Privacy Policy

Alpha ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and services (collectively, the "Service").

Please read this policy carefully. By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this policy, please discontinue use of the Service immediately.

This policy applies to all users of Alpha, including brands, creators (clippers), and visitors, regardless of location.

We collect several types of information in connection with the Service:

Account Information: When you register, we collect your name, email address, username, password, and other details you provide during sign-up or profile setup.

Profile & Identity Information: Creators may provide additional information such as country, payment details, and social media account handles for campaign eligibility and payout processing.

Social Media Data: With your permission, we connect to your social media accounts (TikTok, Instagram, YouTube, X, etc.) to verify identity, retrieve follower counts, and track campaign performance metrics such as views and engagement.

Campaign Content: Brands upload source content (videos, audio, briefs) and creators submit clip links as part of campaign participation.

Payment Information: We collect billing details for brands and payout information for creators. Payment data is processed through secure third-party providers and is not stored in raw form on our servers.

Usage & Device Data: We automatically collect information about your interactions with the Service, including IP address, browser type, device identifiers, pages visited, time spent, and referring URLs.

Communications: When you contact us via email, chat, or forms, we retain those communications for support and legal purposes.

We use the information we collect to:

• Provide, operate, and improve the Service • Create and manage user accounts • Match brands with eligible creators for campaigns • Track and verify campaign performance (views, engagement) • Process brand payments and creator payouts • Send transactional emails (receipts, payout confirmations, campaign updates) • Send marketing and promotional communications (with your consent) • Respond to support requests and resolve disputes • Detect, prevent, and address fraud, abuse, and violations of our Terms of Service • Comply with legal obligations and enforce our agreements • Conduct research and analytics to understand how the Service is used • Personalize your experience and surface relevant campaigns

We do not sell your personal information. We may share your information in the following circumstances:

With Brands and Creators: Creator profiles (username, clip statistics, social handles) are visible to brands for campaign matching. Brand campaign details are shared with eligible creators.

With Service Providers: We share data with trusted third-party vendors who assist in operating the Service, including payment processors, analytics providers, cloud hosting, email platforms, and fraud detection tools. These partners are contractually required to protect your data.

For Legal Compliance: We may disclose your information when required by law, court order, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of Alpha, our users, or the public.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and a prominent notice on the Service before any such transfer.

With Your Consent: We may share your information with third parties when you explicitly authorize us to do so.

To participate in campaigns, creators connect their social media accounts to Alpha. By doing so, you authorize Alpha to:

• Access your public profile information and follower counts • Retrieve view and engagement metrics on content you post as part of campaigns • Verify account authenticity for fraud prevention purposes

We do not post on your behalf, access private messages, or collect data beyond what is necessary for campaign tracking. You may disconnect your social accounts at any time from your account settings, though this may affect your campaign eligibility.

Social media platforms are governed by their own privacy policies. We encourage you to review those policies independently.

We use cookies, web beacons, pixel tags, and similar tracking technologies to:

• Maintain your session and remember your preferences • Analyze traffic patterns and user behavior on the Service • Deliver relevant content and campaign information • Measure the effectiveness of our marketing efforts

Types of cookies we use:

Essential Cookies: Required for the Service to function. Cannot be disabled without affecting core functionality.

Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics). These may be disabled without affecting core functionality.

Marketing Cookies: Used to track visits across websites for advertising purposes. You may opt out via your browser settings or industry opt-out tools.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may limit your ability to use parts of the Service.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods:

Account Data: Retained for the duration of your account plus 3 years after closure for legal and compliance purposes.

Campaign & Performance Data: Retained indefinitely in aggregated, anonymized form for analytics and reporting purposes.

Payment Records: Retained for 7 years to comply with financial regulations and tax obligations.

Communications: Support tickets and email correspondence are retained for 2 years.

You may request deletion of your personal data at any time (see Section 9 — Your Rights). Note that we may retain certain information as required by law or for legitimate business purposes even after account deletion.

We implement industry-standard technical, administrative, and physical safeguards to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for data in transit • AES-256 encryption for sensitive data at rest • Role-based access controls limiting data access to authorized personnel • Regular security audits and penetration testing • Multi-factor authentication for administrative systems • Incident response procedures in the event of a data breach

While we work hard to protect your data, no security system is impenetrable. In the event of a material data breach affecting your rights, we will notify you as required by applicable law.

Depending on your location, you may have the following rights regarding your personal information:

Right of Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request correction of inaccurate or incomplete data.

Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.

Right to Portability: Receive your data in a structured, machine-readable format.

Right to Object: Object to certain processing activities, including direct marketing.

Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.

Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at privacy@alpha.app. We will respond within 30 days. We may need to verify your identity before processing your request.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe that a minor has provided us with personal information without parental consent, please contact us at privacy@alpha.app.

Upon receiving such a report, we will take prompt steps to delete the relevant information and terminate the associated account.

Alpha operates globally and your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that differ from those of your country.

When we transfer personal data internationally, we take steps to ensure an adequate level of protection is in place, including the use of Standard Contractual Clauses (SCCs) approved by relevant regulatory authorities where applicable.

By using the Service, you acknowledge and consent to the transfer of your information to our facilities and to those third parties with whom we share it as described in this policy.

The Service may contain links to third-party websites, applications, or services that are not operated or controlled by Alpha. This Privacy Policy does not apply to those third-party services.

We encourage you to review the privacy policies of any third-party services you access through or in connection with Alpha. We are not responsible for the privacy practices or content of such third parties.

Specific third-party services we integrate with may include: Stripe (payments), Google Analytics (analytics), Supabase (database), and social media platforms including TikTok, Instagram, YouTube, and X (Twitter).

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other business reasons. We will notify you of material changes by:

• Sending an email to the address associated with your account • Displaying a prominent notice on the Service at least 30 days before the change takes effect • Updating the "Last Updated" date at the top of this page

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to periodically review this page for the most current information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: privacy@alpha.app General Support: support@alpha.app Legal Notices: legal@alpha.app

Alpha Marketplace Available at: alpha.app

We are committed to resolving privacy-related concerns and aim to respond to all inquiries within 5 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.