Privacy Policy
Your Privacy is Important
This Privacy Policy explains how CLIPPO ("we", "us", "our") collects, uses, shares, and protects your personal information when you use our platform at clippo.media.
1. Information We Collect
We collect different types of information depending on how you interact with our platform:
Account Information
- Name, email address, and username
- Password (stored hashed with bcrypt, never in plaintext)
- Profile picture URL and bio
- Account role (Creator, Brand, or Admin)
Application Data
Collected when you apply to join the platform:
- Creators: email, proof video URL, demographics (age, country, platforms, follower count, niche)
- Brands: full name, company name, email, promotion types, bio link, description of needs
Financial & Payment Data
- Payment method (PayPal, Bank Transfer, or Crypto)
- Payment email (e.g., PayPal email)
- Payment details (bank details, crypto wallet address)
- Balance, earnings, estimated payout, payout schedule
Content & Performance Data
- Submitted content URLs (TikTok, Instagram)
- Clip metrics: views, likes, comments, shares, earnings
- Daily performance stats per submission
- Campaign participation data
- Aggregate stats: total videos, views, likes, comments
Social Media Account Data
- Platform name and username
- Account verification status
- Profile bio (scraped for verification purposes)
- Verification codes and attempt history
Support & Feedback Data
- Support ticket subjects and messages
- Bug reports (title, description, severity, page URL, browser info, screenshots)
- Feature requests and descriptions
- In-app notifications
Manually Requested Data
We may occasionally request additional information from you directly, such as:
- Screenshots or exports of your social media analytics dashboards
- Audience demographics and engagement breakdowns
- View counts, watch time, or other performance metrics
- Content reach and impression data across platforms
2. How We Use Your Information
We use your information for the following purposes:
Service Delivery
- Create and manage your account
- Process campaign participation and clip submissions
- Calculate earnings and process payouts
- Verify ownership of social media accounts
Communication
- Send account credentials upon approval
- Deliver application status updates
- Real-time notifications about submissions and campaigns
- Support ticket responses
Security & Fraud Prevention
- Detect viewbotting and artificial engagement
- Rate limit login attempts (5 per minute)
- Rate limit API requests and submissions
- Distributed locks on financial operations
Business Development & Brand Partnerships
- Aggregate creator performance data to showcase platform reach to potential brands
- Use manually requested metrics and analytics to build compelling brand partnership proposals
- Present anonymized or aggregated creator statistics in marketing materials
- Demonstrate platform value and creator network strength to attract campaigns
Platform Improvement
- Website analytics and performance monitoring
- Page load speed measurement
- Session caching for faster page loads
3. Third-Party Services
We share data with the following third-party service providers to operate the platform:
Apify
Receives social media content URLs and profile usernames to scrape performance metrics (views, likes, comments, shares) and profile bios for account verification.
Resend
Receives email addresses and email content to deliver transactional emails (account credentials, application updates, custom messages).
Vercel Analytics & Speed Insights
Collects anonymized website usage data including page views, web vitals, and performance metrics. No personal data is shared.
Pusher
Powers real-time notifications and support chat. Receives user IDs and notification content for delivery.
Upstash Redis
Stores temporary session cache (5-minute TTL) and rate limiting data. Used to improve performance and prevent abuse.
Cloudflare R2
Stores uploaded files including thumbnails and images associated with submissions.
4. Cookies & Tracking
We use minimal cookies necessary to operate the platform:
Session Cookie
A single authentication cookie is used to keep you logged in:
- Name: authjs.session-token (or __Secure- prefix in production)
- HttpOnly and secure in production
- SameSite: lax
- Domain: .clippo.media in production
Analytics
Vercel Analytics and Speed Insights collect anonymized performance data. These are privacy-focused and do not use personal identifiers or advertising cookies.
5. Data Security
Security Measures
We implement the following security measures to protect your data:
- Passwords hashed with bcrypt before storage
- JWT-based session tokens with secure cookie settings
- Rate limiting on login (5/min), API (100/min), payouts (3/hr), submissions (10/hr)
- Distributed locks on financial operations to prevent race conditions
- Social account verification with attempt limits and lockout periods
- Cascade deletion of all user data upon account removal
6. Data Retention & Deletion
How Long We Keep Your Data
- Account data is retained for the duration of your account
- Session cache expires after 5 minutes
- Rate limiting data follows sliding windows (1 minute to 1 hour)
- When your account is deleted, all associated data (clips, submissions, payouts, social accounts, notifications, support tickets) is permanently removed
7. Your Rights
Data Rights
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you
- Correction: Update inaccurate information via your profile or by contacting us
- Deletion: Request deletion of your account and all associated data
- Portability: Request your data in a portable format
- Objection: Object to specific processing activities
8. Contact
Get in Touch
If you have any questions about this Privacy Policy or want to exercise your data rights, contact us:
Email: support@clippo.media
