Legal
Privacy Policy
Last updated: June 13, 2026
This Privacy Policy describes how Cesame Inc ("Cesame", "we", "our", or "us") collects, uses, retains, and protects personal data when you use our Services.
It applies to the Cesame mobile application, Cesame Studio (studio.cesame.live), the cesame.live website, and all associated features (collectively, the "Services"). It supplements our Terms of Service, which govern your use of the Services.
We place particular importance on the confidentiality of exchanges on Cesame. This policy is written with transparency in mind, in accordance with the General Data Protection Regulation (GDPR) and applicable French law.
1. Data Controller
The data controller for personal data collected through the Services is Cesame Inc.
For any questions regarding this policy or the exercise of your rights, you may contact us at: support@cesame.live.
2. Scope
This policy covers data processed in connection with Cesame Services.
This policy applies to personal data we process as data controller when you use the Services as a Fan, Creator, or website visitor.
It does not cover processing carried out by other Users on their own behalf, nor third-party sites or services accessible via external links, which remain subject to their own privacy policies.
3. Data We Collect
We collect only data necessary to provide, secure, and improve the Services.
Depending on your use of the Services, we may process the following categories of data:
- Identification and account data: email address, account identifiers, account type (Fan or Creator), date of birth, preferred language.
- Profile data: username, biography, country, category, social media links, profile images, and public content you choose to publish.
- Communication data: messages exchanged through the Services, support requests, and, where applicable, metadata associated with Sessions.
- Transaction data: information relating to payments and payouts, processed through our payment providers; Cesame does not store your full banking details.
- Technical and connection data: device identifiers, push notification tokens, technical logs, security and abuse prevention data.
- Usage data: aggregated or pseudonymized information about how you interact with the Services, where permitted by law.
4. Purposes and Legal Bases
We process your data for specified, explicit, and legitimate purposes.
We use your personal data notably to:
- provide, operate, and improve the Services, including connecting Creators and Fans;
- create and manage your Account, authenticate your access, and ensure platform security;
- process payments, payouts, and related operations through our providers;
- moderate public Content, prevent abuse, and maintain a safe environment, including through automated tools and human review;
- send you communications relating to the operation of the Services, including transactional notifications;
- comply with our legal obligations and respond to requests from competent authorities.
5. Legal Bases for Processing
Under the GDPR, our processing relies on one or more of the following legal bases: performance of the contract between us when you use the Services; our legitimate interest in ensuring security, moderation, and improvement of the platform, where such interest is not overridden by your rights; your consent, where required, notably for certain notifications or cookie-like technologies; compliance with legal obligations to which we are subject.
6. Moderation and Security
As part of our commitment to maintaining a safe space, we may analyze certain public or discovery-visible Content using automated tools and human review.
Private exchanges between Users are not systematically monitored. However, we may access certain data where necessary to investigate a report, enforce our Terms of Service, protect personal safety, or comply with a legal obligation.
8. Transfers Outside the European Economic Area
Some of our providers may be located outside the European Economic Area. Where such transfers occur, we ensure they are governed by appropriate safeguards under the GDPR, such as standard contractual clauses or adequacy decisions, as applicable.
9. Retention Periods
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, and thereafter for applicable limitation or legal retention periods.
Account data is generally retained while your Account is active, then deleted or anonymized within a reasonable period after closure, subject to legal obligations or the need to establish, exercise, or defend legal claims.
10. Your Rights
You have rights over your personal data under the GDPR.
Subject to applicable regulations, you may exercise the following rights:
- right of access and rectification;
- right to erasure ("right to be forgotten");
- right to restriction of processing;
- right to data portability;
- right to object, including to processing based on legitimate interest;
- right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
11. Exercising Your Rights and Complaints
To exercise your rights, send your request to support@cesame.live. We may ask for additional information to verify your identity.
If you believe, after contacting us, that your rights are not being respected, you may lodge a complaint with the French data protection authority (CNIL) or the supervisory authority in your country of residence.
12. Security
We implement appropriate technical and organizational measures to protect your personal data against destruction, loss, alteration, unauthorized disclosure, or access.
No method of transmission or storage is completely infallible, and we cannot guarantee absolute security. You are also responsible for maintaining the confidentiality of your login credentials.
13. Minors
The Services are reserved for adults. We do not knowingly collect personal data from minors. If we learn that a minor is using the Services, we will take appropriate measures, which may include deleting the relevant Account.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in the Services, regulations, or our practices. The date of last update will be indicated at the top of the document.
In the event of a material change, we may notify you by any appropriate means. We encourage you to review this page regularly.
16. Contact
For any questions regarding this policy or your personal data:
Cesame Inc — support@cesame.live