Privacy Policy
What we hold, who else sees it, how long we keep it, and the list of things there is no column for. Written to be read.
Privacy Policy
MOHAMMAD SAMAD LLC, trading as REWARDED, of c/o Republic Registered Agent LLC, 5830 E 2nd St Ste 7000, Casper, WY 82609, USA ("REWARDED", "we", "us") is the controller of the personal data described here.
Last updated: 2026-09-28 · Contact: samadmohammad606@gmail.com
This policy covers rewarded.agency (our website) and app.rewarded.agency (the portal where clippers and clients sign in). It is written to be read, not to be survived. If anything in it is unclear, email us and we will answer in plain words.
1. The short version
We run a clipping agency. To do that we need to know who you are, where you post, and how many views your clips got. That is essentially all we hold.
- We collect your email, your handle, your country, and the links to things you posted publicly.
- We collect view, like and comment counts for clips you submit, read from the platform's own public API, and we keep every reading rather than just the latest one — because that history is what proves to you that we paid you correctly.
- We never hold your bank details, card numbers, government ID, tax number or home address. Not because we promise not to look — because there is no column in our database that could store them.
- We do not sell your data, we do not advertise, and we run no tracking or analytics cookies in the portal.
2. What we never collect
This section exists because it is the part people actually worry about, and because it is verifiable rather than reassuring.
| We do not hold | Why you can check this rather than trust it |
|---|---|
| Bank account numbers, IBANs, card numbers | No field in any table accepts them. Payouts are prepared as a list and sent by hand, outside this system |
| Government ID, passport, national ID, tax number | Same — no field exists |
| Your home or postal address | Same |
| Date of birth | Same |
| A password | There are none. You sign in with a six-digit code sent to your email, so there is no password for us to lose |
| Uploaded video files | You post to your own account and send us the link. We never receive or store your footage |
| Anything from an advertising or analytics network | Neither the site nor the portal loads one. The portal sets exactly two cookies, both strictly necessary; the marketing site sets none at all. See the Cookie Notice |
The closest thing to payment data we store is the word usdt, wise or paypal on your record, so we know which rail to use, plus a transfer reference you give us afterwards so a payment can be traced. Never an account.
What this means for you in practice: if our database were fully exposed tomorrow, an attacker would learn email addresses, public social handles, public view counts and how much we owed people. They could not take money from anyone.
3. What we collect, and when
If you only visit the website
The marketing site is served by Netlify, which keeps standard server logs (IP address, page requested, timestamp, browser) for security and abuse prevention. We do not read these for marketing.
If you apply to clip for us
From the application form: handle, email, country, Discord username, the platform accounts you post from, links to sample clips, your niches, how many clips a week you can commit to, your preferred payout rail, how you heard about us, and anything you write in the note field. We also record the IP address the application came from, to catch duplicate and automated applications.
If you are accepted as a clipper
The above, plus:
- Your submissions — the URL, platform, video title, publish date, and the time you submitted it
- View history — every reading we take of the views, likes and comments on your clips, with a timestamp, the source (
apiormanual), and the platform's verbatim response kept alongside it - Earnings and payments — amounts owed, amounts sent, dates, and rolled-over balances
- Standing — any strikes, which published rule they relate to, when they were issued and when they expire
- Messages we send you inside the portal, and whether you have read them
- Sign-in records — your email, a one-way hash of each login code, the IP address it was requested from, and the browser string of each active session. We never store the code itself in readable form
- Your Discord user ID, if you use the Discord bot
- An activity log of decisions taken on your work: who approved or rejected a clip, when, and why
If you are a client
Your company or channel name, your contact name and email, your channel URL, the campaigns you have commissioned, and our notes on our conversations with you. Payment is taken through Stripe — your card details go to Stripe and never reach us.
If you are a prospect we have contacted
Publicly available information about your channel — name, URL, handle, subscriber and view figures read from the platform's public API — plus a record of when we contacted you and what was said. If you would rather we did not hold this, email us and we will delete it. You do not have to give a reason.
4. Why we hold it, and on what legal basis
| What | Why | Basis (UK/EU GDPR terms) |
|---|---|---|
| Email, handle, country | To let you in, to pay you, and to know whether we can pay you before you start work | Contract |
| View history and raw platform responses | To calculate what you earned, and to be able to prove it to you afterwards | Contract, and our legitimate interest in being able to settle a dispute with evidence |
| Strikes and fraud check results | To enforce the published rules, and to protect clients from paying for inflated views | Legitimate interest |
| Login codes, session records, IP addresses | To keep other people out of your account | Legitimate interest in security |
| Payment records | To show what we have paid, and because a company must keep its financial records | Legal obligation |
| Prospect research | To find clients | Legitimate interest — and we stop on request |
We do not rely on consent for any of the above, because none of it is optional to running the service. That also means there is nothing for you to consent to on arrival, which is why you will not see a cookie banner.
5. Who else sees it
We use a small number of named providers. We do not sell data to anyone, ever, and there is nobody on this list whose purpose is advertising.
| Provider | What it sees | Where |
|---|---|---|
| Fly.io | Hosts the portal and the database | Paris, EU |
| Fly.io object storage | Encrypted continuous backups of the database | EU |
| Resend | Your email address and the sign-in code, in order to deliver it | US/EU |
| Netlify | The marketing site and its server logs | Global CDN |
| Notion | Applications submitted through the website, and our client pipeline | US |
| Stripe | Client card payments. Clippers never touch it | US/EU |
| Discord | The clipper community, and your Discord username if you use it | US |
| Google (YouTube Data API) | We send it public video IDs and it returns public statistics. We do not send it anything about you | US |
| Wise / PayPal / a cryptocurrency network | Used by hand to send payouts. You give us the destination directly at the time; we do not keep it in the system | Varies |
International transfers. We are a US company, our servers are in the EU, and our clippers are worldwide, so your data crosses borders by design. Where data leaves the UK/EEA we rely on the providers' Standard Contractual Clauses. If that matters to you, ask and we will tell you exactly which providers touch your record.
6. How long we keep it
| Data | Kept |
|---|---|
| Sign-in codes | Deleted once used or expired, and swept nightly |
| Sessions | 60 days, then deleted. Signing out deletes it immediately |
| Applications that were rejected | 12 months, then deleted |
| Your clipper record, submissions and view history | While you are active, and for 24 months after your last clip, so a late dispute can still be answered with evidence |
| Payment records | 7 years, because we are legally required to keep our financial records. This is the one category we cannot delete on request |
| The decision log (who approved or rejected what, and when) | Kept as an integrity record. It is append-only by design — a log that can be rewritten proves nothing — with one exception: if you ask to be erased, your handle and email are replaced inside its text with an anonymous reference, and that replacement is itself written to the log. No row, timestamp or decision is ever removed or altered |
| Prospect research | Until you ask us to remove it, or we close the file |
7. Your rights
Whoever and wherever you are, you can ask us to:
- Show you everything we hold about you. For clippers this is largely self-service — the portal shows you every reading we ever took of every clip. Ask and we will export the rest
- Correct anything wrong
- Delete your data. What that means depends on one thing, and we would rather you knew it in advance than discovered it in a reply:
- If we never paid you, everything goes. Your record, your clip submissions, every view reading, your platform handles, your messages, your application and your sessions are deleted outright. Nothing is kept.
- If we have paid you, we are legally required to keep the financial record — so instead we strip you out of it. Your handle becomes an anonymous reference, and your email, Discord ID, country, payout method and our notes about you are all erased. What remains is the payment, the amount, the clips it was calculated from and the view readings behind them, attached to a reference that is no longer a person.
- Either way we delete immediately: your login, your sessions, your unused codes, your linked platform accounts, your messages and your application.
- One thing we will refuse: we will not erase you while we still owe you money, because deleting your email makes that payment impossible to send. We will pay you first, or ask you to tell us in writing that you are giving it up. Your money is not something we will quietly delete.
- Stop contacting you
- Object to how we use it, or ask us to restrict it
- Take it elsewhere, as a machine-readable file
Email samadmohammad606@gmail.com. We will reply within 30 days, and in practice much sooner. We will not ask you why, and asking will never affect your standing, your earnings or whether we work with you again.
If you are in the UK or EU and you think we have handled this badly, you may complain to your national data protection authority. We would rather you told us first.
Automated decisions
Two things happen automatically and you should know about them:
- Fraud checks. We compare a clip's engagement against the campaign's own median and against its own view history. A suspicious result can put a payout on hold for 72 hours, and can raise a flag for a human to look at. It cannot on its own take money away from you — a strike or a refusal is always a human act.
- The review clock. If nobody has decided on your clip within 24 hours and every automatic check is green, it is approved automatically, in your favour.
You can ask a human to look again at anything either of these does. Use the portal, Discord, or email.
8. Security
- Sign-in is by single-use six-digit code, expiring in 20 minutes, rate-limited per email and per IP. Codes are stored only as one-way hashes
- Session cookies are
HttpOnly,SameSite=LaxandSecure - Every page enforces access per record on the server. A clipper requesting another clipper's clip by guessing its address gets a 404, not a page
- The database is continuously replicated off-machine, and the restore is drilled rather than assumed
- Nobody on our side can see another clipper's earnings unless their role permits it, and a clipper-manager is blocked by the system from ruling on their own clips
No system is perfect. If you find a hole, email samadmohammad606@gmail.com and we will thank you properly.
9. Children
The service is for people aged 16 or over. We do not knowingly hold data about anyone younger. If you believe we do, tell us and we will delete it.
10. Changes
If we change this policy in a way that affects you, we will email everyone with an account rather than quietly changing the date at the top. The date at the top tells you when it last changed.