Privacy Policy

Klyp ("Klyp", "we", "us") operates a platform that connects brands with content creators. This policy explains what personal data we collect, why, and what you can do about it.

Questions about this policy, or about your data: privacy@withklyp.com

1. Data we collect

When you create an account

• Name, email address, phone number
• Username and password (stored hashed)
• For creators: profile photo, bio, social media handles and links, content niche, follower and audience data
• For brands: business name, website, store details

When you connect a third-party account

• Meta (Facebook / Instagram): your name, profile picture, email address, account ID, and — where you grant it — page and ad account information and advertising performance data. We request the minimum permissions needed and only use them to run and measure your campaigns.
• TikTok, YouTube and other platforms: account ID, profile information and content performance data, where you connect them.
• Shopify: when a brand connects a Shopify store, we store encrypted offline access tokens, selected product snapshots, unique discount codes issued to creators, and order data (order id, financial status, currency, discount code, and the discounted line item subtotal) used to attribute commission to a campaign. We do not store Shopify customers' names, email addresses or phone numbers.

When you use the platform

• Content you upload (video, images, captions) and messages you exchange with other users or with support
• Payment and payout details, tax identifiers, and transaction history
• Device and technical data: IP address, browser, operating system, device identifiers
• Usage data: pages viewed, features used, session activity
• Attribution data: campaign links, discount code redemptions, and anonymous identifiers used to connect a visit or order to a campaign

We do not ask for, and you should not upload, sensitive personal data such as health, religious or biometric information.

2. Why we use it

• To create and run your account
• To operate campaigns: matching creators and brands, handling submissions, approvals and revisions
• To process payments to brands and payouts to creators
• To measure campaign performance and attribute sales
• To verify that content is being used within the agreed licence
• To prevent fraud, abuse and security incidents
• To provide support and send service messages
• To improve the platform
• To meet our legal, tax and accounting obligations

We rely on: performing our contract with you; our legitimate interests in operating a safe and accurate marketplace; your consent, where we ask for it (including for non-essential cookies and marketing); and compliance with legal obligations. You can withdraw consent at any time.

3. Who we share it with

• Other users of the platform. Creator profiles and submitted content are visible to brands running the relevant campaign. Brand and campaign information is visible to creators who apply or are invited.
• Service providers who process data on our instructions under written contracts: our hosting provider, our payment provider, our email provider, our product analytics provider (PostHog, hosted in the EU), and our support tools.
• Brands, who receive attribution and conversion data for their own campaigns — order values and traffic sources. This does not include the names, contact details or payment details of their store visitors.
• Authorities and advisers, where required by law or to establish or defend legal claims.
• A buyer or investor, if we are ever involved in a sale, merger or financing, subject to confidentiality.

We do not sell personal data.

4. International transfers

Our servers and some of our service providers are located outside Egypt. Where we transfer personal data internationally we use appropriate contractual safeguards and comply with the cross-border transfer requirements that apply to us. You can ask us for details at privacy@withklyp.com.

5. Cookies

We use:

• Essential cookies — to keep you logged in and to keep the platform secure. These do not require consent.
• Analytics cookies — to understand how the platform is used. We use PostHog, hosted in the EU and reached through our own domain. If you accept, we record the pages you view, clicks on key buttons, your device type and language, and — once you are logged in — an internal user ID and whether you are a creator or a brand. We never put your name, email address, phone number or social media handles in analytics. With your consent we may also record anonymised session replays: all typed text is masked, and screens for signing in, onboarding, payments, payouts and verification are never recorded. We respect your browser's Do Not Track setting.
• Attribution cookies and identifiers — first-party cookies set through our attribution pixel on brand partner websites, so a visit or order can be linked back to a campaign.

We ask for your consent before setting anything that is not essential, and load no analytics until you accept. You can change or withdraw your choices at any time through the cookie settings link in our footer or in your account settings.

Separately, our servers record product events — for example that a campaign was funded or a payout was requested — against an internal user ID, not your name or email. These do not use cookies. We rely on our legitimate interests in running and improving the platform, and you can object at privacy@withklyp.com.

6. How long we keep it

• Account and profile data: for as long as your account is open, then up to 12 months
• Campaign records, briefs and approvals: 7 years
• Payment and invoicing records: 7 years, to meet tax record-keeping requirements
• Attribution and conversion data: 24 months
• Support messages: 3 years
• Analytics data: up to 14 months

When a period ends we delete the data or make it permanently non-identifiable. Where you ask us to delete your data sooner, see section 8.

7. Security

We protect personal data with:

• encryption in transit (TLS) and encryption at rest for our databases and file storage
• hashed passwords
• role-based access control and multi-factor authentication on administrative accounts
• access logging and monitoring
• written data protection terms with every service provider

No system is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to affect you, we will notify you and the relevant regulator as required.

8. Your rights, and how to delete your data

You can ask us to:

• give you a copy of the personal data we hold about you
• correct anything inaccurate or incomplete
• delete your data — see our Data Deletion Instructions
• stop or limit how we use your data
• object to processing based on our legitimate interests, or to marketing
• send your data to you or another provider in a portable format
• withdraw a consent you previously gave

To make a request, email privacy@withklyp.com. We will respond within 30 days. We may ask you to verify your identity first.

See Data Deletion Instructions in section 12 for the quickest way to delete your data, whether you signed up directly, with Facebook or Instagram, or through Shopify.

9. Complaints

If you are unhappy with how we have handled your personal data, contact us at privacy@withklyp.com. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.

You can also complain to the Personal Data Protection Centre.

10. Children

Klyp is for users aged 18 and over. We do not knowingly collect data from anyone under 18. If we discover we have, we will delete it.

11. Changes

We may update this policy. We will post the new version here and update the date at the top. If a change is significant, we will tell you by email or in the platform before it takes effect.

12. Data Deletion Instructions

This section explains how to ask us to delete the personal data we hold about you. It applies whether you signed up directly, signed in with Facebook or Instagram, or connected a Shopify store.

The fastest way: delete it yourself

1. Log in to your Klyp account
2. Go to Settings → Account
3. Select Delete my account and data
4. Confirm

Your account closes immediately and your data is deleted within 30 days.

If you signed in with Facebook or Instagram

1. Go to your Facebook Settings & Privacy → Settings → Apps and Websites
2. Find Klyp in the list
3. Select Remove, and choose to send a data deletion request

Facebook passes the request to us automatically. We start the deletion and give you a confirmation code and a link where you can check the status of your request.

Shopify merchants

Uninstalling the Klyp app from your Shopify admin triggers deletion of your shop's data. We acknowledge Shopify customer data requests and redaction webhooks (customers/data_request, customers/redact, shop/redact) within 48 hours. Shop redaction deletes stored access tokens and shop-scoped rows, except records finance must retain. We never stored Shopify customer names, emails or phone numbers to begin with, so there is nothing customer-identifying to redact for customers/redact beyond acknowledging the request.

If you can't use any of the above

Some people have no button to press: you may be locked out of your account, you may never have had one, or we may hold data about you because you appeared in a creator's video or shopped with a brand running a Klyp campaign.

In that case, email privacy@withklyp.com with the subject "Data deletion request", telling us who you are and what you would like deleted. We may ask you to confirm your identity first, so that nobody else can delete your data.

You do not have to use this section, this form of words, or any particular channel. A request to delete your data is valid however you make it and wherever in our organisation it arrives — but the routes above are faster, and give you a confirmation.

What gets deleted

• Your account, login credentials and profile
• Your uploaded content, except where a brand has already paid for a licence to it — in that case the content stays under that licence, but we remove your personal details from our systems
• Your messages and support history
• Any connected account tokens, which are revoked immediately
• Analytics and attribution records linked to you, including your profile and session recordings in our analytics provider

What we have to keep, and why

We cannot delete everything. We keep:

• Payment and tax records for 7 years, because tax law requires it
• Records of completed campaigns and licences, for as long as needed to show what a brand paid for and what it is licensed to use
• A minimal record that you asked for deletion, so we can show we complied

We keep only what is necessary, we do not use it for anything else, and we delete it when the retention period ends.

How long it takes

Questions

Email privacy@withklyp.com. If you are unhappy with how we handle your request, you can complain to us at the same address, or to the Personal Data Protection Centre.

13. Contact

Klyp Email: privacy@withklyp.com