Privacy and data

We do not sell or transfer data to third parties for advertising purposes, and there are no third-party trackers on the public pages. The fonts are served from this same site: your browser does not request anything from Google when it opens a page.

You do not need an account to browse, and none is created.

• Your IP is not stored in clear. An irreversible fingerprint of it is stored. It serves to curb abuse —so that someone cannot download the site’s contacts in bulk, or repeat the same report a thousand times— and for nothing else. The IP cannot be obtained from a fingerprint.
• Visits to listings are counted so that whoever publishes can see how many times theirs was viewed. It is a number, not a list of who came in.
• The country you are browsing from is inferred in order to decide which listings you can see, because whoever publishes can ask not to appear in their own country. It is not stored in association with you.

Before having an account you can leave us your name, your country, your WhatsApp and your email so that we can write to you. That does not create an account or publish anything: it is a list for talking to you.

• The city is optional and we do not require it. Whatever you write there does not appear anywhere public.
• Only our team sees it, and only one at a time: there is no “see all”, the list cannot be downloaded, and every time someone reveals one of your contact details it is recorded with their name and the reason.
• Your IP is not stored in clear here either. Only the fingerprint, and only so that nobody fills in the form a thousand times.
• If you send it again, what was already there is updated instead of piling up copies.

How long it is kept, said as it is: if we have not written to you, one year from when you left us your details. If we have already talked to you, six months from that conversation. Once the period is over it is deleted automatically, entirely and without notifying anyone: it is not marked as hidden, it ceases to exist. And if you ask us to delete it sooner, it is deleted just the same.

That it is one year and no more is also a deadline for us: either we write to you within that year, or we stop having your WhatsApp stored.

Here data is needed, and it is of three very different kinds.

• The public part: your stage name, your description, your services, your prices and your approved photos. You choose it and you can change it whenever you want. Because it is public, search engines and the artificial intelligence programs that crawl the web can read it and store it; listings in discreet mode ask them not to put them in their results.
• The private data we use to contact you: your email and your verified mobile phone.
• Your identity document: we ask for it once, to check that you are of legal age and that it is you who appears in the photos. It is never published.

Your document is not in the same database as the rest of the site. It is in a separate database, with a different user, and the public part of SexVir has no permission over it.

That means that a flaw in a public page —even a serious one— runs on a connection that does not reach the documents. It is not a promise of good will: it is that the key does not open that door.

In addition, every time someone on our team looks at a document it is recorded: who looked at it, which one and when, in a separate record that can be written to but not deleted from the site. And any other time someone on the team reveals a piece of your data —your phone, your email— it goes into the general log, with who it was and for what reason, and the reason is mandatory. The question “who looked at what is mine?” always has an answer.

Your number does not go on your profile page: a button does. The link is handed over on click and with a limit per IP, so downloading the site’s numbers in bulk stops being trivial.

What we do not control: when someone writes to you on WhatsApp, WhatsApp shows them your profile photo, your name and your “last seen”. That is decided by WhatsApp. If your number is the same one you use with your family or at work, whoever has it can put the two things together. Using a separate number for this is the only way to cut that off completely.

If you save your mobile number to recover your account, we store it encrypted in the same separate database as the documents, it is never published and it is deleted when you delete your account.

SVChat is the chat of this site and of its Android app. Unlike WhatsApp or Telegram, what you write and send through SVChat goes through our server and is stored on it: this is needed in order to deliver it to whoever is not connected. To use it you need an account; of you, the other person sees your nickname, never your email.

• It is stored encrypted, but not end to end. Texts, photos, videos and voice notes are stored encrypted: a copy of the database or of the disk, without our key, does not allow the messages to be read or the files to be opened. But the key is ours and it is on our server, which needs it to deliver each message: SVChat is not an end-to-end encrypted chat.
• From photos, videos and voice notes we remove the metadata (where and with what they were made) before storing them.
• On each photo you receive we place, when showing it to you, your nickname, the date and a fragment of your account code, so that a screenshot has an owner. The person who sent it receives it without a mark.
• SVChat is not public: it does not appear in search engines, and the programs that crawl the web —including artificial intelligence ones— do not reach it, because it requires an account that is part of the conversation. We do not use artificial intelligence to read your messages either: the alerts we talk about below are a list of phrases.

Encrypted does not mean that nobody can read it: the key is ours.

• Administrators. On our team, an administrator can open any of your conversations, with their photos, videos and voice notes while they exist, and does so without notifying you.
• Supervisors. A supervisor can only open a conversation that has an open report or alert, or that is part of a case before the authorities. When whatever opened the door to them is closed, they can no longer do so.
• Entering your account. An administrator can enter your account for half an hour to help you or review it. From there they see your chat as you see it, without being able to write, delete or report on your behalf.
• Nobody else on the team can open them from the site.

Every time someone on the team opens a conversation or a file, it is recorded: who it was, what they opened, when and for what reason. That record cannot be deleted from the site, has no deletion date and is kept even if the conversation or the account is deleted: it is what makes it possible to answer “who read what is mine?”. What is read from inside your account goes into the general log, with who it was, and those lines are deleted after two years.

Alerts are automatic: each text, and the caption of each photo, video or voice note, is compared after being sent against a list of phrases about minors and about in-person meetings, which our team can expand. If it matches, nothing is blocked and nobody in the conversation is notified: an alert is left so that the team can look at it. Nothing else is searched for, and photos, videos, voice notes and calls are not analyzed.

If you report a conversation, a supervisor can read it while the report remains open. What you write when reporting is stored encrypted, like a message. The other person receives no notice of the report.

If you edit a message, what it said before is stored encrypted. The other person does not see it; our team does, when it reviews that conversation.

What is only yours. If you advertise, your private notes about each client and your quick replies are stored encrypted and no screen of our team shows them, not even when entering your account. Your automatic reply can be seen by whoever enters your account, and when it is sent it is one more message in the conversation.

• If you advertise, of the person who writes to you you see their nickname, whether their account is new (less than a week old), whether they verified their email and their mobile phone, and the month in which they registered. Never their email, their number or their country.
• If you write to someone who advertises, you see whether she is available now and what her listing already shows: her schedule, her stories, her services with their prices and the link to the listing. If she asked not to appear in the country you are browsing from, that is not shown to you.
• Both of you see when the other is typing and, if both have read receipts turned on, when they read each message. If one turns them off, neither sees the other’s. A message only counts as read when the conversation is visible on the screen. While a request has not been accepted, the person writing is not told whether it was read or whether they are being written to.
• Searching within a conversation is done on your phone, over what you already have on screen: the server does not search your messages.
• If someone takes a screenshot with the conversation or the call open in the Android app (from Android 14 onwards), the other person sees a notice and a line remains in the conversation with the nickname of whoever took it. The screenshot is not stored or sent to us: only the fact that it happened. In the browser it cannot be detected.

Voice calls and video calls always go through our relay server, so that neither of the two parties sees the other’s IP, and they are end-to-end encrypted: the server forwards what it cannot decrypt. They are not recorded. Nobody on our team sees or hears them.

• What remains of each call: that it took place, who called, whether it was voice or video, when it rang, started and ended, how many minutes were given and added, how it ended and who hung up. In the conversation a line such as «Videollamada · 12 min» (“Video call · 12 min”) remains. Nothing of image or sound.
• Our relay server does see each person’s IP, like any server you connect to, and it may remain in its technical logs. It does not pass it on to the other person.
• During a video call, each person sees over the image they receive their own nickname and the date, in motion. It cannot be removed.

What disappears:

• View once: five minutes after the other person opens it, or after seven days if nobody opens it.
• What expires —a photo, a video or a voice note sent for 1, 24 or 72 hours, and the temporary messages that the model can turn on in a conversation—: that many hours after being sent.
• Delete for both: what is yours, during the 48 hours after sending it.

When it expires it stops being visible at that very instant, and it is deleted from our server in the following minutes. Photos, videos and voice notes that disappear never go into the backups; the text of a temporary message or of one deleted for both may remain in that night’s backup.

The exception: if the conversation has an open report, if that message has an open alert or if the conversation is part of a case before the authorities, what disappears is not deleted. For you and for the other person it disappears just the same, at its time; it is kept so that it can be reviewed, only our team can open it and each time it is recorded. It is deleted when nothing remains open; if there is a case before the authorities, not before it has been reported and 180 days have passed since that report.

How long the rest is kept:

• Normal messages, photos, videos and voice notes, and the call history stay as long as the conversation exists: they are not deleted automatically over time. The entire conversation is deleted when the account of either of the two parties is deleted, and it disappears for both. With the same exception: if it has an open report or is part of a case before the authorities, it is kept without either of the two seeing it —we explain this in “Deleting your account”—.
• Reports —who reported whom, the reason, what they wrote and how it was closed— and the record of what our team read have no deletion date, and remain even if the conversation or the accounts are deleted: they are what makes it possible to respond if someone makes a claim.
• Private notes of the person who advertises about a client, until she deletes them or either of the two accounts is deleted. Quick replies and the automatic reply, until she deletes them or deletes her account.
• If you pay with credits in a conversation, what is stored is in If you use credits.

When you do not have the chat open, we can notify you of a message or a call. No notification says who is writing to you or what: you see “SVChat” and a fixed phrase, such as «Tienes un mensaje nuevo» (“You have a new message”) or «Te están llamando (videollamada)» (“You are being called (video call)”).

• Browser notifications, if you turn them on. The notification travels through your browser’s notification service —Google, Apple, Mozilla or Microsoft, depending on which one you use—, encrypted so that only your browser can read it. It carries the type of notification, an internal code of the conversation, whether a call is voice or video and how many unread messages you have. We store, encrypted, the address it is sent to, on at most five browsers per account, and tied to the session with which you turned them on: when that session is closed, that browser stops receiving them.
• The Android app receives notifications through Firebase Cloud Messaging, a Google service. There the notification is not end-to-end encrypted, so Google can see what it carries: the type of notification, internal codes of the conversation and of the call, whether it is voice or video and how many unread messages you have. No text, no nicknames, no listings. We store, encrypted, the code of your phone, tied to your session: if you log out in the app, or the session expires, it stops receiving notifications for that account.
• Email. If a message has gone unread for at least ten minutes, you receive an email at your verified address. The subject says «SVChat: tienes mensajes sin leer» (“SVChat: you have unread messages”) and the email only says how many conversations have messages, with a link to the chat: neither who, nor what. At most one per hour per conversation and eight per day, and none if there is a block between the two of you. It comes turned on; it is turned off with the link in the email itself or in «Avisos de SVChat» (“SVChat notifications”). For each sending we store when it was and for which conversation, for two days.

• It is downloaded from this site, not from Google Play. On the download page you will find the fingerprint of the file and that of its signature, so that you can check that it is ours. The app is only the chat: it opens the rest of the site in your browser.
• It updates from within, when you ask it to: it downloads the new version only from sexvir.com and does not install it if its fingerprint or its signature do not match ours. The first time, Android asks you for permission to install from this app.
• The permissions it asks for, and what for: notifications (the notices), full-screen calls (so that a call rings like a call with the phone locked), that battery saving does not put it to sleep, vibrate, camera and microphone and adjusting the sound (calls, photos and voice notes), knowing when a screenshot is taken (Android 14 or later) and installing its own updates. The Android components it uses add those for the fingerprint and those for receiving notifications. It does not ask for your location or your contacts.
• Screenshots come out black. On all the screens of the app, screenshots and screen recordings made by the phone itself come out black. This does not prevent recording with another phone.
• Lock with fingerprint or PIN. It is optional and comes switched off. If you turn it on, the app asks for your fingerprint, your face or your phone’s screen lock when you open it and when you come back after 1, 5 or 15 minutes away (you choose). Your phone checks it: your fingerprint does not leave it.
• No third-party analytics, and the app is not included in your phone’s backup. From Google it only carries what is necessary to receive notifications.
• There is no app on iPhone: SVChat is used from the browser, and there screenshots cannot be blocked.

When you buy, send or collect credits, the money goes through us, and that obliges us to keep accounts. We store:

• The ledger of movements: each purchase, each package bonus, each send, each expiry, each correction by our team (with its reason and who made it), each move to visibility and each payment. For a send, it records who paid whom, how many credits, for what —video call, pack or tip— and in which conversation. The send also appears as a message in that SVChat conversation.
• Your purchases: the package, the amount, the currency, the payment reference and, when we confirm that it arrived, the line of our bank statement as it appears at the bank —if your bank puts your name there, your name stays on that line— or, if you paid in USDT, the transaction hash (or the Binance Pay order number). For payments that arrive via the blockchain we also store the address from which they were sent, which the blockchain makes public anyway.
• Your withdrawal requests and your payments, if you are a model: how much you requested, of what type, when, whether you requested it yourself or someone from our team did so from your dashboard, and how it was resolved. For each payment, how much was sent, by what means —transfer or USDT— and its reference.

Your payout account, if you are a model or an agency. We store, encrypted, the number of your bank account, the address of your crypto wallet or your Bre-B key, together with the name and document of the holder (if you are an agency and the account belongs to your company, the company name and the NIT). In clear, only the method, the currency or network, the bank and the account type, the key type, the last four digits and your initials can be seen: with that you recognize your account and the team knows where to pay you, and it is not enough to send money to anyone or to reconstruct the full number.

Your legal name: the first time you add a payout account we ask you for your full name as it appears on your document, and we store it with your identity verification, in the separate database where your document lives. From then on, every payout account has to be in that name. You cannot change it; if it is wrong, our team corrects it (an administrator or a supervisor), and a record is kept of who, when and why.

What we use it for: only to pay you the credits you earned (or, if you are an agency, your settlements). The holder has to be the same verified person: we compare the document you register, by its fingerprint and without decrypting it, against the one in your current verification, and the name against your legal name. An account in the name of an agency’s company cannot be compared with anything stored: we review it by hand before paying. The bank account, Nequi, Daviplata and Bre-B are only for those who verified with a Colombian document (or for an agency with a NIT); from other countries payment is received in crypto. Adding or removing an account requires confirming that it is you and we notify you by email. A new account waits 48 hours before it can be used in a withdrawal, so that if someone gets into your account without permission you have time to react to the notice.

The bank certificate: if something about an account does not add up for us, an administrator or a supervisor can ask you, stating the reason, for the certificate from your bank that says in whose name it is. You see it and upload it in «Cómo te pagamos» (“How we pay you”) (PDF or photo). It is stored encrypted, outside any public part of the site, and only administrators and supervisors open it: every time someone opens it, it is recorded. As long as it is not approved, that account cannot be used in a new withdrawal. We notify you in your dashboard and by email, with no account details in the notice.

Who sees it: you, the usual reduced view (the last four digits, your initials, the bank or the network). The team sees the full account only at the moment of paying you, and each view is recorded: who saw it, when and which one.

How long: while your payout account is active, we keep it, or you remove it whenever you want (if no withdrawal has used it, it is truly deleted, along with its certificate if there was one). If a paid or cancelled withdrawal already used it, we keep it marked as removed —you cannot use it again, but there is a record of where that money went— for 5 years, as part of the site’s accounting; afterwards it is deleted automatically, with its certificate.

Who it is shared with: with no one beyond what is strictly necessary to pay you: the payment goes out through the bank or network you chose. We do not use this data for any other purpose or share it with third parties unrelated to the payment.

If you delete your user account: before deleting your account, the system removes the reference from historical withdrawals to your user account (not to your payout account) so as not to leave loose ends in the accounting. Your payout accounts that no withdrawal has used are deleted together with your account. Those that were used in a withdrawal already paid or cancelled are kept marked as deleted, for the same accounting retention period stated above (5 years), just as your purchases and your withdrawals are kept even though your account no longer exists.

Who sees it: you, on your credits screen: if you buy, your latest movements and what is about to expire for you; if you collect, your balance, your pending request and the payments we made to you. On our team, only the administrators. Before paying a withdrawal they also look at which accounts the credits came to that model from, to detect colluding accounts trying to extract money; that does not block anything by itself.

How long: the ledger, the purchases, the withdrawals and the payments have no deletion date. They are the site’s accounting: we keep them while your account exists and, if you delete it, they remain without your name (we explain this in “Deleting your account”). The log lines that record each of those operations are deleted after two years.

• IP fingerprints: it depends on what they were stored for, and it is not the same in every case.
  • Those that support a usage limit last as long as that limit lasts: windows of hours or of one day.
  • From visits and from clicks on a contact no fingerprint is stored: only the number of times. There is no record of who looked at what.
  • Those that remain next to something a person did —a moderation decision, a report, a balance movement— last two years. And there are a few that are never deleted: closing a report, the money ones —a top-up credited, cancelled, refunded, that arrived incomplete or that was adjusted by hand, and a discarded deposit— and deleting an account. They are precisely the ones that exist so that it is possible to respond after someone makes a claim.
  Where something does remain, it is still a fingerprint and never the IP.
• Your document: as long as your account exists. It is what allows us to respond if someone reports that you are a minor or that you are impersonating someone.
• The moderation and access record: it is kept even if the listing is removed. It is what makes it possible to review and appeal a decision.
• Your SVChat conversations: they are covered in the section SVChat: what disappears and how long things are kept.

From your dashboard: Más → Mis datos (More → My data). You download a file with everything we store about you —your listing, your services, your top-ups, your notices, what you complained about and what we replied to you— and with an explanation alongside of what each thing is, because a dump you cannot read is of no use at all.

Your SVChat conversations are not included in that file: you see them in the chat itself while they exist. Nor are your notes, your quick replies or your reports.

If you do not publish listings —if you only browse, save favorites or write through SVChat—, you do not have that button yet: ask us for a copy from Support.

As for credits, the file includes your purchases, but not yet your ledger of movements, your withdrawals or your payments. You can see the most recent ones on your credits screen; if you need the full history, write to us.

You do not need to write to us or explain what it is for. It is your right and it is in the law of the five countries where we are. If we ban you, you still have it: that is exactly when you need it most, to be able to make a claim.

The image of your document is not included, and that is on purpose: taking it out of where it is stored would create one more copy of the most sensitive thing you have with us, in your downloads folder and in any place you forward the file to. Everything we know about it is included —that it exists, from which country, when it was reviewed and when it expires—, which is what you did not have. If you still need it, write to us and we will tell you how.

You request it yourself, from your dashboard: Más → Borrar tu cuenta (More → Delete your account). Beforehand we tell you what goes and what stays, and you have to type a word to confirm; if your account has a stored document, we also ask you to confirm that it is you with it (the same data and photos as when you registered), so that nobody else can delete it.

Your profile is switched off immediately: it stops appearing in lists and searches without waiting for anyone. The deletion of your data is then authorized by our team, and never before seven days: until then you can change your mind from the same screen.

When it is carried out, it is truly deleted: your listings, your photos —including the files on disk, not just the database rows—, your email, your phone, your document with the liveness video and your SVChat conversations. It is not a “hidden” mark.

The exception, stated in full. If one of your listings has a serious open report —minor, coercion, stolen photos or impersonation—, if there is a case before the authorities concerning your account or your listing (pending to be reported, or reported less than 180 days ago), or if there is frozen evidence due to a serious report already resolved, the evidence is not deleted: the listing involved as it was, unpublished, with its photos and its reports. Nor are the SVChat conversations that have an open report, whatever it is for, or that are part of that case.

That is kept separate from you: your email, your phone, your document and your legal name are deleted just the same, and what is kept moves to an empty account, with no data. Everything else is deleted at that moment. What is kept is deleted —with its files, as it would have been deleted that day— when nothing remains open and no period remains to be fulfilled: frozen evidence, at most 180 days after the report is resolved; a case before the authorities, not before it has been reported and 180 days have passed since that report.

What does not identify you also survives —the aggregate counters— and the record of who looked at your document (which exists to protect you and others).

SVChat. With your account, your entire conversations are deleted —also for the other person—, with their messages, their files and the call history; the files disappear from the disk in a little over an hour. Your notes and your quick replies are also deleted, as are the notes a model had about you and the notifications of your devices. The reports and the record of what our team read remain, for the same reason that the record of your document remains.

If you do not publish listings —if you only browse, save favorites or write through SVChat—, you do not have that button: request it from Support with your account’s email and our team will delete it, under the same rules as this section.

Credits. Your ledger of movements, your purchases, your withdrawals and your payments are not deleted: they remain without your name, tied only to the internal number of an account that no longer exists, because they are the site’s accounting and they have to keep adding up. Your email and your phone go just the same. What does not change is the statement line of a purchase: if your bank put your name there, it stays there. And any credits you had left unspent or uncollected are lost when the account is deleted.

Backups. Every night an encrypted copy of the entire site is made, and the key to open it is not on the server. Each copy is kept for 14 days and then spends 30 days in a trash bin before disappearing, so what is deleted may remain inside those copies for up to about 45 days. The SVChat photos, videos and voice notes that disappear on their own never go into them.

In response to a valid legal requirement, and only what that requirement asks for. We do not hand over data because someone asks for it in writing claiming to be whoever they may claim to be.

There is one exception, and we comply with it without waiting for anyone to ask us: when our team confirms material involving minors, well-founded indications that the person who appears is a minor, or indications of trafficking, of exploitation or of a person forced to be here, we report it on our own initiative to the authorities or to the official reporting hotline of the relevant country. That report includes only what is necessary to investigate it: the material or its fingerprint, the listing or the account involved and the dates. Your document and your legal name are not included in it; we would only hand them over if an authority later requests them with a valid requirement.