-you content item to you, and to help prevent fraud and abuse. We keep it only as long as we need it for those purposes and to meet our legal duties, then delete or anonymise it.
- The optional alias and the optional note you chose to attach.
- The fact that you confirmed the purchase at checkout.
- A reference returned by our payment provider so the tip can be matched and, where appropriate, refunded.
3. What we do not collect
We never see or store your full card number. Card details are entered into a secure field hosted by our payment provider, are sent directly to that provider, and are tokenised there.FindomLink only ever holds the token reference.
We do not collect your real name as a supporter, unless you choose to type it as your alias. Supporters do not need a FindomLink account.
4. How we use what we collect
- To run the platform: showing a creator's public profile, recording a tip, delivering the thank-you content item, crediting a creator's balance, processing a payout.
- To meet our legal duties: anti-fraud checks, accounting records, and responding to lawful requests from regulators or law enforcement.
- To keep the platform safe: moderating content, detecting abuse, reviewing reports, enforcing the Acceptable Use Policy.
- To contact creators about their account: confirmations, security notices, and important changes to the service.
We do not sell personal data. We do not share personal data with anyone for their own advertising or analytics use.
5. Supporter anonymity
Supporters do not need an account to send a tip. The alias and note fields are optional. A creator sees what the supporter chose to share, plus the amount and the time. The creator does not see the supporter's email, full name, or payment details.
6. Sharing with providers
We use a small number of trusted providers to operate the service. Each receives only what it needs to do its job:
- Payment providers, to take a card payment and return a token.
- Payout provider, to send money to a verified creator.
- Identity verification provider, as a creator is required to verify before a payout.
- Content moderation and delivery provider, to screen a thank-you content item before delivery and serve it to the paying supporter through a private, expiring link.
- Email provider, to send creator account and tip-received notifications.
- Hosting and database provider, to run the application and store the records described in section 2.
Each of these providers acts under contract with CG APPS Ltd and is bound to use the data only for the purpose it was shared.
7. Storage and security
We use reputable infrastructure and service providers. Some of them process data outside the United Kingdom or the European Economic Area. Where that happens, we rely on the international-transfer safeguards required by the UK GDPR, including the UK International Data Transfer Agreement or the UK addendum to the EU Standard Contractual Clauses.
We keep records for as long as we need to provide the service, meet our legal duties, and answer chargebacks and disputes. After that we delete them or anonymise them so the person can no longer be identified.
8. Your rights
Under the UK GDPR you have the right to ask for a copy of the personal data we hold about you, to ask us to correct it, to ask us to delete it where the law allows, to ask us to limit how we use it, and to object to certain uses. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
We will respond within one month. Where we cannot act on a request, for example because the law requires us to keep a record, we will tell you why.
9. Changes to this notice
If we make a material change to this notice we will surface it in the product and update the “Last updated” date at the top of this page.
Contact
Data questions and rights requests can go to support@findomlink.com.