Privacy Policy

Account information

Email address, display name, and your sign-in credentials

To create and secure your account, sign you in, and send you service messages.

Whether your email address has been confirmed

To reduce fraudulent registrations and to know whether we can reach you.

Account role and account dates

To decide what you can see and do, and to operate the service.

Advertisement and profile information

Everything you put in an advertisement: your display name, age, tagline and description, the category, the city and region you advertise in, the details you select about yourself, the services you list, and your own external links

This is the advertisement. It is published.

Photographs and video, including Stories and Highlights

To publish, and to review before publishing.

A telephone number and email address where you provide them on the listing form

Contact information for the advertisement. It is published on the advertisement so that people can reach you, and a field you leave blank is not shown. It is advertisement data rather than account data, and Roesas does not use it to reach you about your account.

Identity and legal intake

The legal name you provide during legal intake

To support identity and age verification and to identify the signer of an advertiser agreement. It is private and is never shown on a profile or an advertisement.

The date of birth you provide during legal intake

To confirm eligibility, to support identity and age verification, and to maintain appropriate verification records. It is private, is never shown on a profile or an advertisement, and is separate from the age displayed on an advertisement.

Your confirmation that you are at least 18, that the content you submit is yours or authorised, and that you agree to the terms, with the date and the wording you agreed to

To keep a record of what you agreed to, and when.

Verification-related records

To determine eligibility, protect the service, comply with applicable obligations, and maintain an appropriate record of verification.

Technical information

Technical and usage information, such as device and browser information, network address information, sign-in activity, and records of how the service is used

To operate the service, keep you signed in, secure the service, limit abuse and prevent fraud, and diagnose and fix problems.

Communications, moderation and payments

Information you provide when you contact Roesas support, and Roesas's replies

To respond to and manage your support requests.

Moderation and enforcement records: what was decided about an advertisement or a photograph, the reason, who decided it, and when

To operate review consistently, to handle disputes, and to enforce the rules.

Orders, entitlements, payment records, transaction references and, for cryptocurrency, the on-chain transfer details relevant to your payment

To take payment, to publish what you paid for, and to keep financial records.

Safety reports from the public

A report submitted through a public safety reporting form: which advertisement it concerns, the concern selected, the description written, any evidence link, and the date

To review the concern, to keep a record that the report was made and what was done about it, to protect users and the service, and to enforce the rules.

The email address given on the report

To send the reference for the report, and to come back to the person who made it if Roesas needs to. It is required, it is not verified, and it is never shown to the advertiser the report is about.

A public safety report creates no account for the person who made it, and Roesas does not store the reporter’s IP address or browser details. A report is an unverified allegation by a member of the public. It is a record of what somebody said, not a finding by Roesas.

The date of birth Roesas holds is the one you provide during legal intake. It is private, and it is separate from the age displayed on an advertisement. Roesas does not collect government identifiers, bank account numbers or tax identifiers from advertisers.

Roesas collects the legal name and date of birth you provide during legal intake. Roesas uses a third-party identity-verification provider to assist with identity and age verification. The provider may process identity documents, photographs or selfies, and related verification information. Roesas uses the information you provide and the verification results to determine whether you meet Roesas’s requirements.

Roesas determines whether an advertiser meets its requirements. A successful identity and age verification is a required part of that determination, and Roesas separately reviews each advertisement against its rules before it is published.

Verification information is private and is never shown publicly. Roesas uses it for identity and age verification, safety, fraud prevention, compliance, and meeting legal obligations.

Government-ID document images are processed by the identity-verification provider under its applicable privacy terms. Roesas keeps verification-related records needed to determine eligibility, protect the service, comply with applicable obligations, and maintain an appropriate record of verification.

As part of advertiser onboarding, Roesas may require you to sign a Model Agreement for each individual advertisement. Roesas keeps a record of each signed agreement. This section describes what that record contains.

An execution record contains:

• the advertisement it covers, and that advertisement's number and address at the time
• the account that signed, where that account still exists
• the verified legal name held at the moment of signing, and the name typed as the signature, kept separately because a mismatch is itself meaningful
• the version of the agreement, and the full text as it was displayed
• which acknowledgements were presented and accepted
• the date and time of signing
• the network address and browser information at the time of signing
• a reference to the identity verification the signature was made under, and its status at that moment

The network address is recorded because an electronic signature with no circumstance behind it is only a typed string. It is never shown on any public page, and the record is protected against later alteration.

This information is held as evidence of a contract, and used for compliance, fraud prevention, handling disputes and chargebacks, enforcement, and meeting legal obligations.

Media you upload is stored with a third-party storage provider and delivered from there.

When you upload, media may be:

• held before it is published
• resized, re-encoded or otherwise processed so it can be delivered efficiently
• watermarked
• reviewed by a person before it becomes public
• stored, and delivered to people viewing your advertisement

A newly uploaded or replacement photograph is not published until it has been approved. The original upload is not publicly accessible; what is published is the processed version.

Payment is processed by third-party providers under their own terms.

Roesas does not store full payment card numbers. For card payments, the card details are handled by the payment provider and Roesas keeps the order, the amount, the currency, the status, and the provider’s transaction reference.

For cryptocurrency payments, Roesas records the transfer details it needs to match a payment to an order, including the relevant blockchain transaction and address information. Blockchain records are public and permanent by their nature, and are outside Roesas’s control.

• to create and operate your account
• to review and publish advertisements
• to verify identity and age
• to communicate with you about your account, your advertisements and your support requests
• to take payment and keep financial records
• to secure the service, limit abuse and prevent fraud
• to moderate content and enforce the Terms and the policies
• to keep evidence of agreements and consents
• to provide support
• to operate, monitor and debug the service
• to meet legal obligations and to respond to lawful requests
• to establish, exercise or defend legal claims

Roesas does not use your information for advertising or marketing, and does not sell it. There is no advertising network on the site, no marketing email, and no sharing of information for anybody else’s marketing.

Where the law that applies to you requires a legal basis for processing, Roesas relies on one or more of the following, depending on the purpose: performing its contract with you, its legitimate interests in operating and protecting the Service, your consent, and compliance with a legal obligation. Which of these applies to a given purpose depends on the law of the place you are in.

Roesas shares information with the following categories of recipient:

Hosting, database and storage providers

They run the infrastructure the service depends on, and necessarily process what is stored on it.

The identity-verification provider (currently Sumsub)

It assists Roesas with identity and age verification and processes the identity documents and verification information submitted to it.

Payment providers

They take and confirm payment.

An email delivery provider

It sends the service email Roesas owes you.

Professional advisers, such as lawyers, accountants and auditors

Where Roesas needs advice or is required to be audited.

Law enforcement, regulators and other lawful authorities

Where Roesas is required or permitted by law to disclose, and where it is necessary to protect a person from harm.

A buyer or successor

If Roesas is involved in a merger, acquisition or sale of assets, information may transfer as part of it.

Roesas does not sell personal information and does not share it for anybody’s marketing. Service providers necessarily receive information in order to do their job, and saying “we never share” would be untrue.

What you put in your advertisement is published, and can be seen by anybody. That includes the telephone number and email address you enter on the listing form: entering one is how you choose to publish it, and leaving it blank is how you choose not to. The email address you sign in with is a separate thing and is never published.

Different information is kept for different lengths of time, because it is held for different reasons.

Account and advertisement information

Kept while the account exists. Deleting an account permanently removes the account, its advertisements and its media from the live service; a restricted archive keeps a record of each deleted advertisement, without its photographs or other media.

Story media

Stories expire by design. Expired Story media is deleted shortly after it expires.

Photographs you remove or replace

Removed from publication immediately, and deleted from storage afterwards.

The legal name and date of birth you provided at intake, the consents you gave there, and your acknowledgement of an advertisement you asked to delete

Kept as evidence while your account exists, and kept after the advertisement itself is gone. Evidence stored beside an advertisement would be destroyed by the very act it is evidence of. When you delete an advertisement or your account, a copy of your legal name, the email address on your account and the versions of the consents you gave is kept in a restricted archive, because it is needed to show whose payments, refunds and signed agreements the archive holds. Those archived details are kept only for as long as the archived records they identify are kept. If you delete your account when it has no advertisement on record and no completed payment or other completed financial transaction, no such copy is kept; an unpaid, failed or cancelled payment attempt does not count, although the record of the attempt itself is kept with the financial records. Your date of birth is not copied into that archive: it is kept only while your account exists and is deleted with it. The outcome of your identity verification is kept in the same archive for the same period: whether it was approved and when Roesas recorded that, and the references Roesas and the verification provider used for it. Your identity documents and images are not copied into it.

A signed advertiser agreement and the record of its execution

Kept as evidence of a contract, and this one outlives the account: if the account is deleted the record remains, with the name held at signing and the signature given, and a restricted archive keeps the permanent account reference it was signed under so that the record can still be checked as unaltered. Deleting an advertisement never removes it. It is kept for seven years after the date Roesas recorded the advertisement's approval, and never removed while the advertisement still exists (where no approval date was recorded, it is kept until a period is decided), and longer only where a documented legal hold requires it or Roesas has recorded a reason to keep that particular record.

Moderation, enforcement and audit records

Kept so decisions can be reviewed and disputes answered. When an account is deleted the record of WHAT was done survives; only the attribution to that person is removed.

Financial and payment records

Kept for accounting, tax and anti-fraud purposes: for seven years after the end of the financial year in which the payment, refund or credit took place, and longer only where a documented legal hold requires it or Roesas has recorded a reason to keep that particular record. This outlasts the account.

Public safety reports

Kept while the concern may still need to be reviewed or accounted for, and kept after the advertisement they concern is gone. A report destroyed by the removal of what it reports is no evidence at all. Deleting an advertiser's account does not delete a report made about them; it is a record of what somebody else said.

Backups

Information deleted from the live service may persist in backups for a limited period before those backups are cycled out.

An advertisement expiring or being deleted does not delete the compliance and financial evidence connected to it. Those records exist precisely so that they are still there when somebody asks what happened. Deleting your ACCOUNT is different and goes further: your account, advertisements and media are removed from the live service, and your consents and acknowledgements are no longer held against a live account. The financial records connected to your account, the signed agreements for your advertisements, and the identity details that support them are kept in a restricted archive, under the permanent account reference they were created under, so that a payment, a refund or a signature can still be explained and checked. Some of those records necessarily keep identifying information: a signed agreement retains the name held at signing and the signature given, because a record of a signature by nobody is evidence of nothing. In the Roesas service, only administrators can open that archive, every opening of an archived account or transaction is logged, and it is never used to contact you or for marketing.

Financial records are kept for seven years after the end of the financial year they belong to. The archived record of a deleted advertisement and its signed agreements are kept for seven years after the date Roesas recorded the advertisement’s approval, and never removed while the advertisement still exists; where no approval date was recorded, they are kept until a period is decided. The identity details in the archive are kept only for as long as the records they identify; when an account with no advertisement and no completed payment or other completed financial transaction is deleted (an unpaid, failed or cancelled attempt does not count), its identity details are not kept in the archive at all. A documented legal hold, or a recorded decision to keep a particular record (for example while a dispute about it is open), can extend any of these periods; a record kept that way is removed only by an administrator. Other evidence is kept for as long as the purpose it is held for requires, and for as long as the obligations that apply in the relevant place require, whichever is longer. Removing records when their period ends is not yet done automatically. Until it is, a record is removed only by an administrator, one record at a time: never while a legal hold applies to it, and the archived identity details never while an archived record that needs them remains. Each removal is logged without copying what was removed.

Depending on where you live, you may have rights over the information Roesas holds about you. These may include the right to ask for access to it, to have it corrected, to have it deleted, to restrict or object to how it is used, to receive a copy in a portable form, and to withdraw consent where processing relies on consent.

These rights are subject to the law that applies to you and to its exceptions. In particular, Roesas may need to keep evidence, financial records, and moderation records even after a deletion request, where the law requires or permits it, and will tell you if that is why a request cannot be met in full.

There is no self-service export or download tool. Requests are handled by a person.

Anyone can make a privacy request, with or without an account. Use the privacy request form. It asks for your name, your email address, what you are asking for and any detail that helps Roesas find the information. No account, and no sign-in, is needed.

If you do have an account, you may instead raise it in your message centre under the Account category. See the contact page. Either route reaches a person; the form is simply the one that works when you have no account to sign in to.

Roesas may need to confirm who you are before it acts. Releasing, changing or deleting personal information on the strength of an unverified email address would let one person act on another’s data, so where it is reasonably necessary Roesas will ask you to confirm your identity first, and will tell you how.

Do not send identity documents through the request form. It does not ask for them and they should not be submitted through it. Where identity has to be confirmed, that is arranged separately.

Roesas uses cookies to keep you signed in. When you sign in, a sign-in cookie is set; it is necessary for the site to recognise you as signed in. Signing out clears it.

Short-lived cookies may also be used for security purposes such as protecting sign-in and form submissions.

Roesas is an adult platform, and the first time you open the public site you are asked to confirm your age and accept the Terms of Service before browsing advertisements. When you confirm, one further essential cookie is set so that you are not asked again on every page.

That cookie records only that you confirmed, and nothing else: no date of birth, no name, no identifier, no network address and no record of what you look at. It is set for the roesas.com family of sites so that one confirmation covers roesas.com, trans.roesas.com and massage.roesas.com, it expires after a year, and it is not shared with anybody. If the wording you confirmed changes materially, you are asked again.

This confirmation is an acknowledgment. It is not identity or age verification: Roesas does not ask a visitor for a date of birth or a document in order to browse, and does not check one.

Roesas does not use advertising cookies, tracking pixels, or third-party analytics. There is no analytics package on the site and no third-party tracking script in its pages. Because the only cookies used are necessary ones, there is no consent banner to dismiss.

The Roesas service is for adults. It is not intended for, and must not be used by, anybody under 18, or under a higher age where the law that applies to them sets one.

Roesas does not knowingly collect information from anybody under that age. If Roesas becomes aware that it holds such information, it will delete it and terminate the account.

Roesas uses technical and organisational measures appropriate to the service to protect information against loss, misuse and unauthorised access. Passwords are not stored in readable form, and access to production data is restricted.

No service can promise absolute security, and Roesas does not. Keep your password to yourself, do not reuse it elsewhere, and tell us if you think your account has been accessed without your authorisation.

Roesas relies on infrastructure, verification, payment and email providers that may process information in countries other than the one you are in. Where that happens, the information is subject to the laws of the place it is processed in.

Roesas does not claim to have put any specific legal transfer mechanism in place. Where the law that applies to you requires one for information to leave your country, Roesas does not represent that such a mechanism is currently in place, rather than naming one that is not.

Roesas may revise this policy. The current version is always the one published on this page, with the date it was last updated at the foot of it. Where a revision is material, Roesas will take reasonable steps to bring it to the attention of account holders.

Anyone may use the privacy request form, with or without an account. Account holders may also use their message centre. See the contact page.

The Service is operated by Roesas Operations LLC, a Florida limited liability company. Roesas has not appointed a data protection officer and does not represent that it is required to.

Where a privacy matter needs to reach Roesas in writing rather than through the form, Roesas Operations LLC can be reached at roesas.ad.services@gmail.com. The form above remains the route for a privacy request, because it records the request rather than relying on an inbox.

Depending on where you live, you may also have the right to complain to a data protection authority.