Privacy Policy

Clipperteams is a SaaS platform operated by CODEARTISANS (CNPJ 47.549.323/0001-00, headquartered at Erechim/RS, CEP 99709-320, Brasil) that helps content teams manage and publish short-form videos to TikTok, YouTube Shorts, and Instagram Reels. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have over it. By using Clipperteams, you agree to the practices described here.

We collect two categories of data: information you provide directly to Clipperteams, and information from the social platforms you connect.

Data you provide to Clipperteams

• Account: full name, email address, password (hashed and salted)
• Profile: avatar, language preference, theme, display name
• Billing: subscription plan, payment method (handled by Stripe — we never store full card numbers)
• Team data: team name, member roles, invitations sent
• Content: video files you upload, thumbnails, captions, schedules, internal comments and review feedback
• Operational logs: IP address, browser, device type, timestamps of significant actions, error reports

Data from connected platforms

• Connected account identifier (ID issued by Post for Me, our social-platform integration provider)
• Channel/account metadata: handle, display name, avatar, connection status (connected/disconnected)
• Published content metadata: video IDs, URLs, status, post date
• Performance metrics: views, likes, comments, shares
• Creator info from TikTok (privacy options, posting limits, allowed durations)

Clipperteams does not store OAuth tokens in its own database. Access and refresh tokens are held by Post for Me (https://www.postforme.dev), our social-platform integration provider, which runs the authorization flow and executes publications on our behalf.

We collect data through four channels.

• OAuth via Post for Me — when you connect a Google/YouTube, TikTok, Meta/Instagram, LinkedIn, X, Pinterest, Threads, or Bluesky account, Clipperteams redirects you to our integration provider (Post for Me), which runs the authorization flow with the chosen platform. After you approve the requested scopes, access tokens are stored by Post for Me, which performs publishing and read actions on Clipperteams's behalf. Clipperteams receives only the account identifier and public metadata (username, avatar, connection status).
• Direct upload — you upload video files, thumbnails, and captions through the Clipperteams interface.
• Webhooks — Post for Me notifies Clipperteams when a publication finishes processing, fails, a connected account changes status, or new metrics are available.
• Telemetry — our application records technical logs (response times, errors) to ensure reliability and security.

We use your data exclusively to operate the Clipperteams service.

• Publish, schedule, and manage your content on the connected platforms
• Display analytics and performance metrics back to you and your team
• Coordinate review pipelines and team workflows (assignment, approvals, comments)
• Bill your subscription and process tax-related obligations
• Detect abuse, prevent fraud, and maintain platform security
• Send transactional emails (password reset, security alerts, billing receipts)
• Send product updates only with your explicit opt-in consent

Each data processing activity has a defined legal basis under the Brazilian LGPD (Law 13.709/2018) and the European GDPR.

• Performance of contract — account management, publishing, analytics, billing (Art. 7, V LGPD; Art. 6(1)(b) GDPR)
• Legal obligation — fiscal records, tax reporting (Art. 7, II LGPD; Art. 6(1)(c) GDPR)
• Consent — marketing communications, optional integrations (Art. 7, I LGPD; Art. 6(1)(a) GDPR)
• Legitimate interests — fraud prevention, service security, platform improvement (Art. 7, IX LGPD; Art. 6(1)(f) GDPR)

We share data only with the third-party processors required to deliver the service. We never sell your data.

• Post for Me (United States) — social-platform integration provider; runs the OAuth flow, holds the access and refresh tokens, performs publications, and collects metrics on Clipperteams's behalf
• Stripe (United States) — payment processing and billing
• Cloudflare R2 (United States/global) — video and image storage
• Resend (United States) — transactional email delivery
• Hosting infrastructure (Brazil/global) — application servers and databases
• Connected platforms (Google/YouTube, TikTok, Meta, LinkedIn, X, Pinterest, Threads, Bluesky) — only the data you explicitly authorize, exclusively to publish your content and read its metrics

Some processors are located outside Brazil. We rely on standard contractual clauses (Art. 33, II LGPD) and equivalent GDPR mechanisms to protect international transfers. The list of processors is reviewed annually.

We retain different data categories for different periods, based on legal, contractual, and operational needs.

• Connected account identifier — for as long as you keep the connection active. When you disconnect a channel or delete your account, Clipperteams instructs Post for Me to revoke the tokens with the platform and remove the account record from the integration provider within 7 days.
• Uploaded videos and thumbnails — until you delete the content or your account.
• Account profile — until you request deletion. After deletion, we anonymize logs that reference your account within 30 days.
• Billing records — 5 years after the end of the fiscal period, as required by Brazilian tax law.
• Operational logs — 6 months, then aggregated/anonymized.
• Backups — encrypted, retained for 30 days, automatically expired.

You have the following rights over your personal data, under Art. 18 LGPD and the GDPR.

• Confirmation that we process your data and access to it
• Correction of incomplete, inaccurate, or outdated data
• Anonymization, blocking, or deletion of unnecessary or excessive data
• Portability of your data to another service provider, in machine-readable format
• Deletion of personal data processed under your consent
• Information about with whom we share your data
• Information about the option of not granting consent and the consequences of such
• Withdrawal of consent at any time
• Opposition to processing based on legitimate interests

To exercise any of these rights, email [email protected] or visit our Data Deletion page. We respond within 15 business days for LGPD requests and within 30 days for GDPR requests.

You can delete your Clipperteams account at any time from Settings → Account → Delete account. Once confirmed, we delete or anonymize your personal data within 30 days. For more details on the deletion process, including platform-side revocation, see our Data Deletion page.

You can revoke Clipperteams's access to your connected social accounts directly on each platform. Revoking access on the platform side immediately stops all publishing and metric reads — independently from deleting your Clipperteams account.

• Google/YouTube — https://myaccount.google.com/permissions
• TikTok — https://www.tiktok.com/setting (Privacy & Safety → Connected apps)
• Meta/Instagram — https://accountscenter.facebook.com/ (Manage your accounts → Apps and websites)

Clipperteams uses the YouTube API Services. By connecting a YouTube channel, you agree to the YouTube API Services Terms of Service (https://developers.google.com/youtube/terms/api-services-terms-of-service) and acknowledge the Google Privacy Policy (http://www.google.com/policies/privacy).

What Clipperteams does on your behalf

• Upload video files to your channel
• Schedule video publication
• Read public and private metrics for your uploaded content
• Update video metadata (title, description, tags, category, visibility)
• Delete uploads created by Clipperteams, when you request it

We do not store your YouTube login credentials. Access and refresh tokens are held by Post for Me (https://www.postforme.dev), our integration provider, in compliance with the YouTube/Google API Services requirements. We do not use YouTube data for personalized advertising. We do not transfer YouTube data to third parties for advertising purposes — the only third-party processing is what is strictly necessary for Post for Me to publish and read metrics. You can revoke Clipperteams's access at https://myaccount.google.com/permissions or https://security.google.com/settings/security/permissions at any time.

Clipperteams uses the TikTok Content Posting API to publish content on your behalf. By connecting a TikTok account, you agree to the TikTok Terms of Service (https://www.tiktok.com/legal/terms-of-service) and acknowledge TikTok's privacy practices.

What we read from TikTok

• Creator info — your username, avatar, available privacy levels, posting limits
• Post status — whether your published video is processing, public, or failed
• Post stats — views, likes, comments, shares for content published through Clipperteams

We do not store your TikTok login credentials. Tokens are held by Post for Me (https://www.postforme.dev), our integration provider, which requests only the scopes required for posting and reading the metrics of content posted through Clipperteams. You can revoke access at https://www.tiktok.com/setting under Privacy & Safety → Connected apps.

Clipperteams uses Instagram Login (Instagram Graph API) to publish Reels on your behalf. By connecting an Instagram Business or Creator account, you agree to Meta's Terms of Service (https://www.facebook.com/terms.php) and Instagram's Terms.

What we read from Meta

• Account info — username, account type, profile picture
• Media metadata — IDs, URLs, captions of content published through Clipperteams
• Insights — reach, impressions, engagement of content published through Clipperteams

When you delete your Clipperteams account, request data deletion, or Meta sends us a deletion request, Clipperteams instructs Post for Me to revoke the tokens and delete the related Meta data within 30 days. You can revoke access at https://accountscenter.facebook.com under Manage your accounts → Apps and websites.

We do not store your Meta login credentials. Access tokens are held by Post for Me (https://www.postforme.dev), our integration provider, with only the scopes required to publish Reels and read their performance metrics.

Clipperteams is not directed to children under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor created an account on Clipperteams, contact [email protected] and we will delete the account within 7 days.

For privacy questions, requests under LGPD or GDPR, or to exercise any of the rights listed above:

• Data Protection Officer: Emanuel Vogt
• Email: [email protected]
• Postal address: Erechim/RS, CEP 99709-320, Brasil
• Company: CODEARTISANS (CNPJ 47.549.323/0001-00)

We may update this Privacy Policy to reflect new features, legal requirements, or platform changes. When we make material changes, we email registered users at least 30 days before the change takes effect and post a notice within Clipperteams. Continued use of the service after the effective date constitutes acceptance of the updated policy.