Privacy policy
Last updated: 8 November 2026
Who we are
Conversion Lab is operated by Nueva, who is the data controller for the data described here. Contact: ebfba21@gmail.com.
What Conversion Lab reads from Fanvue
When you connect your Fanvue creator account, you grant Conversion Lab permission to read:
- your profile (handle, display name) to identify your account;
- your tracking links, their click logs (time and UTM tags) and the fans attributed to each link;
- per-fan spend totals and link-level earnings, to calculate value per click and return on ad spend.
Conversion Lab can also create tracking links, but only when you click “Create link”. It never reads or sends messages, posts content, changes prices or touches payouts.
What we store
Link statistics and daily snapshots; click timestamps with UTM tags; fan records keyed by Fanvue's opaque user IDs with subscription status, dates and spend totals; ad spend you enter. We do not store fan names, handles, emails, messages or media. Your Fanvue access tokens are encrypted at rest (AES-256-GCM). We don't log tokens or personal data, and only the operator can access the database.
Why we process it (legal basis)
To provide the analytics service you asked for when you connected your account (performance of a contract). Fan data is limited to what that service needs and is only shown to you, about your own fans (legitimate interest, with data minimisation).
Who else processes it
Vercel (hosting) and Supabase (database) process data on our behalf under their data processing terms. Data may be processed outside your country, including in the US and the EU, under those providers' safeguards. We don't sell data, share it with other creators, combine it across accounts or use it for advertising.
How long we keep it
While you stay connected. If you disconnect, everything is deleted at once. If access is revoked or expires and you don't reconnect, your data is deleted after 30 days. Webhook notices are deleted after 30 days.
Your rights
You can access, export, correct or delete your data, object to processing, and complain to your data protection authority. Settings → “Disconnect and delete data” deletes everything immediately. For access, export or anything else, email ebfba21@gmail.com; we reply within 30 days. Fans who want data about them removed can ask the creator or contact us directly.
Security
Report security issues to ebfba21@gmail.com.