Privacy Policy

Last updated: February 8, 2026

1. Introduction

Zass ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

2.1 Account Information

  • Email address and password (for email registration)
  • Google account information (for OAuth registration)
  • Username (chosen during onboarding)
  • Full name and profile picture
  • Role selection (Creator/Clipper)
  • Malaysian state badges (for Clippers)

2.2 Financial Information

  • Wallet balance and transaction history
  • Payment method details (processed securely by our payment providers)
  • Subscription tier and billing cycle
  • Invoice and receipt records
  • Referral bonuses and earnings

2.3 Campaign and Submission Data

  • Campaign content, descriptions, and requirements
  • Video assets and media files uploaded
  • Submission URLs and timestamps
  • Approval status and creator feedback
  • View counts and performance metrics
  • Clipper ratings and reviews

2.4 Social Media Account Data

When you connect your social media accounts to Zass, we may collect the following data from each platform:

TikTok:

  • TikTok user ID and display name
  • Profile picture and bio
  • List of your public videos
  • Video performance metrics (views, likes, comments, shares)
  • Video publish dates and timestamps

Instagram:

  • Instagram username and account ID (requires Business/Creator account)
  • Profile picture
  • Reels and posts metadata
  • Video performance metrics (views, likes, comments)
  • Content timestamps

YouTube:

  • YouTube channel ID and channel name
  • Channel thumbnail
  • YouTube Shorts and video list
  • Video performance metrics (views, likes, comments)
  • Video publish dates

2.5 Usage and Analytics Data

  • Pages visited and features used
  • Campaign views and interaction patterns
  • Leaderboard rankings and performance scores
  • Device information and browser type
  • IP address and approximate location
  • Error logs and diagnostic data

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Platform
  • Process transactions and manage your wallet
  • Match creators with clippers for campaigns
  • Verify clip submissions and track performance metrics
  • Calculate earnings based on views and bounty structures
  • Manage subscription billing and renewals
  • Generate leaderboard rankings
  • Administer the referral program
  • Send notifications about campaigns, earnings, submissions, and platform updates
  • Provide customer support and respond to inquiries
  • Detect, prevent, and address fraud, abuse, and technical issues
  • Comply with legal obligations
  • Conduct analytics to improve user experience

4. Social Media Integration Details

Our integrations with social media platforms (TikTok, Instagram, YouTube) serve the following purposes:

  • Account Verification: Confirm clipper identity and account ownership on each platform
  • Submission Validation: Verify that submitted clips exist and belong to the clipper
  • Author Matching: Ensure the video author matches the connected account
  • Content Age Verification: Check video publish dates for campaign compliance
  • Performance Tracking: Monitor view counts, likes, comments, and shares for bounty calculations
  • Analytics: Provide creators with insights on clip performance across platforms

Platform-Specific Notes:

  • TikTok: We access data via TikTok's official API in accordance with their Platform Terms
  • Instagram: Requires a Business or Creator account; we use Meta's Graph API
  • YouTube: We use Google's YouTube Data API; authentication via Google OAuth

We only access public video metrics and never store your social media login credentials. You can disconnect any platform at any time through your profile settings. Token refresh is handled automatically to maintain your connection.

5. Information Sharing

We may share your information in the following circumstances:

  • Between Users: Creators can see clipper profiles, submissions, and ratings. Clippers can see creator profiles and campaign details.
  • Public Leaderboard: Top clipper rankings are visible publicly
  • Trusted Clippers: Creators may grant special access to selected clippers
  • Service Providers: Third parties who perform services on our behalf (payment processing, hosting, analytics)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with any merger or acquisition

We do not sell your personal information to third parties.

6. Data Storage and Security

We implement appropriate security measures to protect your data:

  • Data is stored on secure, encrypted servers (Supabase)
  • Row-level security policies protect database access
  • HTTPS encryption for all data transmission
  • Regular security audits and updates
  • Limited employee access to personal data

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data as follows:

  • Account Data: Retained while your account is active
  • Transaction History: Retained for 7 years for legal and accounting purposes
  • Campaign and Submission Data: Retained for 2 years after campaign completion
  • Analytics Data: Retained for 1 year in identifiable form
  • After Account Deletion: Most data deleted within 90 days, except as required by law

8. Your Privacy Rights

You have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your data (subject to legal requirements)
  • Portability: Export your data in a portable format
  • Withdrawal: Withdraw consent for data processing
  • Disconnect Accounts: Unlink TikTok and other connected accounts
  • Profile Management: Update your profile, username, and preferences

To exercise these rights, contact us at privacy@zass.asia

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication: Maintaining your login session
  • Preferences: Remembering your settings (e.g., dark mode)
  • Analytics: Understanding how users interact with our Platform
  • Performance: Improving Platform speed and reliability

You can configure your browser to refuse cookies, but some features may not function properly without them.

10. Email Communications

We may send you emails for:

  • Account verification and password resets
  • Submission notifications (new submissions, approvals, rejections)
  • Campaign updates and deadlines
  • Earning notifications and withdrawal confirmations
  • Subscription billing and renewal reminders
  • Platform announcements and updates

You can manage your email preferences in your profile settings.

11. Children's Privacy

Our Platform is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and maintained on servers located outside of Malaysia. We use Supabase for our backend services, which may process data in various regions. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

13. Third-Party Services

Our Platform integrates with the following third-party services:

  • Supabase: Database, storage, and authentication services
  • TikTok: Social media integration for clip verification and performance analytics
  • Instagram (Meta): Social media integration for Reels verification and analytics
  • YouTube (Google): Social media integration for Shorts verification and analytics
  • Google: OAuth authentication for account login and YouTube access
  • Payment Processors: Secure payment handling for subscriptions and withdrawals

Each third-party service has its own privacy policy governing your data.

14. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will send email notification to registered users. You are advised to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@zass.asia

For general inquiries, you can also reach us at support@zass.asia