dotrub Private privacy notice.

Last updated 14 September 2026

This notice explains what dotrub Private adds to the main dotrub privacy notice, which still applies in full.

What we keep for your membership

Your plan, membership status, renewal or expiry date, and payment records from our payment processor. We never see or store your full card details.

Verification data

Identity checks are handled by an approved verification provider. We keep the outcome, the date, the provider, a reference identifier and whether reverification is due. We keep as little document data as possible and prefer a tokenised reference to a copy of your document. Verification data is never shown on your public profile, never shared with providers, and never used for advertising.

Activity inside Private

We record the events needed to run the product safely: gallery access requests and decisions, reports, moderation decisions, and aggregate counts such as offering views. Providers see aggregate numbers, not a list of who looked at what, unless you have allowed that in your privacy controls.

Privacy controls

From your member settings you can control whether providers see your username, a limited profile, a private member badge, your saves, your gallery requests, and whether providers can message you. You can also hide your activity history. These settings are enforced on the server, not just in the interface.

Staff access

Staff access is least-privilege and role-based. Support, trust and safety, billing and security roles each see only what their work requires, and sensitive lookups are logged with the staff member, the record and the reason.

Protected content is not public

Private areas are excluded from search indexing, protected content is never sent to a browser that is not authorised, and media links inside Private are short-lived and expire.

Retention and your rights

We keep membership and payment records for as long as the law requires, verification outcomes for as long as your access depends on them, and safety records for as long as needed to protect the community. You can ask for a copy of your data, correct it, or ask us to delete your account and membership data, subject to legal and safety obligations.