1. Overview

Paperclip is a creator campaign validation service for Cambodia launch operations. The service connects creators, brands, and platform review workflows so campaign work can be submitted, verified, approved, and paid through approved operational rails.

This policy applies to Paperclip websites, mobile applications, review flows, dashboards, support operations, and related staging or sandbox environments when they process real user data.

2. Information we collect

• Account and contact data, such as name, email address, phone number, role, brand affiliation, creator profile details, and account status.
• Authentication and security data, such as one-time password delivery status, Telegram Gateway metadata, session records, access logs, and fraud or abuse signals.
• Creator social account data that a user authorizes Paperclip to access, such as platform account identifiers, public profile fields, creator handles, media metadata, video lists, and campaign-relevant performance metrics.
• Brand and campaign data, such as campaign briefs, content tier selections, budgets, deposit references, review decisions, creator submissions, and campaign settlement status.
• Payment and payout operational data, such as ABA or KHQR payout references, approved amounts, payout status, manual approval evidence, and ledger/audit records.
• Device, usage, analytics, diagnostics, communications, and support data needed to operate, secure, troubleshoot, and improve Paperclip.

3. How we use information

• To create accounts, authenticate users, protect sessions, and prevent abuse.
• To match creators and brands with campaigns, content tiers, and review tasks.
• To verify submitted campaign content and calculate eligible rewards.
• To run brand deposits, creator payouts, reconciliation, support, and audit workflows.
• To comply with platform policies, provider reviews, security requirements, and legal obligations.
• To send transactional notices, support messages, operational alerts, and review updates.

4. Platform integrations

Paperclip may connect with TikTok, Meta, Instagram, Google, YouTube, Apple, and other providers only after the user authorizes the connection or the provider approves the relevant review path. Paperclip requests the minimum practical access needed for account linking, ownership verification, campaign eligibility, and campaign performance checks.

Platform data is not sold. Paperclip does not use platform user data for unrelated advertising, profiling outside the campaign workflow, or model training. Users may disconnect platform accounts or request deletion using the instructions on the Data Deletion page.

5. How we share information

Paperclip shares information only as needed to operate the service, including with:

• Hosting, database, cache, observability, email, authentication, OTP, and security providers.
• Connected social platforms when users authorize a platform integration.
• Payment or payout rails used to process brand deposits and creator payouts.
• Brands and creators participating in the same campaign, limited to campaign-relevant data.
• Legal, compliance, safety, or anti-fraud recipients when required to protect users or the service.

6. Retention

Paperclip keeps personal data only as long as needed for account operation, campaign validation, payouts, audit, dispute handling, fraud prevention, legal obligations, and platform review requirements. Campaign, ledger, and payout records may be retained longer than general profile data because they support financial reconciliation and abuse prevention.

7. Security

Paperclip uses environment separation, access controls, secret-name based configuration, encrypted storage for sensitive application data, audit logging, staff access controls, and operational monitoring. Secrets and credential values must not be placed in source code, public documentation, logs, prompts, commits, or examples.

8. Your choices and rights

Users may request access, correction, disconnection, export, or deletion of their Paperclip data. Some records may be retained when needed for ledger integrity, fraud prevention, dispute resolution, tax, accounting, legal, or platform policy reasons.

To make a request, follow the Data Deletion Instructions or contact antony@aivosoftware.com.

9. Age and regional operation

Paperclip is intended for users who can legally participate in creator campaigns and payment workflows. The Cambodia validation launch uses founder-approved ABA and KHQR rails while formal merchant integrations are prepared.

10. Changes and contact

Paperclip may update this policy as the service, provider approvals, payment rails, or legal requirements change. The updated date at the top of this page shows when the current version took effect.

Privacy questions can be sent to antony@aivosoftware.com.