CLIP TECH, LLC (“Clip,” “We,” or “Us”) Privacy Policy

Updated June 2 2025

1. Who we are

• Clip Tech, LLC
• 2699 1/2 N Beachwood Dr #4085, Los Angeles CA 90068 USA
• Privacy lead: Max Peterson - contact@clip.tech

2. Eligibility

• Dashboard access is limited to business clients aged 16 or older.
• We promptly delete any data we discover from users under 16.

3. Data we collect

3.1 Information you give us

• Name, company or billing entity
• Email and optional phone number
• Business address, tax or VAT IDs
• Authentication data via WorkOS SSO
• Contracts and agreements through PandaDoc
• Invoices and payment details entered for Stripe, PayPal, Mercury, or QuickBooks

3.2 Information we collect automatically

• Secure session cookie (auth.session)
• IP address, browser/OS, pages viewed, timestamps
• Usage analytics via Vercel Web Analytics (cookieless)

3.3 Information from third parties

• Identity confirmation from WorkOS
• Payment status from Stripe, PayPal, Mercury, QuickBooks
• Automation event data passed through Zapier integrations

4. Why we use your data (legal bases)

1. Account creation and security - contract
2. Display campaign metrics and files - contract
3. Process payments and meet accounting rules - legal obligation / contract
4. Provide support communications - legitimate interest
5. Send product updates or tips if you opt in - consent
6. Improve the dashboard via product analytics - legitimate interest

5. Cookies and tracking

• One http‑only auth cookie; clearing it logs you out.
• First‑party analytics only; no ad pixels.
• Site does not currently respond to “Do Not Track” signals.

6. Your choices

• Unsubscribe links and a dashboard toggle for marketing emails
• Standard browser controls for cookies
• GDPR/CCPA rights requests viacontact@clip.tech; response in 30/45 days

7. Sharing and subprocessors

Personal data is shared solely with our staff and these service providers:

All vendors operate under data‑processing agreements or Standard Contractual Clauses. We do not sell or share data for third‑party marketing.

8. International transfers

• Vendors certified under the EU‑US Data Privacy Framework when available
• Otherwise protected by the 2021 Standard Contractual Clauses
• Copies of transfer mechanisms available on request

9. Security

• WorkOS SSO with optional MFA, SCIM provisioning
• TLS 1.2+ in transit, AES‑256 at rest
• Role‑based access, least‑privilege keys, quarterly penetration tests
• Infrastructure on SOC 2 / ISO 27001 data centers (Vercel, DigitalOcean, AWS)

10. Data retention

• Financial and tax records: 7 years
• Client account and campaign data: 2 years after last contract, then deleted or anonymised
• Security logs and analytics: 12 months, then aggregated

11. California privacy notice

• We do not disclose personal information for third‑party direct marketing.
• CCPA/CPRA rights may be exercised viacontact@clip.tech.

12. EU / UK privacy notice

• GDPR rights: information, access, rectification, erasure, restriction, objection, portability.
• Contact us or your local supervisory authority to exercise these rights.

13. Breach notification

We will notify affected users and regulators within 72 hours of any notifiable personal‑data breach.

14. Changes

Material changes to this notice will be emailed to account holders at least 14 days before taking effect.

15. Contact

Questions or requests: contact@clip.tech or the postal address above.