Palflip
Legal

Privacy Policy

How Palflip collects, uses, shares, and protects your personal information, in line with the Protection of Personal Information Act, 2013 (POPIA). Forms part of our Terms of Service.

Scroll to the bottom to mark this as read — that unlocks the checkbox on the sign-up page.
Version 1.0Effective 21 July 2026legal@palflip.com

1. Who is responsible for your information

Palflip is the "responsible party" for the personal information it processes. Our Information Officer is registered with the Information Regulator and can be reached at privacy@palflip.com.

2. The information we collect

  • Account & profile: name, display name, username, email, password (managed by our authentication provider), role (Creator/Brand), bio, company details, and social media handles.
  • Verification: information needed to confirm you are 18+ and, where required, identity or business details.
  • Creator payout details: bank account name, bank, account number, and branch code, used only to pay you through our payment provider.
  • Brand & payment details: Campaign funding details processed through our payment provider — we do not store full card numbers.
  • Campaign & content data: Campaigns, Deliverables, clip links, submissions, reviews, messages, applications, and view/earnings records.
  • Technical data: device, browser, IP address, log data, cookies (see section 8), and push-notification subscriptions if enabled.

3. Why we use it, and our lawful basis

We process your information to:

  • create and run your account and provide the Platform (performance of our contract with you);
  • match Creators and Brands, run Campaigns, verify views, and calculate and make payments (contract);
  • verify age and identity, prevent fraud and view manipulation, and keep the Platform secure (legitimate interests and legal obligations);
  • send you service messages, and, where you opt in, notifications (contract / consent);
  • comply with law, tax, and regulatory obligations (legal obligation); and
  • improve and support the Platform (legitimate interests).

We do not sell your personal information.

4. Who we share it with

We share personal information with service providers who process it on our behalf, under contract and only as needed to run palflip:

  • Paystack — payments (funding and payouts).
  • Supabase — database and file storage hosting.
  • Clerk — authentication and account security.
  • Vercel — application hosting.
  • Groq — AI processing for content assistance and submission pre-screening.
  • Resend — transactional email (where enabled).

We also share information with Brands and Creatorsas needed to run a Campaign (for example, a Creator's payout name is shown to an admin for payment, and a Brand sees the Deliverables submitted to its Campaign); with social platforms you choose to connect; and where required by law, to protect our rights, or in a business transfer.

5. Cross-border transfer

Some of our providers (including Supabase) host or process data on servers outside South Africa, including in the United States. Where we transfer personal information across borders, we do so on the basis that the recipient is subject to laws or binding agreements providing an adequate level of protection, or with your consent, as POPIA permits.

6. How long we keep it

We keep personal information only as long as needed for the purposes above, to run your account, and to meet legal, tax, and dispute-resolution obligations, after which we delete or anonymise it. Financial and transaction records are kept for the period the law requires. If you close your account, we anonymise your personal details immediately; records needed for payouts already made are retained as required by law. See Settings → Account to close your account.

7. How we protect it

We use appropriate technical and organisational safeguards, including authenticated access, database access controls, encryption in transit, and restricted access to payout details. No system is perfectly secure; you are responsible for keeping your login safe. If a data breach affects you, we will notify you and the Information Regulator as POPIA requires.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences, keep the Platform secure, and understand usage. You can control cookies through your browser; some features may not work without them.

9. Your rights

Subject to POPIA, you may: access the personal information we hold about you; ask us to correct or delete it; object to certain processing; withdraw consent (where processing is based on consent); and complain. You can download everything we hold about your account yourself, any time, from Settings → Account — no request needed. For anything else, email privacy@palflip.com. We may need to verify your identity first.

You may also complain to the Information Regulator (South Africa): website inforegulator.org.za, email POPIAComplaints@inforegulator.org.za.

10. Children

Palflip is strictly for users 18 and older. We do not knowingly collect the personal information of anyone under 18. If we learn we have, we will delete it and close the account.

11. Changes

We may update this Policy. Material changes will be notified through the Platform or by email, and the effective date above will change.