Privacy Policy

The "Sexy Jutsu" service (Telegram bot @jutsu_sexybot and the sexy-jutsu.com website).
Last updated August 10, 2026.

1. General Provisions

1.1. This Privacy Policy (hereinafter the "Policy") describes what data is collected, stored, and processed by the "Sexy Jutsu" service (hereinafter the "Service"), consisting of the Telegram bot @jutsu_sexybot and the sexy-jutsu.com website.

1.2. By using the Service — including by launching the bot with the /start command or by pressing the "I'm 18+, continue" button on the start screen — the User confirms acceptance of this Policy. If the User does not agree with its terms, the User must immediately cease using the Service.

1.3. The Service is intended exclusively for persons who have reached the age of 18. It contains 18+ content.

1.4. The service administration (hereinafter the "Administration") is the data processing operator within the meaning of applicable law.

2. What Data We Collect

2.1. Telegram bot data:

• Telegram account identifier (tg_id), Telegram username, profile name;
• the interface language selected or automatically detected;
• the fact and time of acceptance of this Policy and the Rules;
• the balance of the internal currency "imba", the history of credits and debits;
• the history of generation requests: type (text→photo, photo→photo, video), cost, text prompt, the fact of uploading a reference image, execution status, time;
• moderation events (triggerings of anti-abuse filters).

2.2. Website technical data: IP address, browser and device type, operating system, entry page, age-confirmation flag (age-gate, stored locally in the browser).

2.3. The Service does not request: passport data, documents, photos of ID cards, real names, addresses, phone numbers, or any other information unrelated to the bot's functions.

3. How We Use Data

The data collected is used exclusively to:

• provide the Service's functionality: balance accounting, execution of generations, delivery of results in Telegram;
• maintain service communication with the User and support responses;
• perform moderation, protect the Service from abuse, and ensure compliance with requirements for the protection of minors (see Section 6);
• analyze and improve the quality of the Service (in aggregate, without identifying specific Users).

4. Sharing Data with Third Parties

4.1. The Administration does not sell or share data with third parties for marketing purposes. Sharing is limited to the technological chain that operates the Service:

• Telegram (Telegram FZ-LLC) — the messenger through which the bot operates. Telegram has access to message content under its own privacy policy.
• Cloudflare, Inc. — the CDN/DNS/DDoS-protection provider for the sexy-jutsu.com website. It may temporarily process the IP addresses of site visitors.
• RunPod, Inc. and/or backup providers — cloud infrastructure for running AI models. It receives the text of the prompt and (when img2img is used) the reference image uploaded by the User, which are necessary to perform a specific generation. The data is used only to execute the request; the result is deleted after delivery to the User in Telegram.
• Payment provider (Platega.io and/or Telegram Stars when connected): a minimal set of payment parameters (amount, user identifier, transaction identifier). The User's bank card details and other payment data are processed only by the provider; the Service neither receives nor stores them.
• Authorized government authorities — where there are lawful requirements, including in cases of suspected violation of Section 6 of this Policy.
• In other cases — where there is explicit and unambiguous consent from the User.

4.2. Only the minimum necessary amount of data is transferred to third-party services. Telegram account identifiers and transaction history are not shared for marketing purposes.

5. Data Storage and Protection

5.1. Data is stored on the Administration's servers (South-Eastern Europe). The retention period is as long as required to fulfill the purposes of processing and to comply with obligations to payment providers and applicable law.

5.2. The following protection measures are applied:

• storage of secrets (tokens, API keys) outside of public code, with strictly limited server access rights;
• encryption of the communication channel (TLS 1.2+) when accessing the website, the bot's API, and Telegram;
• proxying of traffic through Cloudflare with DDoS protection;
• keeping the operating system and dependencies up to date.

5.3. Despite the measures taken, the Administration does not guarantee absolute security of data when it is transmitted over public networks. The User is obligated to independently ensure the protection of their Telegram account (two-factor authentication, etc.).

6. Protection of Minors

6.1. The Service strictly prohibits any use aimed at creating, requesting, or uploading images of minors — including stylized, cartoon, or drawn images, as well as depictions that describe features of minority in a text prompt.

6.2. To ensure compliance with this rule, the Administration:

• applies automatic analysis of text requests and User-uploaded images for violations;
• records moderation-filter trigger events in a service log linked to the tg_id and time;
• issues a warning to the User upon the first confirmed violation;
• blocks the account with no possibility of recovery and no refund upon a repeat violation;
• may transfer information about attempted violations to law enforcement authorities where there are lawful requirements.

6.3. Full responsibility for compliance with the age-related and other requirements of the User's legislation rests with the User themselves.

7. Cookies and Website Analytics

7.1. The sexy-jutsu.com website uses exclusively necessary technical records: age confirmation (age-gate) is stored locally in the User's browser (localStorage). Third-party advertising cookies are not used.

7.2. Cloudflare, as the CDN/protection provider, may set its own technical cookies to determine the legitimacy of traffic. Their use is governed by Cloudflare's policy.

7.3. If a traffic-analytics system (Plausible, Umami, or an analog) is potentially connected in the future, data will be collected in aggregate and without identifying specific Users.

8. User Rights

The User has the right to:

• request information about the stored data associated with their Telegram account through the support service;
• request deletion of the account and associated data — except for information that must be retained pursuant to the requirements of law or the payment provider (for example, transaction history for accounting and tax purposes);
• withdraw consent to data processing, which will result in the inability to further use the Service;
• appeal the Administration's actions in the manner prescribed by law.

Requests should be sent to the support service: @jutsu_support. The response time is up to 30 days from the receipt of the request.

9. Limitation of Liability

9.1. The Administration is not liable for the loss, theft, or disclosure of data if it occurred:

• through the fault of the User (compromise of the Telegram account, granting access to third parties, etc.);
• through the fault of third parties, including infrastructure providers, messengers, and payment systems;
• as a result of force majeure.

9.2. The Service does not control how the User handles the obtained generation results after their delivery. Any consequences of using the results rest with the User (see also the Terms of Service, Section 4).

10. Changes to This Policy

10.1. The Administration has the right to change the terms of this Policy unilaterally.

10.2. The current version is always published at sexy-jutsu.com/policy. The date of the version is indicated at the top of the document.

10.3. Continued use of the Service after a new version is published constitutes the User's agreement to the updated terms.

11. Contacts

11.1. For all questions related to this Policy and data processing:

• Support service: @jutsu_support
• Website: sexy-jutsu.com