Cloutty/ Privacy Policy
Back to Home
Legal Compliance & Data Protection

Privacy Policy

Last Updated: September 26, 2026 • Effective Date: September 26, 2026 • Operated by UCDREAMS TECHNOLOGIES LLP

1. Company & Platform Overview

This Privacy Policy applies to the Cloutty website (https://cloutty.com), mobile applications, REST APIs, and related digital services (collectively, the “Platform” or “Services”) operated by UCDREAMS TECHNOLOGIES LLP (“Company”, “we”, “us”, or “our”), a limited liability partnership incorporated in India.

By accessing, browsing, registering an account, or connecting your social media channels on Cloutty, you acknowledge that you have read, understood, and consented to the data collection and processing practices described herein.

2. Scope & Regulatory Compliance

We are dedicated to safeguarding the privacy and digital security of all creators, brand sponsors, talent agencies, and site visitors. This Privacy Policy is formulated in strict accordance with:

  • Digital Personal Data Protection Act, 2023 (DPDP Act, India)
  • Information Technology Act, 2000 (IT Act, India) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
  • General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) principles for international users.
  • Meta Platform Terms & Developer Policies (including Instagram Graph API guidelines).
  • YouTube API Services Terms of Service and Google Privacy Policy.
  • TikTok Developer Terms of Service and API data usage requirements.

3. Information We Collect

We only collect information necessary to fulfill our core services—namely, connecting content creators with brand sponsors, calculating verified performance metrics, and facilitating secure escrow payments:

A. Information You Provide Voluntarily

  • Account Details: Full name, registered email address, account role (Creator, Brand, or Agency), profile bio, location, and billing address.
  • Creator Media Kit & Rates: Headline, primary content niche, base pricing per deliverable format, past brand collaboration history, and portfolio media.
  • Communication & Deals: Sponsorship campaign briefs, direct messages exchanged inside Cloutty deal rooms, milestone deliverables, and dispute submissions.

B. Connected Social Platform Data (OAuth Tokens)

When you authenticate and link your social media profiles (YouTube, Instagram, TikTok) via official OAuth authorizations:

  • We retrieve read-only public channel information: Channel title, handle, profile avatar, subscriber/follower count, verified badge status, and public video counts.
  • We retrieve aggregated engagement metrics (e.g. median views per post) solely to generate verified creator media kits and prevent fraudulent metric inflation.
  • We NEVER ask for, store, or receive your social media login passwords.
  • We NEVER post content, comment, send direct messages, or modify your social media channels without your explicit manual trigger.

C. Transactional & Escrow Data

All payment transactions, escrow funding, and payouts are processed securely through certified, PCI-DSS compliant third-party payment processors (Stripe, Razorpay, PayPal). Cloutty does not store raw credit/debit card numbers or bank account passwords on our servers.

4. Third-Party Platform API Compliance

A. Meta / Instagram API Compliance

Cloutty uses Meta and Instagram Graph APIs to enable creators to authenticate their accounts and verify follower statistics. We strictly adhere to Meta's Developer Policies and Data Use Restrictions. We do not sell, license, or purchase any data obtained through Meta APIs.

B. YouTube API Services Compliance & Google Limited Use Disclosure

Cloutty utilizes YouTube API Services to verify YouTube channel statistics. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy . Users may revoke Cloutty's access to their YouTube data at any time via the Google Security Settings page .

Google API Limited Use Disclosure: Cloutty's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements. Specifically, we do not use Google user data to serve advertisements, nor do we transfer or sell user data to third-party data brokers.

5. How We Use Your Data

  • To provide, operate, and maintain the Cloutty sponsorship discovery engine and digital media kits.
  • To protect transaction integrity and release locked escrow payments upon verified milestone completion.
  • To verify creator authenticity and display verified audience benchmarks to potential brand partners.
  • To prevent platform fraud, bot traffic inflation, duplicate account abuse, and payment disputes.
  • To provide user customer support and comply with mandatory legal obligations.

6. No Sale or Unauthorized Sharing of Personal Data

We do not sell, rent, trade, or monetize your personal data, contact information, or social tokens to any third-party advertisers or data brokers. Data is shared only with trusted infrastructure providers (cloud hosting, database persistence, payment gateways) necessary to operate the Platform, under strict confidentiality agreements.

7. User Data Deletion Instructions

In accordance with Meta Platform Rules, GDPR Right to Erasure, and the DPDP Act, users have the complete right to request the deletion of all personal data, social analytics tokens, and account information collected by Cloutty.

How to Request Full Data Deletion:

  1. Direct In-App Deletion: Log in to your Cloutty account, navigate to Settings > Profile, and click “Delete Account”. All associated personal profiles, media kits, and authentication tokens are immediately wiped.
  2. Email Request: Send an email from your registered email address to info@ucdreams.com or support@cloutty.com with the subject line "Data Deletion Request". Our privacy team will purge all personal records within 24–48 hours and send a confirmation receipt.
  3. Revoking Social Platform Permissions:
    • Meta / Facebook / Instagram: Go to Facebook/Instagram Settings & Privacy > Settings > Apps and Websites > Cloutty > Remove.
    • Google / YouTube: Visit Google Account Permissions and remove access for Cloutty.

8. Data Security & Encryption

We implement enterprise-grade technical and organizational security controls, including 256-bit SSL/TLS transport layer encryption, secure credential hashing, automated firewall protection, and restricted database access. While no internet platform can guarantee absolute immunity from threats, we continuously audit our infrastructure to safeguard user information against unauthorized access, alteration, or disclosure.

9. Platform Intermediary & Limitation of Liability

Cloutty operates as an electronic marketplace and intermediary under Section 79 of the Information Technology Act, 2000. Cloutty does not produce or endorse user-generated deliverables, sponsored reviews, or third-party marketing claims. Users remain solely responsible for the legality, tax compliance, and copyright clearance of their content submissions.

10. Children's Privacy

Our Platform is intended solely for individuals aged 18 years and older (or minors with explicit parental/guardian consent). We do not knowingly collect personal data from individuals under 13 years of age. If we learn that such data has been collected, we will immediately take steps to permanently delete it.

11. Grievance Officer & Official Contact

For privacy inquiries, data deletion requests, or formal grievance redressal under Indian Information Technology (Intermediary Guidelines) Rules, please contact our designated Grievance Officer:

UCDREAMS TECHNOLOGIES LLP

Attn: Privacy & Legal Grievance Officer

Official Contact Email: info@ucdreams.com

Support Email: support@cloutty.com

Registered Address: Bengaluru, Karnataka, India