Privacy Policy

Last Updated: January 26, 2026

1. Introduction

TE tech, operating Cluvi ("we", "our", "us", "Company") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you visit our website cluvi.io (the "Site") and use our services (the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Services, and information from third-party sources. The types of information we collect depend on how you use our Services.

2.1. Account and Profile Information

When you create an account, we collect:

  • Name: Your full name as provided during registration
  • Email Address: Used for account verification, communication, and password resets
  • Phone Number: Optional, used for account verification via OTP (One-Time Password)
  • Role: Whether you are a "Creator" (advertiser), "Clipper" (publisher), or "Admin"
  • Profile Information: Optional fields including bio, avatar/profile picture, location, website, and social media links (YouTube, Instagram)
  • Account Status: Verification status, suspension status, and related metadata

2.2. Authentication and Security Information

  • Password: Hashed and encrypted passwords (for admin accounts only; regular users use OTP authentication)
  • OTP Codes: Temporary one-time passwords for email verification and password resets (stored temporarily and automatically deleted after expiration)
  • Session Tokens: JWT access tokens and refresh tokens for maintaining authenticated sessions
  • IP Addresses: Collected for security, fraud prevention, and rate limiting purposes
  • User Agent: Browser and device information for security tracking

2.3. Financial Information

For Creators (Advertisers):

  • Payment Information: We do NOT store credit card numbers, debit card numbers, or bank account details. All payments are processed securely through Razorpay, a PCI-DSS compliant payment gateway
  • Payment Records: We store payment transaction IDs, order IDs, payment amounts, payment status, and timestamps for campaign funding
  • Refund Information: Refund transaction IDs and status when campaigns are cancelled

For Clippers (Publishers):

  • Bank Account Details: Account number, IFSC code, bank name, and account holder name (required for payouts as per Indian banking regulations)
  • UPI ID: Optional UPI identifier for faster payouts
  • PAN (Permanent Account Number): Required for tax compliance and TDS (Tax Deducted at Source) filing as mandated by Indian tax laws
  • Wallet Balance: Your earnings balance and transaction history
  • Payout Requests: Amount requested, beneficiary details, payout status, and transaction references

2.4. YouTube Integration Data

When you connect your YouTube account via OAuth for video submissions, we collect:

  • OAuth Tokens: Access tokens and refresh tokens to verify video ownership and fetch video metadata
  • YouTube Channel Information: Channel name, channel ID, and associated email address
  • Video Metadata: Video title, description, video ID, thumbnail URL, duration, publication date, view count, like count, comment count, and whether the video is a YouTube Short
  • Video URLs: Links to submitted videos for tracking and verification purposes

Note: We only access videos that you explicitly submit to campaigns. We do not access your entire YouTube channel or videos you have not submitted.

2.5. Campaign and Submission Data

  • Campaign Information: Campaign title, description, images, assets, target platforms, budget, payout rates, requirements, deadlines, and social media links
  • Clip Submissions: Submitted video links, submission notes, approval/rejection status, submission timestamps, and associated campaign information
  • Tracking Data: View counts, baseline views, current views, credited views, earnings calculations, tracking start/end dates, and polling timestamps
  • Performance Metrics: Total views generated, total payouts made, budget spent, and campaign statistics

2.6. Usage and Analytics Data

  • Device Information: Browser type, operating system, device type, and screen resolution
  • Usage Patterns: Pages visited, features used, time spent on the platform, and interaction patterns
  • Log Data: Server logs, error logs, and system performance metrics
  • Referral Sources: How you arrived at our platform (direct, search engine, referral link, etc.)

2.7. Communication Data

  • Support Communications: Emails, messages, and support tickets you send to us
  • Marketing Communications: Your preferences for receiving marketing emails (you can opt-out at any time)
  • Notifications: Email notifications for account activities, campaign updates, payout confirmations, and system alerts

2.8. Administrative and Compliance Data

  • Activity Logs: Records of administrative actions, user suspensions, wallet freezes, and system changes (for security and audit purposes)
  • Transaction Ledger: Immutable, hash-chained transaction records for financial audit trails
  • Compliance Records: Tax-related information, KYC documents (if required), and regulatory compliance data

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Provision: To create and manage your account, authenticate your identity, process your requests, and provide access to our platform features
  • Payment Processing: To process campaign payments (for Creators) and payouts (for Clippers), verify transactions, handle refunds, and maintain financial records
  • Campaign Management: To facilitate campaign creation, submission management, approval workflows, and performance tracking
  • Video Verification: To verify YouTube video ownership through OAuth, fetch video metadata, and track view counts
  • Earnings Calculation: To calculate and track your earnings based on qualified views, maintain wallet balances, and process payout requests
  • Fraud Prevention: To detect and prevent fraudulent activity, bot traffic, artificial view inflation, unauthorized access, and other security threats
  • Communication: To send you account-related notifications, campaign updates, payment confirmations, security alerts, and respond to your support requests
  • Legal Compliance: To comply with applicable laws, regulations, tax obligations (GST, TDS filing), banking regulations, and respond to legal requests
  • Platform Improvement: To analyze usage patterns, identify technical issues, improve our Services, develop new features, and enhance user experience
  • Account Security: To monitor for suspicious activities, enforce account suspensions, manage access controls, and protect against unauthorized access
  • Customer Support: To provide technical support, resolve disputes, handle refund requests, and assist with account-related inquiries
  • Marketing (with consent): To send promotional communications about new features, campaigns, and platform updates (you can opt-out at any time)

4. Data Storage and Retention

Storage Location: Your data is stored on secure cloud servers. We use industry-standard security measures to protect your information.

Retention Period: We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account Data: Retained while your account is active and for a reasonable period after account closure (typically 7 years for tax and legal compliance)
  • Financial Records: Retained for 7 years as required by Indian tax laws and banking regulations
  • Transaction Records: Retained permanently as part of our immutable ledger system for audit and compliance purposes
  • OTP Codes: Automatically deleted after expiration (typically within 15 minutes to 24 hours)
  • Activity Logs: Retained for security and audit purposes (typically 2-5 years)
  • Campaign Data: Retained for the duration of the campaign and for a period after completion for historical records and dispute resolution

Data Deletion: You may request deletion of your account and personal data by contacting us at support@cluvi.io. However, we may retain certain information as required by law or for legitimate business purposes (e.g., financial records, transaction history).

5. Third-Party Services and Data Sharing

We do not sell your personal data. We may share your information with the following third-party service providers and in the following circumstances:

5.1. Payment Processing (Razorpay)

We use Razorpay, a PCI-DSS compliant payment gateway, to process payments and payouts:

  • For Creators: Payment information (card details, UPI, net banking) is processed directly by Razorpay. We do not store or have access to your full payment card numbers
  • For Clippers: Bank account details, UPI IDs, and beneficiary information are shared with Razorpay to process payouts
  • Data Shared: Payment amounts, transaction references, beneficiary details, and payout status
  • Razorpay's Privacy Policy: https://razorpay.com/privacy/

5.2. YouTube/Google OAuth

We use Google OAuth 2.0 to verify YouTube video ownership:

  • OAuth Flow: When you connect your YouTube account, you authorize us to access your YouTube channel information and verify video ownership
  • Data Accessed: We only access videos that you explicitly submit to campaigns. We do not access your entire YouTube channel or unpublished videos
  • Google's Privacy Policy: https://policies.google.com/privacy
  • YouTube API Services: Our use of YouTube API Services is subject to Google's Privacy Policy. You can revoke access at any time through your Google Account settings

5.3. Cloud Hosting and Infrastructure

We use cloud hosting providers to store and process your data:

  • Your data is stored on secure servers with encryption at rest
  • Hosting providers are contractually obligated to protect your data and comply with data protection regulations

5.4. Legal Requirements

We may disclose your information if required by law, court order, government regulation, or to:

  • Comply with legal processes or respond to government requests
  • Enforce our Terms of Service and other agreements
  • Protect the rights, property, or safety of Cluvi, our users, or others
  • Prevent fraud, security threats, or illegal activities
  • Comply with tax authorities, banking regulators, or other regulatory bodies

5.5. Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform:

  • Authentication Cookies: Essential cookies that maintain your logged-in session and authenticate your identity
  • Security Cookies: Used for fraud prevention, rate limiting, and protecting against unauthorized access
  • Performance Cookies: Help us understand how you interact with our platform, identify technical issues, and improve performance
  • Functional Cookies: Remember your preferences, language settings, and other choices you make

Cookie Management: You can control cookies through your browser settings. However, disabling essential cookies may prevent certain features from working correctly, including authentication, campaign tracking, and earnings calculation.

Do Not Track: Our platform does not currently respond to "Do Not Track" signals from browsers. We continue to monitor developments in this area.

7. Data Security

We implement industry-standard security measures to protect your personal and financial information:

  • Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS (HTTPS)
  • Password Security: Passwords are hashed using bcrypt before storage. We never store passwords in plain text
  • Access Controls: Strict access controls limit who can access your data. Only authorized personnel with a legitimate business need can access your information
  • Secure Payment Processing: Payment information is processed through PCI-DSS compliant payment gateways (Razorpay). We do not store full payment card numbers
  • Immutable Ledger: Financial transactions are recorded in a hash-chained ledger system that prevents tampering and ensures data integrity
  • Regular Security Audits: We conduct regular security assessments and vulnerability testing
  • Rate Limiting: API endpoints are protected with rate limiting to prevent abuse and brute-force attacks
  • Monitoring: We monitor for suspicious activities, unauthorized access attempts, and security threats

Important: While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

Your Responsibility: You are responsible for maintaining the confidentiality of your account credentials. Do not share your password or OTP codes with anyone. If you suspect unauthorized access to your account, please contact us immediately at support@cluvi.io.

8. Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: You can request access to the personal information we hold about you by contacting us at support@cluvi.io
  • Correction: You can update your profile information, email address, phone number, and other account details through your account settings or by contacting us
  • Deletion: You can request deletion of your account and personal data. However, we may retain certain information as required by law (e.g., financial records for tax compliance)
  • Data Portability: You can request a copy of your data in a machine-readable format
  • Withdraw Consent: You can withdraw your consent for certain data processing activities (e.g., marketing communications) at any time
  • Opt-Out of Marketing: You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your preferences in your account settings
  • Revoke OAuth Access: You can revoke YouTube/Google OAuth access at any time through your Google Account settings
  • Account Closure: You can request to close your account at any time. We will process your request and delete or anonymize your data, subject to legal retention requirements

Response Time: We will respond to your requests within 30 days, or as required by applicable law. We may require verification of your identity before processing certain requests.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@cluvi.io, and we will delete such information from our systems.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Services, you consent to the transfer of your information to these countries.

We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy, regardless of where it is processed or stored.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the updated Privacy Policy on this page with a new "Last Updated" date
  • Sending an email notification to the email address associated with your account (for significant changes)
  • Displaying a prominent notice on our platform

Your continued use of our Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically.

12. Grievance Redressal (Mandatory for Indian IT Act)

In accordance with the Information Technology Act, 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, if you have any concerns, complaints, or grievances regarding your personal data, content on our platform, or any privacy-related matter, please contact our Grievance Officer:

Company Name: TE tech

Grievance Officer: TE tech

Email: support@cluvi.io

Physical Address: Delhi, India

Response Time: We will acknowledge your grievance within 24 hours and resolve it within 15 days, as required by Indian law.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Company: TE tech

Email: support@cluvi.io

Website: cluvi.io

Physical Address: Delhi, India

This Privacy Policy is effective as of the "Last Updated" date shown above. By using Cluvi's Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.