HeyClipper is the operating system for short-form campaign production. This policy explains how we collect, use, and safeguard data for creators, brands, agencies, and administrators so you can collaborate confidently.
OAuth scopes and Stripe-managed payouts keep passwords and payment data encrypted at the source.
HeyClipper runs on Vercel and MongoDB Atlas with redundant backups in the United States and European Union.
Manage connected accounts, permissions, and notification preferences directly in your dashboard.
HeyClipper Labs Inc. builds HeyClipper, the collaboration platform that connects creators, brands, and agencies for short-form campaign production. This notice covers the personal and business data we process when you access heyclipper.com, mobile experiences, or HeyClipper-managed integrations.
If laws in your region provide stronger protections, we apply those standards. Capitalized terms carry the same meanings as in our Terms of Service unless defined here.
Collected when you create or manage a HeyClipper account for any role (creator, brand, agency, or admin).
Only gathered after you authorize HeyClipper to sync statistics from connected social channels.
Information created while campaigns are scoped, staffed, produced, and approved in HeyClipper.
Processed through Stripe or other payment partners and stored with appropriate safeguards.
Automatically captured to keep HeyClipper reliable, performant, and secure across devices.
HeyClipper processes data only for reasons tied directly to delivering and protecting the platform.
When the GDPR, UK GDPR, or similar laws apply, HeyClipper relies on the following lawful bases:
We never sell personal data. Sharing is limited to the categories below with contractual safeguards.
Stripe, Vercel, MongoDB Atlas, customer support tooling, analytics providers, and vetted auditors under data processing agreements.
Campaign details and submissions are visible to authorized collaborators so they can plan, review, and approve deliverables.
Required disclosures in response to lawful requests, subpoenas, court orders, or to defend HeyClipper and our community.
If HeyClipper merges or restructures, successor entities inherit data protections consistent with this policy. We will notify you before material changes take effect.
HeyClipper keeps personal data only as long as necessary for contractual obligations, legal requirements, or legitimate business interests. Standard retention timelines include:
Encryption in transit (TLS 1.2+) and at rest, role-based access controls, mandatory 2FA for staff, and automated anomaly detection all safeguard HeyClipper systems.
Depending on your jurisdiction, you may exercise the following rights. We respond within 30 days or as required by local regulations.
To initiate a request, contact privacy@heyclipper.com from the email associated with your account. We may verify your identity before proceeding.
HeyClipper uses cookies, local storage, and similar technologies to keep you signed in, remember preferences, power analytics, and measure campaign performance. You can manage cookies through your browser settings. Rejecting certain cookies may limit functionality like persistent sessions.
HeyClipper is headquartered in the United States with infrastructure across the US and EU. When we transfer data internationally, we rely on Standard Contractual Clauses, data processing addenda, and comparable safeguards required by applicable law.
We may update this policy to reflect product changes, legal requirements, or new safeguards. Material updates will be communicated through in-app notices or email at least seven days before they take effect, unless law requires immediate changes.
Questions about privacy or data protection can be directed to privacy@heyclipper.com. If you are located in the EU or UK, you may also lodge a complaint with your local supervisory authority.
privacy@heyclipper.com