2.1 Information You Provide Directly

Account Registration:

• Full name
• Email address
• Phone number
• Password (encrypted and hashed)
• Username
• Date of birth (to verify age requirement)

Profile Information (For Content Creators):

• Profile photo
• Biography/description
• Category/niche (e.g., musician, athlete, influencer)
• Social media links
• Professional credentials or achievements
• Pricing for services (video messages, calls)
• Availability schedule

Payment Information:

• Credit/debit card details (processed and stored securely by third-party payment processors like Stripe or PayPal - we do not store full card numbers)
• Bank account information (for payouts to Content Creators)
• Billing address
• Transaction history

Communications:

• Messages you send to customer support
• Feedback, reviews, and ratings you provide
• Survey responses

User-Generated Content:

• Video messages created by Content Creators
• Profile photos and videos
• Public posts, updates, or announcements
• Reviews and comments

2.2 Information Collected Automatically

Device and Usage Information:

• Device type, model, and operating system
• IP address and general location (city/region based on IP)
• Browser type and version
• Pages visited, features used, and time spent on the Platform
• Clicks, interactions, and navigation patterns
• Referral source (how you found ClapCall)
• Date and time of access

Cookies and Tracking Technologies:

• Session cookies (to keep you logged in)
• Preference cookies (to remember your settings)
• Analytics cookies (to understand how you use the Platform)
• Advertising cookies (for targeted ads, if applicable)

See Section 8 for more details on cookies.

Call and Message Metadata (Not Content):

• Call duration, start time, and end time
• Participants in the call or message
• Delivery status (sent, delivered, read)
• Timestamps

2.3 Information from Third Parties

Social Media Login:

• If you sign up using Google, Facebook, or Apple, we receive basic profile information (name, email, profile picture) from those platforms

Payment Processors:

• Confirmation of successful transactions
• Fraud prevention data
• Chargeback or dispute information

Public Information:

• Information you have made publicly available on other platforms (e.g., social media profiles linked to your ClapCall account)

2.4 Sensitive Information

We do not intentionally collect sensitive personal information such as:

• Social Security numbers or national ID numbers
• Health or medical information
• Religious or political beliefs
• Biometric data

However, you may voluntarily share such information in your profile or communications. We are not responsible for sensitive information you choose to disclose publicly or privately on the Platform.

3.1 To Provide and Improve the Platform

• Create and manage your account
• Facilitate video messages, voice calls, and video calls
• Process payments, subscriptions, and payouts
• Display Content Creator profiles and services
• Provide customer support and respond to inquiries
• Improve Platform features, functionality, and user experience
• Develop new services and features

3.2 To Personalize Your Experience

• Recommend Content Creators based on your interests
• Customize content and features to match your preferences
• Remember your settings and preferences
• Show relevant search results

3.3 For Security and Fraud Prevention

• Verify your identity
• Detect and prevent fraud, abuse, and illegal activity
• Protect the security and integrity of the Platform
• Monitor for Terms of Service violations
• Investigate suspicious activity or reports

3.4 For Communication

• Send transactional emails (order confirmations, receipts, account updates)
• Send notifications about Platform activity (new messages, call requests)
• Provide customer support
• Send marketing emails (you can opt out at any time)
• Notify you of changes to our Terms of Service or Privacy Policy

3.5 For Analytics and Research

• Analyze how users interact with the Platform
• Track Platform performance and identify issues
• Understand user behavior and trends
• Conduct market research and surveys
• Generate aggregated, anonymized statistics

3.6 For Legal and Compliance Purposes

• Comply with legal obligations (e.g., tax reporting, law enforcement requests)
• Enforce our Terms of Service and policies
• Resolve disputes and investigate complaints
• Protect our rights, property, and safety, and the rights of our users

3.7 With Your Consent

We may use your information for other purposes with your explicit consent, such as:

• Featuring your profile in marketing materials (for Content Creators)
• Participating in promotional campaigns
• Beta testing new features

4.1 With Other Users

Public Profile Information (Content Creators):

• Your name, profile photo, bio, category, social media links, and pricing are visible to all users
• Reviews and ratings left by Fans are publicly visible

Transaction Details:

• When you purchase a service, the Content Creator sees your name and order details
• When a Fan orders a video message, the Creator sees the recipient's name and instructions

Call and Message Participants:

• Your name and profile are visible to the other party during calls and messages

4.2 With Service Providers

We share information with third-party service providers who help us operate the Platform, including:

• Payment Processors: Stripe, PayPal, or other payment gateways (they process transactions and may store payment information)
• Cloud Hosting: AWS, Google Cloud, or other hosting providers (they store data on our behalf)
• Analytics Providers: Google Analytics, Mixpanel (they help us understand user behavior)
• Customer Support Tools: Zendesk, Intercom (they help us provide support)
• Email and SMS Services: SendGrid, Twilio (they send transactional and marketing communications)
• Security and Fraud Prevention: Services that help detect and prevent fraud

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

4.3 For Legal Reasons

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of ClapCall, our users, or the public
• Investigate fraud, security issues, or violations of our policies
• Prevent illegal activity or harm

4.4 In Business Transfers

If ClapCall is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

4.5 Aggregated or Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you. For example, we may publish statistics about Platform usage or trends.

4.6 With Your Consent

We may share your information for other purposes with your explicit consent.

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
• End-to-End Encryption: Messages and calls are end-to-end encrypted (see Section 15)
• Password Protection: Passwords are hashed and encrypted; we cannot see your plain-text password
• Secure Servers: Data is stored on secure, access-controlled servers
• Firewalls and Intrusion Detection: We use firewalls and monitoring systems to detect and prevent unauthorized access

5.2 Organizational Safeguards

• Access Controls: Only authorized employees and contractors can access user data, and only for legitimate business purposes
• Employee Training: Our team is trained on data privacy and security best practices
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Incident Response Plan: We have procedures in place to respond to data breaches or security incidents

5.3 Your Responsibility

While we implement strong security measures, you also play a role in protecting your information:

• Use a strong, unique password
• Enable two-factor authentication (if available)
• Do not share your login credentials with others
• Log out of your account on shared or public devices
• Report any suspicious activity or unauthorized access immediately

5.4 No Guarantee

Despite our efforts, no system is 100% secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed due to a breach of our security measures. By using the Platform, you acknowledge and accept this risk.

5.5 Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify you promptly via email and/or a notice on the Platform, and we will take steps to mitigate the impact.

6.1 How Long We Keep Your Information

We retain your information for as long as necessary to:

• Provide the Platform and Services
• Comply with legal obligations (e.g., tax records, payment disputes)
• Resolve disputes and enforce our agreements
• Prevent fraud and abuse

6.2 Specific Retention Periods

• Account Information: Retained while your account is active and for up to 2 years after account deletion (for legal/dispute resolution purposes)
• Transaction Records: Retained for 7 years (for tax and financial compliance)
• Video Messages: Stored indefinitely for Fans who purchased them; Creators can delete messages from their own accounts but Fans retain access
• Call Metadata: Retained for up to 1 year for billing and support purposes
• Support Tickets: Retained for 3 years
• Analytics Data: Aggregated, anonymized data may be retained indefinitely

6.3 Deletion

You may request deletion of your account and personal information at any time (see Section 7.3). However, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

6.4 Inactive Accounts

If your account has been inactive for 2 consecutive years, we may delete it and associated data, with prior notice to your registered email.

7.1 Access and Portability

• You can access and view your personal information in your Account Settings
• You can request a copy of your data in a portable format (e.g., CSV, JSON)
• To request a data export, email support@clapcall.com with "Data Export Request" in the subject line

7.2 Correction and Updates

• You can update your profile, email, phone number, and other information in Account Settings
• If you cannot update information yourself, contact support@clapcall.com

7.3 Deletion

• You can delete your account at any time by going to Account Settings → "Delete Account"
• Alternatively, email support@clapcall.com with "Account Deletion Request" in the subject line
• Upon deletion, we will remove your personal information, subject to legal retention requirements
• Note: Video messages purchased by Fans will remain accessible to them even after your account is deleted

7.4 Opt-Out of Marketing Communications

• You can unsubscribe from marketing emails by clicking the "Unsubscribe" link at the bottom of any email
• You can manage email preferences in Account Settings
• Note: You will still receive transactional emails (e.g., order confirmations, account updates)

7.5 Cookie Management

• You can manage cookies through your browser settings (see Section 8)
• Note: Disabling cookies may affect Platform functionality

7.6 Do Not Track

Some browsers have a "Do Not Track" (DNT) feature. We do not currently respond to DNT signals, as there is no industry standard for how to interpret them.

7.7 Additional Rights for Specific Regions

Users in certain regions (e.g., California, EEA) have additional rights. See Section 12 (California Privacy Rights) and Section 13 (GDPR Rights).

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites remember your preferences, improve performance, and provide analytics.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function (e.g., keeping you logged in). These cannot be disabled.
• Preference Cookies: Remember your settings and preferences (e.g., language, theme).
• Analytics Cookies: Help us understand how users interact with the Platform (e.g., Google Analytics).
• Advertising Cookies: Used to deliver targeted ads based on your interests (if applicable).

8.3 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings → Privacy and Security → Cookies and other site data
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Edge: Settings → Privacy, search, and services → Cookies and site permissions

Note: Disabling cookies may affect your ability to use certain features of the Platform.

8.4 Third-Party Cookies

We may use third-party services (e.g., Google Analytics) that place cookies on your device. These third parties have their own privacy policies.

9.1 Third-Party Services

ClapCall integrates with third-party services, including:

• Payment Processors: Stripe, PayPal
• Analytics: Google Analytics, Mixpanel
• Social Media: Facebook, Instagram, Twitter (for login and sharing)
• Cloud Storage: AWS, Google Cloud

These services have their own privacy policies. We encourage you to review them.

9.2 Links to External Sites

The Platform may contain links to external websites (e.g., Content Creator social media profiles). ClapCall is not responsible for the privacy practices or content of these sites. Use them at your own risk.

9.3 Social Media Plugins

If you interact with social media plugins (e.g., "Share on Facebook"), the social media platform may collect information about you. Refer to their privacy policies for details.

10.1 Global Platform

ClapCall is accessible worldwide. Your information may be transferred to, stored, and processed in countries other than your own, including Nepal (where ClapCall is based) and other countries where our service providers operate.

10.2 Data Protection Standards

When we transfer data internationally, we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses (SCCs)
• Data processing agreements with service providers
• Compliance with applicable data protection laws (e.g., GDPR, CCPA)

10.3 Your Consent

By using ClapCall, you consent to the transfer and processing of your information in countries outside your own.

11.1 Age Requirement

ClapCall is not intended for use by anyone under the age of 18. You must be at least 18 years old to create an account and use the Platform.

11.2 No Collection from Minors

We do not knowingly collect personal information from individuals under 18. If we become aware that a user is under 18, we will promptly delete their account and information.

11.3 Parental Notice

If you are a parent or guardian and believe your child has provided personal information to ClapCall, please contact us immediately at support@clapcall.com with "Minor Account" in the subject line.

12.1 Right to Know

You have the right to request:

• What personal information we collect about you
• The categories of sources from which we collect your information
• The purposes for collecting, using, or selling your information
• The categories of third parties with whom we share your information

12.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).

12.3 Right to Opt-Out of Sale

ClapCall does not sell your personal information. However, if we ever do, you will have the right to opt out.

12.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights (e.g., by denying service, charging different prices).

12.5 How to Exercise Your Rights

To exercise your California privacy rights:

• Email support@clapcall.com with "California Privacy Rights Request" in the subject line
• Include your full name, email, and the specific right you wish to exercise
• We will verify your identity and respond within 45 days

12.6 Authorized Agent

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization.

12.7 Categories of Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, phone number, IP address)
• Commercial information (transaction history, purchase records)
• Internet or network activity (browsing history, interactions with the Platform)
• Geolocation data (general location based on IP)
• Audio, video, or visual information (profile photos, video messages)
• Professional or employment-related information (for Content Creators)
• Inferences (preferences, interests)

13.1 Legal Basis for Processing

We process your personal information based on:

• Contract: To provide the Services you requested (e.g., video messages, calls)
• Legitimate Interests: To improve the Platform, prevent fraud, and ensure security
• Consent: For marketing communications and certain optional features (you can withdraw consent at any time)
• Legal Obligation: To comply with laws and regulations

13.2 Your GDPR Rights

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain types of processing (e.g., marketing)
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

13.3 Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer (if applicable) at support@clapcall.com with "GDPR Request" in the subject line.

13.4 Data Transfers Outside the EEA

When we transfer your data outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) to ensure your data is protected.

13.5 How to Exercise Your Rights

To exercise your GDPR rights, email support@clapcall.com with "GDPR Request" in the subject line and specify the right you wish to exercise. We will respond within 30 days.

14.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make changes, we will:

• Update the "Effective Date" at the top of this page
• Post the updated Privacy Policy on the Platform
• Notify you via email or Platform notification (for material changes)

14.2 Material Changes

For significant changes (e.g., changes to how we use your information, new data collection practices), we will provide at least 30 days' notice before the changes take effect.

14.3 Your Acceptance

Your continued use of the Platform after the updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree with the changes, you must stop using the Platform and delete your account.

14.4 Version History

Previous versions of this Privacy Policy may be available upon request by emailing support@clapcall.com.

15.1 What Is Encrypted

The following communications are end-to-end encrypted:

• Text Messages: All one-on-one and group messages between subscribers and creators
• Voice Calls: All audio content during live voice calls
• Video Calls: All audio and video content during live video calls

This means that the actual words, audio, and video are scrambled into unreadable code that only you and the other party can decrypt.

15.2 How ClapCall Works with Encryption

1. Subscriber requests a message/call: The request (who, when, price) is visible to ClapCall for billing and platform operations
2. Creator accepts and connects: The connection is established through our servers but content is encrypted
3. Subscribers can message creators (if subscribed): All messages are end-to-end encrypted - ClapCall cannot read content
4. Creators can set up auto-reply messages for common questions: Message timestamps and delivery status are visible (metadata)

15.3 Audio/Video Calls

• Creators set their per-minute call rate and availability status
• Subscribers request a call (deducted from wallet per minute)
• Creators choose to accept or decline call requests
• All call content is end-to-end encrypted - ClapCall cannot listen
• Call duration and timestamps recorded for billing (metadata only)
• No call recordings are stored by ClapCall

15.4 Privacy During Calls/Messages

• Whatever information creators and subscribers share during encrypted calls or messages is completely private
• ClapCall has no access to conversation content
• Only participants can see or hear what is shared

15.5 What ClapCall Knows vs. Doesn't Know

This architecture ensures your private conversations remain private while allowing us to operate the platform, process payments, and provide support.

General Inquiries:

• Email: support@clapcall.com
• Website: https://clapcall.com

Privacy-Specific Requests:

• Subject Line: "Privacy Request - [Your Request Type]"
• Include your full name, email, and specific question or request

Legal Entity:

• Company: Quickly Multipurpose Pvt. Ltd.
• Registered Address: Kathmandu, Nepal

Response Time:

• General inquiries: 5 business days
• Privacy rights requests: 30 days (may extend to 45-60 days for complex requests)
• Urgent security matters: 24-48 hours

GDPR/EEA Inquiries:

• Email support@clapcall.com with "GDPR Request" in subject line

California Privacy Requests:

• Email support@clapcall.com with "California Privacy Rights Request" in subject line

Data Breach or Security Concerns:

• Email support@clapcall.com with "URGENT - Security Issue" in subject line
• We prioritize security reports and respond within 24 hours