Privacy Policy

This Privacy Policy complies with:

• Law No. 29733 - Personal Data Protection Law of Peru
• Supreme Decree No. 003-2013-JUS (Regulation of Law No. 29733)
• Directives of the National Personal Data Protection Authority

This Privacy Policy is an integral part of our Terms and Conditions of Service. Terms used here have the same meaning as in the Terms of Service, unless otherwise indicated.

Data Controller: Clipealo, a platform operated in Peru.
Contact: +51 923 783 155

We may modify this Privacy Policy occasionally. We will notify you via:

• Notice on the platform
• Email to your registered address
• Update of the effective date

Your continued use of the services after modifications constitutes acceptance of the changes.

This policy describes how we treat personal data we collect when you:

• Create a Clipealo account
• Use our clip generation services
• Browse our platform
• Communicate with us

"Personal Data" means any information that identifies or makes a natural person identifiable, including:

• Name and surname
• Email address
• Phone number
• IP address
• Device information
• Any other information that identifies you

This policy does NOT cover:

• Practices of third-party websites or services
• Streaming platforms (Twitch, YouTube, etc.)
• Third-party payment services
• External links

a) Account Information: name and surname, email, password (encrypted), username, phone number (if provided).

b) Payment Information: processed by third parties (Stripe or others). We do not store complete card data. We only retain necessary transaction records.

c) Streaming Platform Credentials: access tokens to Twitch, YouTube, Facebook Gaming, etc.; usernames; data needed for authorized integration.

d) Content You Process: stream URLs, generated clips, editing configurations, processing preferences.

e) Communications: messages to support, feedback, problem reports.

a) Technical Information: IP, browser, operating system, device type, resolution, language.

b) Usage Data: pages visited, time spent, features used, frequency, navigation patterns, errors.

c) Cookies and Similar Technologies: session cookies, preferences, analytics, unique identifiers.

d) Geolocation Data: approximate location by IP, timezone.

When you authorize integration with streaming platforms: public profile information, stream list, public statistics, metadata.

Important: We only access data you explicitly authorize via OAuth of each platform.

• Data of minors under 18 without parental consent
• Special categories of data (racial or ethnic origin, political opinions, religious beliefs, health, sexual orientation, biometrics)
• Complete credit or debit card numbers
• Passwords from third-party platforms

If we inadvertently receive such data, we delete it immediately.

• Create and manage your account
• Authenticate your identity at login
• Process your streams with our AI
• Automatically generate clips
• Store and manage your content
• Provide editing functionalities
• Facilitate clip distribution
• Process payments and subscriptions

• Account confirmations
• Processing status
• Support and responses to inquiries
• Service changes
• Security updates

• Analyze usage patterns
• Identify and fix technical errors
• Improve AI algorithms
• Develop new features
• Perform internal testing and analysis

• Detect suspicious activities
• Prevent unauthorized access
• Identify fraud attempts
• Protect platform integrity
• Comply with security obligations

• Newsletters about updates
• New features
• Educational content for streamers
• Promotional offers

You can unsubscribe at any time.

• Comply with legal and regulatory obligations
• Respond to authority requests
• Defend our legal rights
• Enforce our Terms of Service

• Consent: by creating your account and accepting this policy
• Contract execution: to provide the contracted services
• Legitimate interest: to improve service and ensure security
• Legal obligation: to comply with applicable regulations

We do not sell your personal data to third parties. We only share information in the specific circumstances described below.

We share data with providers who help us operate:

• Infrastructure and Hosting: cloud servers, storage, AI processing
• Payment Processing: Stripe or other authorized processors
• Communication: transactional email providers, notifications
• Analytics and Monitoring: Google Analytics or similar tools
• Technical Support: customer service platforms, ticketing systems

All providers are contractually obligated to protect your data, may only use it for authorized purposes, and comply with adequate security standards.

When you authorize integration, we access your data via official APIs, only in the authorized scope, and may publish clips on your behalf if you permit, subject to each platform's terms.

We may disclose data when required by court order, competent authority (Prosecution, Police), to defend legal rights, prevent fraud, or protect user or third-party security.

In case of merger, acquisition, or asset sale, your data may transfer to the acquirer. We will notify you in advance and you may delete your account before the transfer.

We may share data with additional third parties when you explicitly authorize us, configure specific integrations, or use functionalities that require it.

We may share aggregated or anonymized information that does not identify individuals for statistics or research.

Cookies are small text files stored on your device when you visit our platform. They help us recognize your browser and remember preferences.

a) Essential (always active): session, account settings, basic functionalities.

b) Functionality: language, timezone, personalized settings.

c) Analytics: platform usage, technical issues, generally via Google Analytics.

d) Marketing (require consent): campaign effectiveness, personalization, conversions.

You can control cookies from your browser settings or from the platform's cookie settings panel. Blocking essential cookies may prevent proper service functionality.

We also use web beacons, local storage, and device identifiers.

Some cookies are placed by Google Analytics, payment processors, or advertising networks. These third parties have their own privacy policies.

We retain your data while you maintain an active account, as necessary to provide services, as required by legal obligations, or while legal claims are pending.

• Account data: during validity + 30 days after deletion
• Transactions: 5 years (Peruvian tax regulations)
• Communications: 2 years from last interaction
• Technical data (logs, IP): 12 months
• Processed content: while account is active + 30 days
• Cookies: session cookies up to 24 months

We use secure deletion processes. Backups are deleted in regular cycles. We retain only anonymized data for statistics.

We may retain data longer when required by court order, necessary for legal proceedings, or regulatory audits.

We implement technical, organizational, and administrative measures to protect your data against unauthorized access, loss, destruction, improper disclosure, or unauthorized use.

Encryption: HTTPS/TLS, salted hashing for passwords, encryption of sensitive data at rest.

Access Control: 2FA when available, role-based permission management, audit logs.

Infrastructure Protection: firewalls, IDS, regular updates, continuous monitoring, backups.

Development Security: code review, security testing, vulnerability management.

• Information security policies
• Personnel training
• Confidentiality agreements
• Incident response procedures

• Choose secure and unique passwords
• Do not share your credentials
• Log out on shared devices
• Keep your software updated
• Report suspicious activity immediately

No system is 100% secure. If we detect a breach affecting your data, we will notify you under Peruvian law.

• Access: know what data we retain and how we use it
• Rectification: correct inaccurate or outdated data
• Cancellation: request deletion of your data
• Opposition: oppose processing, especially for marketing
• Information: know purposes and recipients
• Withdraw consent: at any time, without retroactive effect
• Not be subject to automated decisions: with legal or similar effects

Step 1: send your request via WhatsApp to +51 923 783 155 including the right to exercise, contact data, ID copy, and specific description.

Step 2: identity verification.

Step 3: we respond within 10 business days for information and 20 business days for access, rectification, cancellation, or opposition. Period may be extended 10 additional days.

Step 4: resolution. We do not charge for exercising your rights.

We may deny or limit rights when there is legal obligation, necessity for contracts, legal defense, or affects third-party rights. We will inform you of the reason.

You may file a complaint with the National Personal Data Protection Authority, Ministry of Justice and Human Rights.
Email: protecciondedatos@minjus.gob.pe — Web: www.minjus.gob.pe

Our services are directed to persons over 18 years old. We do not intentionally collect data from minors without parental consent.

If a minor wishes to use the services, parental or guardian authorization is required, who are responsible for use and must supervise the activity.

If we discover we have collected a minor's data without appropriate consent, we will delete it immediately, suspend the account, and notify if possible.

If you believe a minor has provided data without authorization, contact us on WhatsApp at +51 923 783 155.

Our servers may be located in the United States or other countries outside Peru.

We use providers with adequate measures, protective contractual clauses, and verify adequate protection level in the destination country, per Law No. 29733.

Services like Google Cloud, AWS, Stripe, or Google Analytics may have international servers and comply with their own security and privacy standards.

By accepting this Policy, you explicitly consent to international transfer of your data under the described conditions.

• Newsletters about service
• Product updates
• Tips for streamers
• Promotional offers
• Satisfaction surveys

We only send marketing when you have given consent or have contractual relationship with us (related services).

You can cancel subscription by clicking "unsubscribe" in any email, from your account settings, or by contacting us on WhatsApp at +51 923 783 155. You will continue to receive transactional communications and security notices.

OAuth Authorization: we connect to Twitch, YouTube, Kick, TikTok, Instagram, and Facebook via official OAuth flows of each platform. We only access the scope ("scopes") you explicitly approve and you can revoke access anytime.

Data accessed: public profile identifiers, display name, avatar, and minimum permissions needed to read streams/videos and post content you approve.

Credentials: access and refresh tokens are stored encrypted. We never request or store third-party platform passwords.

If you authorize us to publish clips on your behalf, we will only do so when you confirm each publication in the Clipealo interface, via official APIs of each platform, and you can revoke permission anytime.

Each platform has its own policies. Review the terms of Twitch, YouTube, TikTok, Instagram, and Facebook. We are not responsible for these platforms' privacy practices.

You can disconnect any integration from your Clipealo account settings or from the original platform. Upon disconnection, we stop accessing that data and delete associated tokens within 7 days.

We may modify this Policy to comply with new regulations, reflect service changes, improve data protection, or update practices.

We will notify significant changes via prominent notice on the platform, email, and update of the effective date.

You have 30 days to review changes. You may reject them by canceling your account. Continued use implies acceptance.

For corrections or clarifications, we will update the policy directly and indicate the new effective date.

Contact: +51 923 783 155 · Start your message with: "Privacy - [brief description]".

WhatsApp: +51 923 783 155. Include the right you wish to exercise in your message.

WhatsApp: +51 923 783 155. For security incidents, identify the issue in your message.

First instance via WhatsApp: +51 923 783 155. Competent authority: National Personal Data Protection Authority — protecciondedatos@minjus.gob.pe

• General inquiries: 5 business days
• Rights requests: 10-20 business days
• Security incidents: immediate

This Policy is written in Spanish. It is the only valid version.

If any provision is invalid, the others remain in full force and effect.

Governed by the laws of the Republic of Peru: Law No. 29733, D.S. No. 003-2013-JUS, and Peruvian Civil Code.

Courts of Lima, Peru. Possibility of prior extrajudicial conciliation. Access to the National Personal Data Protection Authority.

This Policy supplements our Terms and Conditions. In case of conflict on privacy matters, this policy prevails.