Privacy Policy
This notice describes how the Klipo application ("the App") processes data as part of its shoppable video service for Shopify stores (video import, product tagging, on-site widgets and analytics). With respect to the store's customer data, the App acts as a data processor on behalf of the store owner (the merchant), who remains the data controller towards their own customers.
1. Data processed
Video assets and their metadata (caption, creator handle, duration, thumbnails) — imported from Instagram/TikTok, uploaded directly, or submitted via the UGC Collect link. Products and variants (title, price, image) — to tag videos and power shoppable widgets. Widget interaction events in pseudonymized form (an ephemeral, per-store client identifier) — to measure views, clicks and conversions. We do not store customer names, addresses or payment data. Store configuration and settings — needed for the App to function.
2. Purpose and legal basis
We process data solely to provide the service requested by the merchant (performance of a contract) and to keep it secure and reliable (legitimate interest in a dependable service). We do not use the data for our own marketing purposes and do not sell it to third parties.
3. Providers and sub-processors
The App relies on infrastructure providers for video storage and transcoding, and on content-delivery/video-hosting providers to serve and play back video assets. These providers process data as sub-processors, under agreements that limit their use of it to the purposes of the service.
4. Extra-EU transfers
Some infrastructure providers may be located outside the European Union. Where this is the case, transfers take place under appropriate safeguards (e.g. standard contractual clauses). Only the data necessary for the service is transferred.
5. Retention and deletion
We retain data for as long as needed to provide the service. We honor Shopify's compliance webhooks (customers/data_request, customers/redact, shop/redact): upon uninstallation and deletion requests, the store's data is removed from our systems.
6. Data subject rights
Data subjects may exercise the rights available under applicable law (access, rectification, erasure, restriction and objection) by contacting the merchant, who is the data controller. Upon the merchant's instruction, we cooperate to fulfill such requests.
7. Security
We adopt appropriate technical and organizational measures: application secrets are protected and never exposed to the client, video storage access is credentialed and scoped per store, and access is limited to what is necessary.
8. Changes
We may update this notice; material changes will be indicated on this page along with the last-updated date.
9. Contact
For requests related to data processing: [email protected]
Last updated: July 2026.