The controller is Alpha Brands & Assets AG, Staatsstrasse 44, CH-9463 Oberriet SG, Switzerland. Contact: aplaud.me@gmail.com.
This Policy covers the three domains, accounts, dashboards, Magic Codes, Magic Events, Applause, MCN, Vote, Quiz, Brands, Shopping, Affiliate, Benefit Partner, public content, gated content and Private & Confidential Content.
Depending on the service we may process account and contact details, profile information, uploaded or linked content and previews, messages, transaction and payout data, referral and attribution data, IP/device/browser data, scan/access events, cookie preferences, security logs and moderation records.
We process data to provide and secure the service, authenticate users, publish or privately deliver content, process transactions and revenue shares, prevent fraud, provide support and analytics, meet accounting/legal duties, moderate content and handle disputes. Legal bases may include contract, legal obligation, legitimate interests, consent and legal claims.
Under 13: no account. Ages 13–17: additional capacity, guardian and financial-function restrictions may apply depending on jurisdiction.
Event Owner, Content Owner, Content Host, Subject of Applause and Revenue Recipient may be different persons. Where personal data of a non-user is used, applicable information and rights obligations remain relevant.
The product distinguishes Public Content, Applause to Reveal / Gated Content, and Private & Confidential Content.
Private & Confidential Content means underlying digital material accessible only to one or a finite number of recipients selected by the sender. A separate preview may be shown. Where configured, Recipient Authorization + Reveal Condition = Access. A hidden or unlisted URL alone is not treated as recipient-level access control.
Payments are processed primarily through PayPal. We seek to minimize storage of full card credentials where payment providers handle them directly.
MCN consumer balances are separate from Creator, Benefit Partner and Affiliate fiat balances. Creator revenue is calculated separately and paid out in fiat when eligible.
Magic Code access may generate technical logs such as time, IP, device/browser, referrer, code ID and security/fraud signals. Scanning a Magic Code is not marketing consent.
Typical operational targets include: raw Magic Code logs around 90 days; Reveal access records around 12 months; support/moderation records around 3 years; security logs around 90 days; backups around 35–90 days; accounting, Creator/Benefit/Affiliate financial records up to 10 years where legally required. Legal holds override normal deletion.
Risk-based measures may include TLS, encryption at rest where appropriate, least privilege, administrative MFA, logging, backups and payout-destination security controls.
Subject to applicable law, individuals may have rights of access, correction, deletion, restriction, portability, objection and withdrawal of consent, and may complain to the competent supervisory authority.
Cookies and similar technologies are governed by the Cookie Policy and consent settings.
Hosting currently uses Hostinger International Ltd. with servers in Germany. Other processors and international-transfer mechanisms depend on the final production vendor inventory.