Privacy Policy

This Privacy Policy explains how Comet Orbit LLC ("ClapCall") collects, uses, stores, and shares your personal information when you use ClapCall. It applies to all users — Creators and Fans. Questions? Contact legal@clapcall.com.

1. Information We Collect

Information you give us

• Name, email address, username, and password when you register.
• Age confirmation at registration.
• Payment card details when you add funds to your wallet (we do not store full card numbers).
• Government-issued ID, proof of address, and liveness data when Creators complete payout verification via Didit (https://didit.me).
• Profile content — photos, bio, and display name.
• Content you publish — posts, images, videos, audio, and other media.
• Messages you send to ClapCall support.

Information we collect automatically

• Device and technical data: IP address, device type, browser, operating system.
• Usage data: pages visited, features used, session duration, content interactions, call durations.
• Approximate location derived from your IP address. We do not collect precise GPS location.
• Cookies and similar tracking technologies — see our Cookie Notice at https://www.clapcall.com/cookies.

What we do NOT collect

Private messages are end-to-end encrypted. We cannot read them and do not store their content. We only retain message metadata (timestamps, sender/recipient identifiers) for operational purposes.

2. How We Use Your Information

• Create and manage your account.
• Process wallet transactions, call charges, and gift payments.
• Enable calls, messaging, and content delivery.
• Send transactional emails via AWS SES.
• Verify Creator identities for payout eligibility through Didit.
• Detect and prevent fraud, abuse, and policy violations.
• Analyse platform usage through Google Analytics (IP anonymised).
• Comply with applicable legal and regulatory obligations.
• Respond to your support requests.
• Send promotional emails where you have opted in. You can opt out at any time.

3. Legal Bases for Processing (GDPR)

• Contract: To provide the platform and process transactions.
• Legal obligation: To comply with applicable laws.
• Legitimate interests: For fraud prevention, security, and service improvement.
• Consent: For analytics cookies and promotional communications. Withdraw at any time.

4. Who We Share Your Data With

We do not sell your personal data. We share it only with:

• Amazon Web Services (AWS): Cloud hosting and email delivery (US-based servers).
• Didit (https://didit.me): Identity and age verification for Creator payouts.
• Google Analytics (Google LLC): Anonymised usage analytics.
• Payment processor: Credit and debit card processing. PCI-DSS compliant. (Provider to be confirmed.)
• Law enforcement and regulators: Where required by applicable law.
• Business successors: In the event of a merger or acquisition.

5. International Data Transfers

ClapCall stores data on AWS servers in the United States. If you are in the EEA or UK, your data is transferred to the US under Standard Contractual Clauses (SCCs). Contact legal@clapcall.com for details.

6. How Long We Keep Your Data

We retain your data for as long as your account is active. After deletion, we keep your data for 30 days to allow for account recovery and to resolve outstanding transactions. After that, data is deleted or anonymised, unless we are required to keep it longer by law.

7. Your Rights

EEA and UK users (GDPR / UK GDPR)

You have the right to access, correct, delete, restrict, or port your personal data, and to lodge a complaint with your local data protection authority (e.g. the ICO in the UK). Contact legal@clapcall.com.

California users (CCPA / CPRA)

You have the right to know what data we collect, to request deletion, to correct inaccurate data, and to opt out of the sale of your data (we do not sell your data). Submit requests to legal@clapcall.com.

8. Security

We use TLS encryption for data in transit, secure AWS hosting, and restricted internal access to personal data. Private messages are end-to-end encrypted. Payment data is handled to PCI-DSS standards. If we become aware of a breach affecting your data, we will notify you as required by law.

9. Children's Privacy

ClapCall is for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a user under 18 has registered, report it to support@clapcall.com immediately.

10. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes at least 14 days before they take effect. The latest version is always at https://www.clapcall.com/privacy.

11. Contact