Privacy Policy

Last updated: 2 November 2026

This Privacy Policy explains how OVERCLIP (“OVERCLIP”, “we”, “us” or “our”) collects, uses, and protects information when you use our website and services (the “Service”). By using the Service you agree to this Policy.

1. Information we collect

  • Account data — your email address, display name, password (stored only as a secure hash), and role.
  • Connected accounts — the social handles and public profile URLs you link (TikTok, Instagram, YouTube and similar), and any verification status.
  • Campaign activity — the clips you submit and their public engagement metrics (views, likes, comments, shares), which we collect from public sources and third-party providers.
  • Payout information — the payout details you choose to provide so we can pay you.
  • Technical data — IP address, device/browser information, and essential cookies needed to keep you signed in and protect the Service.
  • Cookies — we set a session cookie, a security (CSRF) cookie and, while you are confirming your email address, a short-lived cookie that links the code you were sent to the browser you are typing it in. The Service cannot work without these and they are therefore not optional. We also set one optional cookie that records which page you arrived on, so we know which of our pages bring people here; it is written only if you allow it on the banner, lasts 30 days, and is never shared. We run no third-party analytics and no advertising cookies. You can decline without losing any functionality.
  • Unconfirmed signups — when you start creating an account we hold the email address you entered, your password in hashed form, and a hashed copy of the confirmation code, so that the account can be created when you type the code back. This is unusable after 20 minutes and is then deleted automatically, at the latest within the hour; it is deleted immediately when the account is created or when you start again. No account exists until the code is confirmed.
  • Language preference — when you create an account we record which language your browser asks for (the standard Accept-Language header every browser sends). We use it for one thing: deciding which languages are worth translating the site into. It is not a location, we do not look up your IP address, and it is never shared.
  • Fraud-prevention identifiers — when you create an account we store a one-way, salted hash of your IP address and of a first-party identifier set in your browser when you reach a sign-up page. We cannot read your address back from the hash; it exists only to be compared with other accounts, so that one person cannot invite themselves repeatedly through the referral programme or run multiple accounts on one campaign. The same hashed form is recorded against payouts and administrative actions in our internal audit log. The lawful basis is our legitimate interest in preventing fraud, and these records are kept for as long as the account exists and for 12 months afterwards.

2. How we use information

We use information to operate the Service, create and manage accounts, verify account ownership, run campaigns, calculate and process payouts, prevent fraud and abuse, comply with legal obligations, and improve and secure the platform. We may contact you with service-related messages (for example, verification, payout, or security notices).

3. Legal basis

Where applicable law requires it, we process personal data on the basis of performing our contract with you, our legitimate interests in operating and securing the Service and preventing fraud, your consent where requested, and compliance with legal obligations.

4. Cookies

We use only essential cookies (such as a session cookie, a security/CSRF token, and the cookie that carries an unfinished signup through email confirmation) that are necessary for the Service to function. We do not use them to build advertising profiles.

5. Service providers

We share limited information with trusted providers solely to run the Service, including hosting and database providers, metrics/scraping providers, sign-in providers (such as Google and the social platforms you connect), and email delivery providers. These providers process data on our behalf under appropriate safeguards. We do not sell your personal data.

6. International transfers

Our providers may process data in different countries. Where required, we rely on appropriate safeguards for such transfers.

7. Data retention

We keep information for as long as your account is active and as needed to provide the Service, resolve disputes, prevent fraud, and meet legal, accounting, or reporting requirements. We may retain certain records after account closure where we have a legitimate or legal reason to do so.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may close your account at any time by contacting us at hello@overclip.pro. We will respond as required by law. Some data may be retained as described above.

9. Security

We use reasonable technical and organizational measures to protect information, including encrypted transport, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed to, and may not be used by, anyone under 16 years of age (or a higher age where required by local law). We do not knowingly collect data from children.

11. Changes to this Policy

We may update this Privacy Policy at any time at our discretion. Changes take effect when posted on this page, and the “Last updated” date will be revised. Your continued use of the Service after changes are posted constitutes acceptance of the updated Policy.

12. Contact

Questions about this Policy? Contact us at hello@overclip.pro or via our contact page.