Privacy Policy

1. Overview

ClipVault ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to complying with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2. Information We Collect

Personal Information

• Email address and username (required for account creation)
• Display name and profile bio (optional)
• Cryptocurrency wallet addresses (for payments and payouts)
• Identity verification documents (for creators, as required by 18 U.S.C. 2257)
• Consent forms and model release documents

Automatically Collected Information

• IP address and geolocation data (for compliance and geo-blocking)
• Browser type, device information, and operating system
• Pages visited, time spent, and interaction data
• Referral URLs

3. How We Use Your Information

• To provide, maintain, and improve the Platform
• To process cryptocurrency transactions and payouts
• To verify creator identity and maintain 2257 compliance records
• To enforce our Terms of Service and Content Policy
• To comply with legal obligations and respond to law enforcement requests
• To detect and prevent fraud, abuse, and security incidents
• To send service-related communications (account updates, security alerts)
• To enforce geo-blocking in restricted jurisdictions

4. Data Sharing

We do not sell your personal information. We may share data with:

• Law enforcement — when required by law or to protect the safety of users
• Service providers — hosting, CDN, and analytics providers who help operate the Platform (under strict data processing agreements)
• Legal compliance — to comply with 2257 record-keeping inspections if required

We never share your personal information with content creators. Your username is the only identifier visible to creators on purchases.

5. Data Retention

• Account data is retained while your account is active and for 1 year after deletion
• 2257 compliance records are retained as required by federal law (minimum 5 years after content removal)
• Transaction records are retained for 7 years for tax and financial compliance
• Server logs are retained for 90 days

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing of your data
• Data portability (receive your data in a structured format)
• Withdraw consent at any time
• File a complaint with a data protection authority

To exercise these rights, contact us at privacy@clipsvault.io. Note that certain data (e.g., 2257 records) cannot be deleted due to legal requirements.

7. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how the Platform is used. You can control cookie settings through your browser. Disabling essential cookies may prevent you from using certain features.

8. Security

We implement industry-standard security measures including HTTPS encryption, encrypted data at rest, rate limiting, and regular security audits. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with GDPR and other applicable data protection laws.

10. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@clipsvault.io.