Privacy Policy – LILITH
Last updated: June 26, 2025
This Privacy Policy aims to inform users of the LILITH platform (website and application) about how their personal data is collected, used, stored, and protected, in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and the amended French Data Protection Act.
1. Who is responsible for data processing?
The data controller is:
LILITH (SAS)
SIRET: 941 312 720 00019
Registered office: 218 avenue du Général Leclerc, 77190 Dammarie-les-Lys
Email: [email protected]
2. What data do we collect?
When you use LILITH, we collect in particular:
- Identification data: name, first name (optional), username, age, email, phone number (optional).
- Profile data: gender, sexual preferences, photographs, description, BDSM/libertine/classic choices.
- Location data: with your consent.
- Technical data: device type, IP address, connection data.
- Subscription data: chosen plan (Premium: €16.99/month, €39.99/3 months, €89.99/12 months), subscription date, payment history.
- Messages and interactions with other members.
- Reports and potential moderation measures.
3. Why do we collect your data?
We use your data to:
- Create and manage your user account;
- Display your profile to compatible members;
- Provide personalized suggestions;
- Allow you to interact with other users;
- Ensure security, moderation, and fight against fake profiles;
- Manage subscriptions and payments;
- Send you notifications and emails (functional or marketing);
- Respond to your requests via customer support;
- Comply with our legal and contractual obligations.
4. Legal basis for processing
Processing is based on:
- Your consent (profile, geolocation, notifications, etc.);
- Contract execution (account creation and management, subscription);
- Our legal obligations (e.g., retention of payment-related data);
- Our legitimate interest in securing our platform and improving user experience.
5. How long is your data retained?
| Data type | Retention period |
|---|---|
| Active account data | As long as the account is active |
| Deleted account data | Maximum 1 year, then deletion |
| Payment data | 6 years (accounting obligations) |
| Moderation/reporting data | Maximum 5 years |
| Connection logs / IP | Maximum 12 months |
