Privacy Policy

1. Introduction

Clippable, operated by Cruxtech (“we”, “us”), respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

2. Information We Collect

Account Information: When you sign up, we collect your email address, display name, and password (hashed). If you use Google sign-in, we receive your name and email from Google.

TikTok Data (via Login Kit): When you connect your TikTok account, we access the following through TikTok’s official API with your explicit authorization:

• user.info.basic — Your TikTok username, display name, avatar URL, and follower count
• video.publish — Permission to publish videos to your TikTok profile on your behalf

We do not access your TikTok password, private messages, liked videos, watch history, or any data beyond the scopes listed above.

Payment Information: Payment processing is handled by Stripe. We do not store your credit card or bank account details on our servers.

3. How We Use Your Information

• To link and verify your TikTok account via TikTok’s Login Kit
• To publish campaign video content to your TikTok profile via the Content Posting API
• To track video performance metrics (views, likes, comments) for earnings calculation
• To process payments and payouts
• To communicate service updates and account notifications

4. Data Storage and Security

Your data is stored securely using Supabase (hosted on AWS). TikTok OAuth tokens are stored server-side only with Row Level Security (RLS) — they are never exposed to the browser or client-side code. All communication uses HTTPS/TLS encryption. We use PKCE (SHA-256) for the OAuth authorization flow to prevent code interception attacks.

5. Third-Party Services

We integrate with the following services:

• TikTok for Developers — Account authorization (Login Kit v2) and video publishing (Content Posting API)
• Supabase — Authentication and database
• Stripe — Payment processing

Each service has its own privacy policy. We encourage you to review them.

6. Data Sharing

We do not sell your personal data. We share data only with the third-party services listed above to the extent necessary to provide the Service. We may disclose information if required by law.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Disconnect your TikTok account at any time (revoking all API access)
• Delete your Clippable account and all associated data
• Withdraw consent for data processing

To exercise these rights, contact us at support@clippable.io or use the account settings in your dashboard.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., payment records). TikTok OAuth tokens are deleted immediately upon account disconnection.

9. Cookies

We use essential cookies for authentication session management. We do not use tracking cookies or third-party advertising cookies.

10. Children’s Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or dashboard notification. Continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions or requests, contact us at support@clippable.io.