RiotModels Privacy Policy

Updated: October 21, 2026 04:11 pm

Preamble

RiotModels (the "Platform") is operated by CandyStar LLC ("CandyStar," "we," "us," or "our"), a company registered in the United States. This Privacy Policy describes how we collect, use, store, share, and otherwise process personal information in connection with the operation of the Platform, including identity and age verification, Content screening, fraud prevention, payment processing, and other operational activities.

Sharing your information with third-party verification services
RiotModels uses specialized third-party providers to verify the identity and age of Models, confirm the identity and eligibility of persons appearing in Content, and perform age-assurance checks for Users accessing age-restricted Content.

Depending on the verification method and applicable requirements, these services may process:

• Full name, date of birth, and contact information;
• Government-issued identification documents and related information;
• Photographs, selfies, facial images, or video recordings;
• Facial matching, liveness verification, and age-estimation information;
• Verification status, results, and related risk indicators.

Verification information may be collected directly by the third-party provider or securely transmitted by RiotModels.

We engage specialized third-party service providers for identity verification, age verification, and age assurance, depending on the verification method and applicable jurisdictional requirements.

Government-issued identification and identity verification are required for Models and other persons where applicable. Visitors and Subscribers may be subject to additional age-assurance procedures before accessing restricted Content.

Verification results may be used to approve or reject registration, restrict access, prevent publication, investigate suspected fraud, and comply with applicable laws and payment-processing requirements.

Where facial images or biometric information are processed, the applicable verification method and any additional notice or consent requirements will be determined by the nature and purpose of the processing and relevant law. 

Sharing your information with third-party payment services
To a certain degree, some of the provided information may be shared with third-party services that are employed in receiving payments from Subscribers and sending payouts to Models. For these providers, we recommend that you read their Privacy Policies and Terms of Service so you can understand the manner in which your personal information will be handled.

Sharing information with payment processors and compliance auditors

Payment processors, acquiring banks, financial institutions, and their authorized compliance representatives may require access to User information and Content to evaluate the Platform's compliance with applicable laws, payment-network rules, and content standards.

Such reviews may involve access to published Content, subscription-only Content, account information, relevant transaction records, and, where specifically authorized, unpublished Content submitted for compliance review.

Access may be provided through restricted audit accounts, designated review interfaces, or other approved methods. The information made available depends on the scope of the review and the requirements of the requesting institution.

RiotModels may also disclose relevant information in connection with payment disputes, fraud investigations, regulatory inquiries, and lawful requests from competent authorities. 

Links
When you click on links on our platform, they may take you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

International Processing and Disclosure

RiotModels operates from the United States and may use third-party service providers with infrastructure, personnel, or processing facilities in other countries.

As a result, personal information, verification data, and User Content may be transferred to or processed in jurisdictions outside the country where the User resides.

Where applicable data-protection laws require additional safeguards for international transfers, RiotModels will use legally recognized transfer mechanisms and appropriate protections for the relevant processing arrangements.

Personal information may also be disclosed where necessary to comply with applicable law, respond to valid legal requests, investigate suspected illegal activity, protect the safety of Users or other persons, or satisfy applicable financial and regulatory requirements. 

Automated Content Screening and Third-Party Analysis

Purpose of Content Screening

RiotModels uses automated systems, artificial intelligence (AI), machine-learning technologies, and specialized third-party services to review User-submitted Content and identify material that may violate applicable laws, the Platform's Terms of Service, Prohibited Content Policy, or payment-processing requirements.

These systems support our Content moderation, age-related safety controls, fraud prevention, and other Trust & Safety procedures.

Content Shared for Analysis

To perform these checks, we may transmit uploaded Content, or selected portions of it, to authorized third-party analysis services.

Depending on the type of Content and the screening method, the information transmitted may include:

• Images, photographs, and illustrations;
• Video recordings, selected frames, and thumbnails;
• Audio recordings and generated transcripts;
• Text, titles, captions, descriptions, and associated metadata;
• Facial images or other visual information relevant to age assessment;
• Other information reasonably necessary to identify potentially prohibited Content.

Such processing may include Content submitted for publication, Content awaiting moderation approval, previously published Content, and Content accessible only through paid subscriptions or other restricted Platform features.

User-submitted Content may contain personal information concerning identifiable individuals, including sensitive information revealed by intimate or sexually explicit material. Where such information is processed for automated analysis, RiotModels applies the relevant privacy and data-protection requirements, including additional safeguards where required by law. 

Age Assessment of Depicted Persons

AI-powered services may be used to analyze visual Content for indications that depicted persons appear to be minors or otherwise present age-related safety concerns.

Automated age assessment is used as a screening and risk-identification measure. It does not, by itself, establish a person's actual age or replace government-issued identification and other required performer-verification procedures.

Where automated analysis identifies age ambiguity or potential underage depictions, the Content may be withheld from publication, restricted, or referred for additional review.

Prohibited Content Detection

Third-party tools and AI-powered services may analyze submitted Content to identify potential violations involving:

• Sexual exploitation, coercion, or non-consensual activity;
• Depictions of minors or age-ambiguous persons in sexual contexts;
• Prohibited sexual or extreme Content;
• Human trafficking, violence, abuse, or other illegal activity;
• Non-consensual intimate imagery, deepfakes, or impersonation;
• Other Content restricted under the Platform's applicable policies.

Automated detection results may include classifications, confidence assessments, warning indicators, or other technical findings used to support Content review.

Automated Decisions and Human Review

Automated screening may result in Content being approved for publication, temporarily withheld, flagged for additional review, or rejected under applicable moderation rules.

Content requiring further investigation may be reviewed by authorized RiotModels personnel before a final decision is made.

Automated classifications are not necessarily conclusive evidence of a violation. Where appropriate, the Platform evaluates the Content together with relevant context, supporting information, and applicable policies.

Users may challenge eligible Content moderation decisions through the Platform's Complaints and Content Removal Policy and Procedures.

Third-Party Processing and Confidentiality

Information shared with third-party screening providers is provided for the purpose of performing the requested verification, safety assessment, or compliance review.

Depending on the provider and service arrangement, third parties may process transmitted Content on RiotModels' behalf or act as independent service providers subject to their own applicable legal obligations.

We seek to limit the information shared to what is reasonably necessary for the requested analysis and to apply appropriate contractual, technical, and organizational safeguards.

RiotModels does not authorize third-party Content screening providers to use submitted User Content to train general-purpose AI models or for other purposes unrelated to the services provided to RiotModels, unless such processing has been separately disclosed and is permitted under applicable law. 

Retention and Further Processing

Content and related information transmitted for analysis may be processed or temporarily retained by third-party providers in accordance with the applicable service arrangements, retention requirements, and legal obligations.

RiotModels may retain screening results, moderation classifications, audit records, and supporting evidence where reasonably necessary for compliance, enforcement, complaint handling, fraud prevention, or legal purposes.

International Processing

Third-party screening providers may operate infrastructure or process information in countries different from the User's country of residence or the country where RiotModels operates.

International transfers of personal information are subject to applicable data-protection requirements and safeguards.

Questions and Requests

Users may contact support [at] riotmodels [dot] com for information about the processing of their personal information, relevant verification procedures, or requests concerning their rights under applicable privacy laws. 

Consent and Legal Grounds for Processing

How and why do we process personal information?
RiotModels processes personal information for purposes necessary to operate and maintain the Platform, provide requested services, verify identity and age, screen Content, process payments, prevent fraud, enforce Platform policies, and comply with applicable legal and regulatory requirements.

Depending on the nature of the information, purpose of processing, and applicable law, processing may be based on:

• Performance of a contract or steps necessary to provide requested services;
• Compliance with applicable legal obligations;
• Legitimate interests in maintaining Platform security, preventing fraud, enforcing Content Standards, and protecting Users and third parties, where permitted by law;
• Consent, including explicit consent where legally required for particular categories of sensitive information or processing activities.

Where consent is required, RiotModels or its designated service provider will request it through an appropriate affirmative action or other legally recognized method.

How can I withdraw my consent?
Where processing is based on consent, you may withdraw that consent by contacting support [at] riotmodels [dot] com or using an available consent-management mechanism.

Withdrawal does not affect processing lawfully carried out before the withdrawal. It also does not prevent RiotModels from retaining or processing information where another valid legal ground applies.

Certain verification or processing activities may be necessary to provide access to specific Platform features. If the required processing cannot lawfully continue, access to those features may be restricted. 

What information is collected

Depending on how you use RiotModels and which services or features you access, we may collect or process the following categories of information:

Account and Profile Information

• Name, username, email address, and contact information;
• Date of birth and country or place of residence;
• Profile photographs, descriptions, links, and other information provided during registration or account management.

Identity and Age Verification Information

• Government-issued identification documents and related identifying information;
• Facial photographs, selfies, and other information used for identity matching or liveness verification;
• Age-estimation information and age-assurance results;
• Verification status, dates, and relevant compliance records.

User Content and Communications

• Images, videos, audio, text, messages, comments, and other materials uploaded or transmitted through the Platform;
• Content descriptions, titles, tags, thumbnails, and associated metadata;
• Information relating to Content ownership, publication authorization, and performer consent;
• Submitted Content that is awaiting review, has been rejected, or has been removed.

Content Screening and Compliance Information

• Automated Content screening results and moderation classifications;
• Age-related risk indicators and prohibited-content detection results;
• Internal review decisions, reports, complaints, appeals, and enforcement records;
• Information related to suspected fraud, policy violations, or illegal activity.

Payment, Tax, and Payout Information

• Payment and transaction records;
• Payment-method identifiers and information provided by payment processors;
• Payout account details and recipient information;
• Applicable tax forms, taxpayer identification information, and related documentation;
• Refund, dispute, chargeback, and fraud-prevention records.

Technical and Usage Information

• IP addresses, device and browser information;
• Login records, access times, and relevant account activity;
• Cookie identifiers and similar technical information;
• Information necessary for Platform security, troubleshooting, fraud detection, and service operation.

Not every category of information is collected from every User. The information required depends on whether the person is a Visitor, Subscriber, Model, depicted performer, or another individual interacting with the Platform, as well as the applicable verification and legal requirements. 

Your credit card data is stored through a PCI-compliant payment gateway service data storage. They store your data on a secure server behind a firewall. All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of all major credit card brands. PCI-DSS requirements help ensure the secure handling of credit card information by our Service and its service providers.

Email marketing (if applicable): With your permission, we may send you emails about our Platform, new services and other updates.

Security

RiotModels implements technical and organizational safeguards designed to protect personal information, User Content, identity documents, verification records, and other sensitive information from unauthorized access, disclosure, alteration, loss, or misuse.

These safeguards include measures appropriate to the type and sensitivity of the information, such as encrypted communications, access restrictions, authentication controls, and monitoring of relevant systems.

Access to sensitive identity information, unpublished Content, moderation records, and compliance documentation is restricted to authorized personnel and service providers who require such access for legitimate operational purposes.

Where information is transmitted to third-party verification, AI-powered screening, or other service providers, RiotModels uses appropriate processing arrangements and security measures based on the nature of the information and the services provided.

Payment information is processed through designated payment service providers using applicable payment-industry security requirements.

Although no method of electronic transmission or storage is completely secure, RiotModels takes reasonable measures to protect information throughout its processing and storage lifecycle. 

Age Requirements and Age Assurance

RiotModels is intended exclusively for adults aged 18 or older, or the higher minimum age required by applicable law.

The Platform uses age-screening and age-assurance measures to restrict access by persons who do not meet the applicable age requirements.

Depending on the User's location and the nature of the requested access, these measures may include date-of-birth declarations, facial age estimation, government-issued identity verification, or other approved verification methods.

Age-assurance checks may be performed by authorized third-party providers, which may collect or process facial images, verification data, and related results for the purpose of determining whether the applicable age requirement has been satisfied.

Where a verification attempt is unsuccessful or inconclusive, additional verification may be required before access is granted.

A date-of-birth declaration or website age gate does not, by itself, constitute verified proof of age. 

Changes to the Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, operational procedures, third-party providers, or applicable legal requirements.

The effective date of the latest revision will be displayed at the beginning of this Policy.

Where required by applicable law, we will provide additional notice of material changes or obtain consent before implementing processing activities that require it.

The current version of this Policy is available at https://riotmodels.com/privacy. 

If our Platform is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to offer our services to you.

How long we keep your content and personal information

User Content

Users may delete their Content through available Platform functionality, subject to applicable restrictions and retention requirements.

Deleting Content or closing an account generally removes the Content from public availability. However, certain information or copies may be retained where reasonably necessary for legal compliance, investigations, financial disputes, fraud prevention, enforcement of Platform policies, or other legitimate purposes permitted by law.

Identity and Age Verification Records

Identity and age-verification information, including relevant verification results and supporting documentation, may be retained for periods required by applicable laws, payment-processing standards, and identity-verification obligations.

Where verification is performed by a third-party provider, the provider may retain certain information in accordance with its applicable retention practices and contractual obligations.

Content Screening and Moderation Records

RiotModels may retain Content screening results, compliance classifications, moderation decisions, complaint records, and relevant supporting evidence after Content has been removed or an account has been closed, where necessary for compliance, investigations, dispute resolution, or legal purposes.

Account and Other Personal Information

Following account closure, ordinary account information is generally scheduled for deletion within six (6) months, except where longer retention is necessary or permitted under applicable law.

Financial and Transaction Records

Financial and transaction records may be retained for seven (7) years, or for another period where required by applicable tax, accounting, legal, or regulatory obligations.

Third-Party Retention

Information processed by third-party providers may be subject to separate retention periods based on the type of service, applicable agreements, and legal obligations.

RiotModels takes applicable retention requirements into account when determining whether records should be retained, restricted, anonymized, or deleted. 

Contact Information and Privacy Rights

If you wish to access, correct, update, or request deletion of your personal information, obtain information about applicable verification or automated processing activities, withdraw consent where applicable, or raise a privacy-related concern, please contact:

CandyStar LLC / RiotModels

Email: support [at] riotmodels [dot] com

Depending on your location and applicable law, you may have additional rights concerning access, correction, deletion, restriction of processing, data portability, objection to certain processing, and review of qualifying automated decisions.

Requests will be reviewed and handled in accordance with applicable legal requirements, subject to any lawful limitations or retention obligations.

Complaints concerning Content moderation, removal, or consent of depicted persons are handled under our Complaints and Content Removal Policy and Procedures at https://riotmodels.com/complaints-policy.

Where provided by applicable law, individuals may also submit complaints to the competent data-protection supervisory authority.