Privacy Policy — ClipPack

Section 00

Scope of this policy

The ClipPack app (package com.ody.clippack) helps stores record and keep order-packing videos as evidence in a dispute. This policy describes the data we collect, what it is used for, and how you control it.

Section 01

Who operates the service

ClipPack is provided by the team operating the service at clippack.app. Contact: support@ody.vn.

Section 02

Data we collect

Account: email, password (hashed), display name, profile picture (if any).

Stores & orders: store name, order code, order type (outgoing/return), video metadata (recording time, size, hash and so on).

Videos: the video files recorded in the app. Files are uploaded to the storage configured by the store owner (see the Storage section).

Location (optional / with your permission): GPS coordinates and approximate address at the time of recording, used as packing evidence. Coordinates are only visible to members of the store — the public order-lookup page returns no coordinates or address.

Signing in with Google or Apple (if you choose to): we receive your email and display name from the provider in order to create or identify the account. With Apple, if you choose Hide My Email, we only ever receive a relay address ending in @privaterelay.appleid.com and never learn your real email. We do not receive your Google or Apple password.

Staff & invitations: the link between a staff account and a branch, plus the invitation's status. See Staff invitations below.

In-app notifications: the content of notifications sent to you (invitations, store application results, quota warnings) and whether you have read them.

Usage figures: how many videos each store recorded in the month, used to enforce quotas and to show statistics in the admin console.

Technical records: error logs and API request logs needed to run the service (we do not sell advertising data).

Payments: when a store buys a plan by bank transfer, we keep the order reference, the amount and the transfer description reported by the bank. For in-app purchases, Apple and Google tell us the transaction id, the product id and the subscription status — never card numbers, because we do not handle cards.

Section 02b

Staff invitations

Store owners invite staff by email or by link. The important part: ClipPack does not collect the email of anyone who has no account.

Invite by email: can only be sent to an email that already has a ClipPack account — meaning that person registered themselves and accepted this policy. If the email has no account, the system returns an error and does not store the address.

Invite by link: the link is not tied to anyone. An identity only exists once somebody opens the link and signs in with their own account.

The only data kept is the link between an account and a branch along with the invitation status. That information belongs to the relationship between owner and staff; ClipPack merely stores it.

If the invited person declines or leaves the store, the link is deleted. An unanswered invitation expires after 14 days.

Section 03

Device permissions

You may decline the location permission; everything else works as designed.

Camera & microphone: to record packing videos.

Location: to attach location evidence to the video (if you allow it).

Internet: to sign in, sync metadata and upload videos to the configured storage.

Section 04

Video storage

The store owner chooses where videos are kept: Telegram (Bot or MTProto account), Google Drive, OneDrive, or ClipPack Cloud if the store has bought storage. In every case:

Using Telegram is also subject to Telegram's Privacy Policy; using Google Drive is subject to Google's policies and using OneDrive to Microsoft's.

Connection details (Telegram bot token or session, Google / Microsoft refresh token, target folder or chat) are encrypted when stored on our servers, so the app can upload and play back videos.

With the three storage options you connect yourself, video files live on the storage the owner chose and we keep no original video files on ClipPack's own disks. ClipPack Cloud is the opposite: it is our storage, we hold the files, and it is charged by capacity.

Staff in a store share the owner's storage.

You can disconnect storage at any time under Storage in the app or the dashboard. Disconnecting stops ClipPack using it for new videos but keeps the connection details (still encrypted) so you can still watch videos saved there earlier. Choose “Delete connection” to remove those details from our servers entirely — after which older videos in that storage may no longer play.

Section 05

Google Drive / OneDrive data

When a store owner connects Google Drive, ClipPack requests only the https://www.googleapis.com/auth/drive.file scope. That scope grants access solely to files the app itself created or uploaded — ClipPack cannot read, list or modify anything else in your Google Drive.

For OneDrive, ClipPack uses the Files.ReadWrite, offline_access and User.Read scopes through Microsoft Graph, purely to upload videos, create viewing links and delete videos when you ask.

What we use this access for: creating the store's video folder, uploading packing videos, creating viewing links for customer lookup, reading the remaining free space, and deleting videos when you ask.

What we never do: read other files, copy your Drive or OneDrive content elsewhere, use this data to train models, or sell or pass it to third parties for advertising.

Revoking access: besides disconnecting inside ClipPack, you can revoke it directly at Google account permissions or Microsoft app permissions.

Section 06

What we use data for

We do not sell personal data to third parties for advertising.

Providing the recording, storage and order-code lookup features.

Managing stores, staff and access rights.

Account security, abuse prevention and troubleshooting.

Section 07

Sharing data

With members of the same store (according to the role they were granted).

With the storage provider the owner chose (Telegram / Google Drive / OneDrive), in order to store and play videos.

With Apple, Google and the receiving bank, only as far as needed to confirm that a plan purchase is genuine.

Where the law requires it, or to protect legitimate rights.

Section 08

Storage & security

Metadata and settings are kept on servers with access control. Passwords are hashed; Telegram / Google / Microsoft tokens are encrypted at rest. How long videos are kept depends on the store owner's settings and the storage platform.

Section 08b

Retention periods

When you delete your account, or an owner deletes a store, the corresponding data is removed from the live system immediately.

Backups are rotated and fully erased within 30 days at most of the deletion. After 30 days the data no longer exists in any copy we hold.

Video files in the owner's own storage (Telegram, Google Drive, OneDrive) are not deleted by us — they belong to the owner's account and they manage them.

Section 09

Your rights

Contact: support@ody.vn.

Ask to see or correct your account details.

Ask to delete your account or videos (subject to your role in the store; owners can delete the store and its videos).

Disconnect storage in the app (this affects every store under that account).

Decline a staff invitation, or leave a store at any time.

Set a password on an account created through Google or Apple, so you can also sign in by email.

Section 10

Children

ClipPack is aimed at business users and store staff aged 18 or over. We do not knowingly collect data from children.

Section 11

Changes to this policy

We may update this page. The “Last updated” date will be changed accordingly. Continuing to use the service after an update means you accept the new version.

Section 12

Language

The Vietnamese text is the original. If a translation differs from it, the Vietnamese version prevails.

Questions about the the Privacy Policy?

Email support@ody.vn — we reply during business hours.

Contact support