Privacy policy
Version 2026-08 · ClickPlay by Lybotech Group Pty Ltd · clickplay.online
What we collect
Account information (name, email, profile photo where you sign in with Google), event configuration, member roles, invitation records, and metadata about contributed media: file names, sizes, types, capture times, approval status, captions, optional transcripts and compact numeric waveform data for voice notes. We also collect privacy-conscious product analytics events (for example "event created", "render completed") that never include file names, captions, transcripts, event names or drive identifiers.
What we never collect
Your photo, video and audio files. They are stored on your device or transferred directly from the contributor's browser to the event host's connected cloud drive. ClickPlay servers do not receive, buffer or retain media bytes, thumbnails or base64 copies.
Cloud storage providers
When a host connects Google Drive, we request the narrowest practical scope: access to files ClickPlay creates, not the whole drive. OAuth refresh credentials are encrypted with a managed key service before being stored and are never exposed to browser code. Files stored in a host's drive are processed by Google under Google's own terms.
AI assistance
Media analysis (blur detection, duplicate grouping, transcription) runs in your browser. A remote text model may receive only non-sensitive, user-approved text such as captions or transcripts — never media bytes — and only where AI features are enabled. We do not train models on your content.
Retention and deletion
Events expire per the host's retention setting. Deleting an event removes ClickPlay records; the host separately chooses whether app-created files in their drive are removed. Deletion and export actions are recorded in a restricted audit log. Contributors may remove their own eligible contributions before an event is locked.
Your rights
You may request access to or deletion of your account data at any time by emailing support@clickplay.online. Because media never rests with us, media deletion is under your or your host's direct control in your own storage.