1. Overview

Paperclip is a creator campaign validation service for Cambodia launch operations. The service connects creators, brands, and platform review workflows so campaign work can be submitted, verified, approved, and paid through approved operational rails.

This policy applies to Paperclip websites, mobile applications, review flows, dashboards, support operations, and related staging or sandbox environments when they process real user data.

2. Information we collect

• Account and contact data, such as name, email address, phone number, role, brand affiliation, creator profile details, and account status.
• Authentication and security data, such as one-time password delivery status, Telegram Gateway metadata, session records, access logs, and fraud or abuse signals.
• Creator social account data that a user authorizes Paperclip to access, such as platform account identifiers, public profile fields, creator handles, media metadata, video lists, and campaign-relevant performance metrics.
• Brand and campaign data, such as campaign briefs, content tier selections, budgets, deposit references, review decisions, creator submissions, and campaign settlement status.
• Payment and payout operational data, such as ABA or KHQR payout references, approved amounts, payout status, manual approval evidence, and ledger/audit records.
• Device, usage, analytics, diagnostics, communications, and support data needed to operate, secure, troubleshoot, and improve Paperclip.

3. How we use information

• To create accounts, authenticate users, protect sessions, and prevent abuse.
• To match creators and brands with campaigns, content tiers, and review tasks.
• To verify submitted campaign content and calculate eligible rewards.
• To run brand deposits, creator payouts, reconciliation, support, and audit workflows.
• To comply with platform policies, provider reviews, security requirements, and legal obligations.
• To send transactional notices, support messages, operational alerts, and review updates.

4. Platform integrations

Paperclip may connect with TikTok, Meta, Instagram, Google, YouTube, Apple, and other providers only after the user authorizes the connection or the provider approves the relevant review path. Paperclip requests the minimum practical access needed for account linking, ownership verification, campaign eligibility, and campaign performance checks.

Platform data is not sold. Paperclip does not use platform user data for unrelated advertising, profiling outside the campaign workflow, or model training. Users may disconnect platform accounts or request deletion using the instructions on the Data Deletion page.

5. How we share information

Paperclip shares information only as needed to operate the service, including with:

• Hosting, database, cache, observability, email, authentication, OTP, and security providers.
• Connected social platforms when users authorize a platform integration.
• Payment or payout rails used to process brand deposits and creator payouts.
• Brands and creators participating in the same campaign, limited to campaign-relevant data.
• Legal, compliance, safety, or anti-fraud recipients when required to protect users or the service.

6. Analytics and ad measurement

On this website

• Paperclip uses PostHog analytics only if you choose Accept in the site's notice. It records which pages you open, basic device details such as your browser and screen size, and how you found the site, such as the campaign tags or ad click reference in the link that brought you. Those link details are recorded as the link wrote them. We try to leave out any that look like an email address or phone number, but we cannot catch every way one can be written. Apart from them, it does not record what you type, amounts, or your name, email address or phone number. If you choose Decline, it does not run.
• If you choose Accept, the site may also load Meta and TikTok measurement tags, so those companies can measure how our ads perform. They handle that data under their own privacy policies.
• When a brand account is approved or funds a campaign, Paperclip may tell Meta and TikTok, to measure which ads bring brands to Paperclip. We do this only for brands that chose Accept and arrived through one of our ads. We send the ad click reference and a scrambled (hashed) copy of the account's email address, never the brand's name, an amount or the campaign's content. This is off until Paperclip turns it on.
• Paperclip's servers record a few account events, such as a brand account being approved or a campaign being funded, under an internal account number. These records hold no name, email address, phone number or amount.
• Error reports go to Sentry so we can fix problems. On this website they are set up to leave out your name, email address, phone number and IP address.
• To change your choice, clear this site's data in your browser. The notice then appears again.

In the creator app

• The app records which screens and features are used, and sends crash reports, under an internal account number, not your name or phone number.
• If screen recording is turned on to help fix problems, text fields, amounts and phone numbers are hidden in the recording.
• The app sends no personal data to advertising platforms. Apple's built-in ad measurement lets an ad network learn, without identifying anyone, whether an install from its ad went on to sign up, link a social account or send a first clip.

7. Retention

Paperclip keeps personal data only as long as needed for account operation, campaign validation, payouts, audit, dispute handling, fraud prevention, legal obligations, and platform review requirements. Campaign, ledger, and payout records may be retained longer than general profile data because they support financial reconciliation and abuse prevention.

8. Security

Paperclip uses environment separation, access controls, secret-name based configuration, encrypted storage for sensitive application data, audit logging, staff access controls, and operational monitoring. Secrets and credential values must not be placed in source code, public documentation, logs, prompts, commits, or examples.

9. Your choices and rights

Users may request access, correction, disconnection, export, or deletion of their Paperclip data. Some records may be retained when needed for ledger integrity, fraud prevention, dispute resolution, tax, accounting, legal, or platform policy reasons.

To make a request, follow the Data Deletion Instructions or contact antony@aivosoftware.com.

10. Age and regional operation

Paperclip is intended for users who can legally participate in creator campaigns and payment workflows. The Cambodia validation launch uses founder-approved ABA and KHQR rails while formal merchant integrations are prepared.

11. Changes and contact

Paperclip may update this policy as the service, provider approvals, payment rails, or legal requirements change. The updated date at the top of this page shows when the current version took effect.

Privacy questions can be sent to antony@aivosoftware.com.