Privacy Policy

Clippers Farm ("we", "us") operates a performance-based creator marketplace in Malaysia. This policy explains how we collect and process personal data in accordance with the Personal Data Protection Act 2010 (PDPA).

Account data (name, email, password hash, role); payout data (bank name, account number, account holder name); campaign activity (video URLs you submit, view counts, earnings); technical data (log records, approximate IP for security functions such as brute-force protection).

To operate the marketplace (matching campaigns, verifying views, calculating earnings); to process payouts by bank transfer; to send transactional emails (e.g. submission approved, payout sent) which you can disable in your dashboard; and to keep the platform secure.

Bank details are visible only to platform administrators for the purpose of processing payouts. Video URLs are shared with third-party view-tracking services solely to obtain public view counts. Transactional emails are delivered through our email service provider. We do not sell personal data.

The following service providers process data on our behalf:

• PostHog (product analytics and session replay; see section 6 for what replay can and cannot capture).
• Resend (transactional email delivery: verification, submission and payout notifications).
• Stripe (card payment processing for brand campaign funding; we never store card numbers).
• Apify (fetches public video and profile data from TikTok/Instagram/YouTube for view verification and social account ownership checks).
• Telegram (operational alerts to platform administrators only; no end-user data beyond what the alert requires).
• Emergent object storage (hosting of images you attach in support chat, served only through authenticated platform endpoints).
• Google (optional Google sign-in; we receive your name, email and profile picture when you choose it).

We use PostHog to understand how the product is used, including session replay of anonymised page interactions. Input fields are masked by default, and pages that display financial or support data (clipper wallet, brand wallet, payout administration, finance administration, and support chat) are excluded from replay capture entirely, so bank details and support conversations are never recorded.

Account and transaction records are retained for as long as your account is active and thereafter as required for legal, tax and audit purposes. Payout records (including bank details snapshots) are retained for reconciliation.

You may request access to and correction of your personal data, and withdraw consent to processing (which may prevent us from providing the service). To exercise these rights, or to request account deletion, contact us through the in-app support chat or the address below.

Account deletion is currently processed manually: we settle any outstanding verified earnings first, then remove the account. Some records (payout history, fraud investigation records) are retained after deletion where the law or auditability requires it.

Passwords are stored as salted bcrypt hashes; access to admin functions is role-restricted; transport is encrypted (HTTPS). No system is perfectly secure, so notify us immediately of any suspected account compromise.

Data protection enquiries: privacy@clippersfarm.example (placeholder: replace with your real contact before launch).