Privacy Policy

The data controller is Emile Imbert, entrepreneur individuel (micro-entreprise), SIREN 106 083 918, 40 rue Boissonade, 75014 Paris, France("Bluclip", "we"). Contact for any privacy question or request: contact@bluclip.fr.

Information you give us. Your name, email address and phone number when you sign up, request a resource, book a call or apply to a campaign; payout details (for example the account or payment address where you want to be paid) and, where required for payouts, tax or identity information; the messages you send us.

Website usage data. Pages viewed, video progress, form answers, device and browser information and approximate location, collected with cookies and similar technologies (see section 8).

Data from connected social accounts.Only if you choose to connect an account, and only with the permissions you approve on the platform's own consent screen. See section 3.

Clippers connect their accounts through each platform's official login (OAuth). We receive an access token that lets us read, never write. We never receive your password, we never post, comment, message, follow or change anything on your account, and we do not access your private messages, drafts or private videos.

What we access, per platform:

• TikTok (TikTok Login Kit and Display API, scopes user.info.basic, user.info.profile, video.list): your open ID, display name, username, avatar, profile link and verified status; the list of your public videos with their ID, link, title, description, cover image, publish date and duration; and each video's view, like, comment and share counts.
• Instagram (Instagram API with Instagram Login, permissions instagram_business_basic, instagram_business_manage_insights, professional accounts only): your Instagram user ID, username, name, account type, profile picture and number of posts; the list of your media with their ID, permalink, caption, media type, thumbnail or image link, timestamp, like count, comment count and owning account; and, for the posts and reels you submit to a campaign, their insights (views, reach, likes, comments, shares, saves).
• YouTube (YouTube Data API v3 via Google sign-in, scope https://www.googleapis.com/auth/youtube.readonly): your channel ID, title, handle, thumbnail and public channel statistics (subscriber, view and video counts); the list of your most recent uploads, read from your channel's uploads playlist, with their ID, title, thumbnail, publish date, duration and view, like and comment counts; and, for the videos you submit, the same data plus the ID of the channel that published them, used to confirm the channel is yours.

A clip you submit counts as yours only if it was published from the connected account: TikTok returns only your own videos, an Instagram link must match the permalink of one of your media (and its owning account must be yours), and a YouTube video must belong to your connected channel. The list of clips you submit is saved in your browser (local storage) so you can follow their views.

What we use it for, and nothing else:

• Verifying that a clip you submit to a campaign was published from your own account.
• Tracking the performance of the clips you submit, and showing it to you in your dashboard.
• Calculating your payouts and detecting invalid or artificial views.
• Reporting the clips published for a campaign, and their statistics, to the client who ordered that campaign.

We do not use data from connected accounts for advertising, we do not sell it, we do not build profiles of your followers or viewers, and we do not use it to train artificial intelligence models. Videos you did not submit to a campaign are only used to match the clips you submit and are not shared with anyone.

YouTube API Services.Bluclip uses YouTube API Services. By using Bluclip's YouTube features you agree to the YouTube Terms of Service (www.youtube.com/t/terms). Google's collection and use of data is described in the Google Privacy Policy at policies.google.com/privacy. You can revoke Bluclip's access to your Google account at any time from your Bluclip connections page (www.bluclip.fr/agency/connect) or from the Google security settings page at security.google.com/settings/security/permissions. Bluclip's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok and Instagram. You can disconnect an account from www.bluclip.fr/agency/connect, or revoke Bluclip's access in TikTok (Settings and privacy › Security › Apps and services) and Instagram (Settings › Apps and websites). Disconnecting TikTok from Bluclip also revokes our access on TikTok. Instagram does not let apps revoke their own access, so after disconnecting Instagram from Bluclip, also remove Bluclip in Instagram's settings; Instagram then notifies us and we delete any remaining Instagram data. TikTok and Meta process your data under their own privacy policies (www.tiktok.com/legal/privacy-policy, privacycenter.instagram.com/policy).

• To provide the service you asked for (account, campaigns, tracking, payouts): performance of our contract with you.
• To connect your social accounts: your consent, given on the platform's consent screen, which you can withdraw at any time by disconnecting.
• To prevent fraud and secure the service, and to send you information about Bluclip by email: our legitimate interests. You can unsubscribe from emails in one click.
• To keep accounting and tax records: our legal obligations.
• Non-essential cookies and advertising measurement: your consent where the law requires it.

• Clients see the clips submitted to their campaign, the public handle that published them and those clips' statistics. They do not get your contact or payout details.
• Service providers acting on our instructions only: Vercel (hosting), Supabase (database), Resend (email), Cal.com (scheduling), PostHog and Meta (audience measurement and advertising on the website), and the payment providers we use to send payouts.
• Authorities, when the law requires it.

Some providers are located outside the European Union, notably in the United States. Transfers rely on the European Commission's adequacy decision (EU-US Data Privacy Framework) or its standard contractual clauses. We never sell personal data.

• Connected account data: while the account stays connected. Statistics are refreshed regularly while a campaign is running; YouTube data is refreshed or deleted at least every 30 days.
• When you disconnect an account: we delete its access tokens immediately, revoke Bluclip's access on the platform where it allows it (TikTok and Google), and delete the data obtained from that platform within 7 days (within 30 days if you revoke from the platform's own settings rather than from Bluclip).
• When you delete your Bluclip account: all your personal data is deleted within 30 days.
• Exception: payout records (amount, date, campaign and the clip identifiers and view count they were based on) are kept for 10 years as French accounting law requires, then deleted.
• Prospect and website data: 3 years after your last contact with us.

Access tokens from connected accounts are encrypted on our servers (AES-256-GCM) and kept in a secure, HTTP-only cookie, one per connected account, that scripts on the page cannot read. Only Bluclip's servers hold the decryption key, so tokens are never readable in the browser. Access to personal data is limited to the people who need it to run Bluclip. All traffic to bluclip.fr uses HTTPS.

The website uses cookies and similar technologies for login sessions and connected accounts (necessary), and for audience measurement and advertising (PostHog, Meta Pixel). You can block them at any time in your browser settings or with a dedicated extension. Blocking necessary cookies may prevent you from logging in.

You have the right to access, correct, delete, restrict, object to the processing of, and receive a portable copy of your personal data, and to withdraw your consent at any time. To exercise these rights, see Data Deletion or email contact@bluclip.fr. We answer within 30 days. You can also complain to the French data protection authority, the CNIL (www.cnil.fr), or to your local authority.

Bluclip is not intended for anyone under 18. We do not knowingly collect data from minors and delete it if we learn we have.

We will post any update on this page with a new effective date and notify account holders by email of material changes.