Clippo Logo

Privacy Policy

Last updated:2/11/2026

Your Privacy is Important

This Privacy Policy explains how CLIPPO ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our platform at clippo.media.

1. Information We Collect

We collect different types of information depending on how you interact with our platform:

Account Information

  • Name, email address, and username
  • Password (stored hashed with bcrypt, never in plaintext)
  • Profile picture URL and bio
  • Account role (Creator, Brand, or Admin)

Application Data

Collected when you apply to join the platform:

  • Creators: email, proof video URL, demographics (age, country, platforms, follower count, niche)
  • Brands: full name, company name, email, promotion types, bio link, description of needs

Financial & Payment Data

  • Payment method (PayPal, Bank Transfer, or Crypto)
  • Payment email (e.g., PayPal email)
  • Payment details (bank details, crypto wallet address)
  • Balance, earnings, estimated payout, payout schedule

Content & Performance Data

  • Submitted content URLs (TikTok, Instagram)
  • Clip metrics: views, likes, comments, shares, earnings
  • Daily performance stats per submission
  • Campaign participation data
  • Aggregate stats: total videos, views, likes, comments

Social Media Account Data

  • Platform name and username
  • Account verification status
  • Profile bio (scraped for verification purposes)
  • Verification codes and attempt history

Support & Feedback Data

  • Support ticket subjects and messages
  • Bug reports (title, description, severity, page URL, browser info, screenshots)
  • Feature requests and descriptions
  • In-app notifications

Manually Requested Data

We may occasionally request additional information from you directly, such as:

  • Screenshots or exports of your social media analytics dashboards
  • Audience demographics and engagement breakdowns
  • View counts, watch time, or other performance metrics
  • Content reach and impression data across platforms

2. How We Use Your Information

We use your information for the following purposes:

Service Delivery

  • Create and manage your account
  • Process campaign participation and clip submissions
  • Calculate earnings and process payouts
  • Verify ownership of social media accounts

Communication

  • Send account credentials upon approval
  • Deliver application status updates
  • Real-time notifications about submissions and campaigns
  • Support ticket responses

Security & Fraud Prevention

  • Detect viewbotting and artificial engagement
  • Rate limit login attempts (5 per minute)
  • Rate limit API requests and submissions
  • Distributed locks on financial operations

Business Development & Brand Partnerships

  • Aggregate creator performance data to showcase platform reach to potential brands
  • Use manually requested metrics and analytics to build compelling brand partnership proposals
  • Present anonymized or aggregated creator statistics in marketing materials
  • Demonstrate platform value and creator network strength to attract campaigns

Platform Improvement

  • Website analytics and performance monitoring
  • Page load speed measurement
  • Session caching for faster page loads

3. Third-Party Services

We share data with the following third-party service providers to operate the platform:

Apify

Receives social media content URLs and profile usernames to scrape performance metrics (views, likes, comments, shares) and profile bios for account verification.

Resend

Receives email addresses and email content to deliver transactional emails (account credentials, application updates, custom messages).

Vercel Analytics & Speed Insights

Collects anonymized website usage data including page views, web vitals, and performance metrics. No personal data is shared.

Pusher

Powers real-time notifications and support chat. Receives user IDs and notification content for delivery.

Upstash Redis

Stores temporary session cache (5-minute TTL) and rate limiting data. Used to improve performance and prevent abuse.

Cloudflare R2

Stores uploaded files including thumbnails and images associated with submissions.

4. Cookies & Tracking

We use minimal cookies necessary to operate the platform:

Session Cookie

A single authentication cookie is used to keep you logged in:

  • Name: authjs.session-token (or __Secure- prefix in production)
  • HttpOnly and secure in production
  • SameSite: lax
  • Domain: .clippo.media in production

Analytics

Vercel Analytics and Speed Insights collect anonymized performance data. These are privacy-focused and do not use personal identifiers or advertising cookies.

5. Data Security

Security Measures

We implement the following security measures to protect your data:

  • Passwords hashed with bcrypt before storage
  • JWT-based session tokens with secure cookie settings
  • Rate limiting on login (5/min), API (100/min), payouts (3/hr), submissions (10/hr)
  • Distributed locks on financial operations to prevent race conditions
  • Social account verification with attempt limits and lockout periods
  • Cascade deletion of all user data upon account removal

6. Data Retention & Deletion

How Long We Keep Your Data

  • Account data is retained for the duration of your account
  • Session cache expires after 5 minutes
  • Rate limiting data follows sliding windows (1 minute to 1 hour)
  • When your account is deleted, all associated data (clips, submissions, payouts, social accounts, notifications, support tickets) is permanently removed

7. Your Rights

Data Rights

You have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you
  • Correction: Update inaccurate information via your profile or by contacting us
  • Deletion: Request deletion of your account and all associated data
  • Portability: Request your data in a portable format
  • Objection: Object to specific processing activities

8. Contact

Get in Touch

If you have any questions about this Privacy Policy or want to exercise your data rights, contact us: