Effective Date: June 10, 2026
READ THIS FIRST: FindClout is a data-intensive, chat-first social media automation and creator-marketplace platform. To operate it, we collect and process extensive data — including the content of your messages with our bots, media you upload (including screen recordings of your social media analytics dashboards), payment handles, and performance metrics scraped from public social media platforms. We share data broadly with service providers, advertisers, and AI providers, and some of that sharing may constitute a "sale" or "sharing" of personal information under California law. We process your content with third-party artificial intelligence services. No method of transmission or storage is 100% secure, and you provide information at your own risk. If you do not agree with these practices, do not use the Platform.
This Privacy Policy applies to FindClout (including findclout.com, app.findclout.com, and related subdomains, our Telegram and WhatsApp bots, our download bot, our APIs, and all related services, collectively the "Platform"), operated by AIggregate Labs LLC, a Michigan Limited Liability Company ("FindClout," "we," "us," or "our"). It describes how we collect, use, disclose, retain, and process information about creators, advertisers, brands, visitors, and — in certain cases described below — individuals who have never signed up for the Platform.
By accessing or using the Platform, you acknowledge this Privacy Policy and, to the extent permitted by applicable law, consent to the data practices described in it. Where applicable law requires a specific legal basis or separate consent for a given processing activity, we rely on the bases described in Section 12 (GDPR) and elsewhere in this policy. If you do not agree with this policy, you must stop using the Platform.
This Privacy Policy should be read together with our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.
We collect information directly from you, automatically through your use of the Platform, from third-party services you connect or interact with, and from publicly available sources. We reserve the right to collect any category of information described in this Section, and combinations and derivatives of those categories.
The Platform is chat-first. We log and store the content of messages sent to and from our Telegram bots and our download bot, including messages in group chats where our bots are present. This includes links, commands, files, media, and any other content in those conversations. We also collect transcripts from our marketing/support chat widgets, emails you send us, and support communications.
Uploaded media is stored on cloud object storage (currently Cloudflare R2).
SCRAPED AND IMPORTED DATA ABOUT NON-USERS: We collect and store information about social media accounts and posts whose owners have not signed up for FindClout. This includes public usernames and handles, public profile and bio information, follower counts, post URLs, and post performance metrics (views, likes, comments) gathered from publicly accessible social media platforms, as well as imported contact lists and lead/outreach data provided by our users or compiled by us. We process this data for campaign analytics, creator discovery, payout verification, fraud detection, and business development, on the basis of our legitimate interests in operating a creator marketplace that measures public content performance. If you are a non-user and want information about you removed, contact [email protected].
You can control cookies through your browser settings, but disabling them may break Platform functionality. See Section 11 for opt-out rights regarding tracking that constitutes "sharing" under California law.
When you connect social media accounts for automated posting, the connection is made through a third-party social-posting provider (getlate.dev) that holds the OAuth authorization with the social platform. We store account identifiers and metadata (such as platform account IDs, handles, and connection status) and instruct that provider to post on your behalf. The provider — not FindClout — has custody of the OAuth tokens. Their handling of your credentials is also governed by their own terms and privacy policy.
The Platform lets you interact with us through multiple channels — for example, a web login (via Clerk) and one or more Telegram or WhatsApp identities. We link, associate, and may automatically merge these separate identities into a single unified account and profile when we determine, using identifiers such as matching email addresses, handles, connected social accounts, payout details, referral data, or device and usage signals, that they belong to the same person or organization. The purpose is to give you one consistent account, attribute earnings and activity correctly, prevent duplicate or abusive accounts, and detect fraud. Merging combines the data, history, balances, and communications associated with each linked identity. If you believe identities have been linked or merged in error, contact [email protected].
To the maximum extent permitted by applicable law, we reserve the right to use the information we collect for the following purposes:
AI PROCESSING OF YOUR CONTENT: We use third-party artificial intelligence providers (including OpenRouter and Google Gemini models) to process content on the Platform. This means that your captions, images, view-proof screenshots and screen recordings, audience-analytics screenshots, video frames, and chat transcripts may be transmitted to and processed by third-party AI services — for example, to generate captions, extract view counts and demographics from screenshots, categorize content, generate preview images, and analyze conversations. By submitting content to the Platform, you acknowledge and consent to this AI processing.
BROAD SHARING RESERVATION: To the maximum extent permitted by applicable law, we reserve the right to share the information described in Section 2 with the categories of recipients listed below. Some of this sharing — in particular, providing creator audience/demographic data to advertisers and the use of analytics and visitor-identification tools — may constitute a "sale" or "sharing" of personal information as defined by California law. See Section 11 for your opt-out rights.
We may share information with:
We currently use the following categories of third-party providers. This list may change at any time without notice, and we may add, remove, or replace providers as we see fit.
| Provider | Purpose |
|---|---|
| Cloudflare | Database (D1), object storage (R2), CDN, Workers compute, vector search, network security |
| Hetzner | Application hosting and media processing (servers located in Germany) |
| Clerk | Web authentication and identity management |
| Stripe | Payment processing and billing |
| PayPal | Creator payouts |
| Telegram & WhatsApp | Messaging interfaces (bot communications pass through these platforms) |
| getlate.dev | Social-posting infrastructure and OAuth custody for connected social accounts |
| UGC.inc | UGC content and account services |
| OpenRouter / Google | AI processing of content, media, and transcripts (see Section 3) |
| Apify / Webshare / DataImpulse | Scraping and proxy infrastructure for collecting public social media metrics |
| Resend / ZeptoMail | Transactional and marketing email delivery |
| Analytics & visitor-identification tools | Tag management, usage analytics, and visitor identification (e.g., Google Tag Manager, sapt.ai) |
We use automated systems and scoring that can materially affect your experience on the Platform, including your access to campaigns and your monetization. These include:
HUMAN REVIEW: If an automated decision significantly affects you (for example, withheld earnings due to a fraud score), you may request human review by contacting [email protected]. EU/EEA/UK users have a legal right to human intervention for automated decisions producing legal or similarly significant effects.
EXTENDED AND INDEFINITE RETENTION: We retain personal data for as long as needed for the purposes described in this policy, to comply with legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. We may retain some data — including transaction and earnings records, payout ledgers, and content analytics — indefinitely or for extended periods. Certain uploaded media, such as view-proof recordings and demographics screenshots, may be retained for verification, audit, and anti-fraud purposes even after the associated campaign ends or your account closes. We do not commit to any specific deletion schedule except where required by applicable law.
We use reasonable technical and organizational measures to protect information, including encryption in transit (TLS), access controls, network firewalls, and monitoring for suspicious activity. We do not represent that any specific cryptographic protection is applied to data at rest.
NO SECURITY IS ABSOLUTE — YOU ASSUME RISK: No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You provide information to the Platform at your own risk. To the maximum extent permitted by applicable law, we are not liable for unauthorized access to, or disclosure, alteration, or destruction of, your information that occurs despite our reasonable measures. Nothing in this paragraph waives any right that applicable law does not permit to be waived, including any statutory data-breach remedies.
Breach notification: If a data breach affects your personal information, we will notify affected individuals and/or regulators as required by applicable law. Notification timelines differ by jurisdiction and by recipient — for example, under the GDPR the 72-hour clock applies to notifying the supervisory authority, while individual notice is required "without undue delay" when the breach is likely to result in a high risk to individuals; U.S. state laws impose their own separate timelines. We will follow the rules applicable to each affected individual.
Your responsibilities: Keep your authentication tokens, settings links, and account credentials confidential; do not share them; and promptly report suspected unauthorized access to [email protected].
HOW TO EXERCISE YOUR RIGHTS: Email [email protected] from the email address (or with the Telegram identity) associated with your account, stating which right you wish to exercise. We may require verification information. We will respond within the timeframes required by applicable law. There is no instant self-serve deletion — requests are processed manually.
Deletion requests are subject to exceptions: we will retain data we are required or permitted to keep for legal, tax, and accounting compliance; records needed for fraud prevention, dispute resolution, and enforcement of our agreements; transaction and payout records; and data that has been aggregated or de-identified.
You may opt out of marketing communications by clicking "unsubscribe" in any marketing email, replying STOP (or the indicated command) to promotional bot messages, or emailing [email protected]. Opting out does not affect transactional messages (security alerts, payout notifications, account and service messages), and bot messages that are part of operating the service will continue while you use the Platform.
You can control cookies through your browser and clear localStorage at any time; doing so may log you out or break features. For California "Do Not Sell or Share" rights, see Section 11.
FindClout's primary servers are located in Germany (Hetzner). Data is also processed on Cloudflare's global edge network and by sub-processors based in the United States and elsewhere. AIggregate Labs LLC is a U.S. (Michigan) company. Regardless of where you are located, your information will be transferred to and processed in Germany, the United States, and other countries where we or our providers operate, which may have different data protection laws than your jurisdiction. By using the Platform, you consent to such transfers to the extent permitted by law; for EU/EEA/UK users, we rely on the transfer mechanisms described in Section 12.
This section applies to California residents.
In the preceding 12 months we have collected the following categories of personal information: identifiers (name, email, Telegram ID, IP address, handles); customer records (payment handles, wallet addresses, shipping details); commercial information (transactions, earnings, campaign participation); internet/network activity (logs, usage data, cookies/localStorage); geolocation (approximate, from IP); audio/visual information (uploaded media, screen recordings, screenshots); communications content (bot messages, chat transcripts); and inferences/profiles (bot scores, selection probabilities, AI-derived audience analysis). Sources: you, your devices, connected and public social media platforms (including scraping), and our service providers. Purposes and recipients are described in Sections 3–5.
WE MAY "SELL" OR "SHARE" PERSONAL INFORMATION as those terms are defined by the CCPA/CPRA. Examples: providing creator audience and demographic data to advertisers in connection with campaign applications, and the use of third-party analytics and visitor-identification tools on our websites. We do not knowingly sell or share the personal information of consumers under 18.
DO NOT SELL OR SHARE MY PERSONAL INFORMATION: To opt out of the sale or sharing of your personal information, email [email protected] with the subject line "Do Not Sell or Share My Personal Information" and your account email or Telegram username. We honor opt-out preference signals such as Global Privacy Control (GPC) where required by law. You may also use an authorized agent to submit requests on your behalf; we may require proof of authorization.
This section applies to users in the European Economic Area, the United Kingdom, and Switzerland. The data controller is AIggregate Labs LLC.
You have the rights of access, rectification, erasure, restriction of processing, data portability, objection (including an absolute right to object to direct marketing), and withdrawal of consent. You also have the right to lodge a complaint with a supervisory authority in your member state. Exercise your rights via [email protected], which also serves as our contact channel for EU/EEA inquiries.
Our primary processing occurs in Germany (within the EEA). Where personal data is transferred from the EEA/UK to the United States or other third countries (including to AIggregate Labs LLC and our U.S.-based sub-processors), we rely on Standard Contractual Clauses and equivalent safeguards where applicable, supplemented by the measures described in Section 8.
The Platform is for users 18 years of age or older. We do not knowingly permit anyone under 18 to register for or use the Platform, and we do not knowingly collect personal information from anyone under 18 through account registration or Platform use. Publicly available social media data we collect as described in Section 2.7 is gathered programmatically and may incidentally include public information about accounts whose operators' ages are unknown to us; if we learn that specific data pertains to an identified person under 18, we will take reasonable steps to delete or de-identify it as required by applicable law. We reserve the right to terminate any account, and to withhold payouts pending age verification, where we have reason to believe the account holder is under 18. Parents or guardians who believe a minor has provided information to FindClout should contact [email protected].
We may send you transactional and promotional messages via email, Telegram, and WhatsApp, including product updates, campaign invitations, payout notifications, and promotional offers. Bot messages are an inherent part of how the Platform operates. You may opt out of marketing messages as described in Section 9.2; transactional and service messages will continue while you maintain an account or active earnings/payout relationship with us.
The Platform contains links to, and integrates with, third-party websites and services (social media platforms, getlate.dev, Stripe, PayPal, Telegram, WhatsApp, and others). We are not responsible for the privacy practices of any third party. Your use of third-party services is governed by their own terms and privacy policies, which we encourage you to review.
We may update this Privacy Policy at any time by posting a revised version on the Platform. Changes become effective immediately upon posting unless otherwise stated. Material changes may additionally be communicated by email, bot message, or a Platform notice. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy. Review this page periodically; the Effective Date above indicates the latest revision.
If a change materially expands how we use or share personal information previously collected from you, we will provide notice and, where required by law, obtain your consent before applying the change to that previously collected information.
Privacy inquiries and data-subject requests: [email protected]
Security issues: [email protected]
General support: [email protected]
AIggregate Labs LLC
Attn: Privacy
Mailing Address: 314 North Thayer Street, Ann Arbor, MI 48104, USA
NOTE: This Privacy Policy may be updated at any time as described in Section 16. The version posted at this URL is the current, controlling version. If you have questions about any practice described here, contact [email protected] before using the Platform.
Last updated: June 10, 2026