Privacy notice

Last updated 3 October 2026. Covers the application form at beloura.ai, and the free leak audit (go.beloura.ai/audit) and call booking (go.beloura.ai) pages.

This notice explains what happens to the information you give us on beloura.ai and go.beloura.ai. The site is operated by Beloura Ltd of c/o Accounting4creators, 3rd Floor, 6 Wellington Place, Leeds, LS1 4AP, United Kingdom ("Beloura", "we", "us").

The free leak audit

When you request an audit (on go.beloura.ai or go.beloura.ai/audit) we collect your Instagram and OnlyFans handles, the best way to reach you (a WhatsApp number, a Telegram username or an email address; one is required, the others are optional), your country, your monthly earnings band, whether you work with an agency and how many Reels you post a week. You can also give us the name you go by, your pronouns, and links to leaks you have already found. We never ask for your legal name or any password. We also record your IP address, browser user-agent, the ad or link that brought you to the page (campaign tags and the Meta or Google click ID), and the time you submitted.

We use your handles to search publicly available leak, tube and forum sites, including trans-specific sites, for pages that carry your content, and a member of our team reviews the results. Any leak links you paste are used only to prepare your audit. We use your WhatsApp, Telegram or email to contact you about your audit call. The name you go by and your pronouns are used only so we address you correctly; they are never shared with Meta, Google or any other advertising platform. The answers about earnings, agency and Reels help us prepare the call and decide whether management would suit you; they are not shared with anyone.

The results are links, listed as text, and we go through them with you on a 15-minute call. We do not download, store or re-share any of your content.

If you tick the separate, optional box, we may also message you about Beloura's management services. If you don't tick it, we only contact you about your audit. You can withdraw this at any time by replying "stop" or emailing us.

Booking a call

Right after the audit form you pick a time for the call. After booking you can also answer two optional questions about why you booked and your last agency; those answers are read by our team to prepare for calls and improve our service, and are never sent to Meta or Calendly. We use these to prepare for the call and to decide whether management would suit you. The booking itself is handled by Calendly, which receives your name and email when you book (filled in for you from the form if you gave them), your Instagram handle (filled in as the first booking question), the campaign tags of the ad that brought you, and a random reference that links the booking to your answers. Your OnlyFans handle, WhatsApp, Telegram, pronouns, leak links, country, earnings band, agency and Reels answers stay on our servers and are not sent to Calendly. Calendly processes your booking under its own privacy policy.

Applications

When you apply to be managed we collect your name, email address, social handles, what you are looking for, your estimated earnings, any message you add, and your IP address and user-agent to detect spam.

Why we can use it

We rely on your consent, given by ticking the box on the form, and on our legitimate interest in running secure, spam-free forms and measuring our advertising. You can withdraw consent at any time.

Cookies and the Meta pixel

The audit and call pages use the Meta pixel, a small script from Meta Platforms that tells us when someone who saw our ad visits a page, stays on it for a while, submits a form or books a call. We also send Meta the same events from our server (the Conversions API), and later ones such as whether a booked call took place or someone became a client, each with a fixed value we set ourselves. These records contain, where we have them, your email address and your WhatsApp number in hashed (scrambled) form, your country in hashed form, a hashed reference number for your request and for your browser, your IP address, your browser user-agent and Meta's click and browser IDs. They never contain your handles, your Telegram username, the name you go by, your pronouns, your leak links, your earnings band, your answers or anything about who you are. Meta uses this to measure and improve our ads and processes it under its own terms.

To link these events we keep a random visitor reference in your browser's local storage.

We keep an anonymous visit log (a random visitor ID, the pages and steps reached and the ad that brought you; no IP address or handles) for 90 days to measure our ads. Turning off measurement stops it.

When we advertise on Google, the same pages may also use Google Ads conversion tracking (Google's gtag script). It tells Google when someone who clicked our ad submits a form or books a call. Google's ad personalisation is switched off: we do not use these pages to build remarketing audiences. For the leak audit it also sends your email address and your WhatsApp number, if you gave them, in hashed (scrambled) form so Google can match the conversion to the ad. It never sends your handles, your Telegram username, the name you go by, your pronouns, your leak links, your earnings band, your answers or anything about who you are. We also keep Google's click reference from the link you arrived on (gclid, wbraid or gbraid) with your request, so we can tell which ad it came from.

You can turn the pixel and Google Ads tracking off with "Cookie settings" at the bottom of the audit and call pages. If you do, neither the pixel, Google's tag nor the server-side record is sent for you. The setting is stored in your browser. If your browser sends a Global Privacy Control signal, we treat it as "Turn off" automatically.

Who else sees it

Your details are stored on servers we operate. Our team sees them in order to run the audit and contact you. We use SMTP2GO to deliver email, and WhatsApp or Telegram if you chose them. Apart from the Meta measurement described above, we never share, sell or rent your details or your results to anyone.

How long we keep it

If you do not reply to us within 90 days of your audit or your call answers, we delete them, your contact details, the name and pronouns you gave, any leak links and any results. If you ask us to delete them sooner, we will. Applications are kept for as long as needed to assess them and follow up with you, then deleted.

Your rights

You can ask to see, correct or delete what you gave us, or withdraw your consent, at any time by emailing [email protected]. Depending on where you live you may have further rights under local law, including the right to complain to a data protection authority.

Age

The audit and our services are only for people aged 18 or over. We delete any request we learn was made by someone under 18.

The terms of use for this site are at /terms.

Contact

Beloura Ltd, c/o Accounting4creators, 3rd Floor, 6 Wellington Place, Leeds, LS1 4AP, United Kingdom. Email [email protected].