CutPay Privacy Policy
Version of October 15, 2026, supplemented on October 16, 2026. This is an English translation of the Russian version at https://cutpay.ru/privacy; both versions have the same content.
1. Who processes the data
The operator is Global Bridge LLC (ОсОО «Глобал Бридж»), Tax ID (INN) 9909704508, 185/1 Yunusaliev St., Bishkek, Kyrgyz Republic. Email for data questions: info@cutpay.ru.
CutPay (cutpay.ru, app.cutpay.ru, the CutPay Telegram bot) is a platform where brands (advertisers) pay for short videos, and creators (clipmakers) are paid for views and for sales made with their personal code.
2. What data we receive
Advertisers: name, email, password (stored only as a hash), company name, website, Telegram for contact, billing details for documents, history of top-ups and spending.
Creators: Telegram ID and Telegram username, links to your channels and videos, public video statistics (views, likes, comments), payout details (USDT address on the TRON network, card or SBP details for payouts via Pally), history of accruals and payouts.
All users:
- technical sign-in data: time, a hash of the IP network and of the browser — to protect against account takeover and fraud;
- correspondence with support.
Advertiser request form on cutpay.ru: name, contact (Telegram or email), company, website, what to advertise, budget, comment, traffic source tags (utm), a hash of the IP network and of the browser — to reply to the request and filter spam. The full IP address is not stored.
Clicks on creator links (cutpay.ru/go/…): time of the click, a hash of the IP network and of the browser, the referring site. The full IP address is not stored.
If you connect a platform account (YouTube, Instagram, TikTok, VK): the account ID and name, the public profile (display name, avatar, number of followers and videos), a list of your public videos and their statistics. Access is read-only. We never post, change or delete anything on your behalf. The access token is stored encrypted. Details for Google (YouTube) are in section 9, for Instagram and TikTok — in section 10.
3. Why
- to count your video, calculate views and sales made with your code, and accrue payment;
- to pay money to your payout details;
- to let advertisers see reports on their campaigns — without your personal data or payout details, only the channel and video statistics;
- to protect the service from fake views and fraud;
- to answer support requests and send notifications about orders, accruals and payouts.
We do not show third-party ads based on your data and we do not sell data.
4. Who we share data with
- Pally — accepting advertiser payments and paying creators to cards or via SBP;
- the TRON network — USDT payouts: the recipient address and amount go to the public blockchain;
- platforms (YouTube, VK, Instagram, TikTok) — requests for video statistics;
- speech recognition and text checking services for the automatic video check: they receive only the frames, audio and description of the video and the campaign brief. Payout details, Telegram IDs and names are not shared;
- government authorities — only as required by law.
5. How long we keep data
| Data | Period |
|---|---|
| Money records (accruals, payouts, top-ups) | indefinitely — this is an accounting ledger and its entries are not deleted; when an account is deleted, the link to your name and payout details is erased |
| Link clicks | 180 days |
| Support correspondence | 180 days |
| YouTube API data (video statistics, including data obtained with access to your channel) | up to 30 days; after a channel is disconnected — deleted within 7 days (YouTube API rules) |
| Profile of a connected account (name, avatar address, number of followers, videos and likes) | while the account is connected, refreshed daily; erased immediately on “Disconnect” or when the channel is deleted |
| The “My videos” list in the account | not stored: kept only in server memory for up to 5 minutes |
| Sign-in log | 90 days |
| Account and payout details | as long as the account exists |
6. Security
- Payout details, platform access tokens and API keys are encrypted (AES-256-GCM) with separate keys.
- Passwords are stored only as a hash.
- Request bodies, payout details and keys are not written to server logs.
- Only the owner has access to the admin panel, with two-factor sign-in.
7. Your rights
You can:
- find out what data about you is stored;
- correct it;
- disconnect connected platforms;
- delete your account.
How to delete data — https://cutpay.ru/en/data-deletion. Send requests to info@cutpay.ru; we reply within 30 days.
8. Changes
We publish a new version on this page with its date. We notify you about significant changes in the bot or by email.
9. Google user data (YouTube)
This section covers the data CutPay receives from Google when a creator connects a YouTube channel by signing in with Google (creator account → “Channels” → “Connect YouTube”). Connecting is optional: a channel can also be confirmed with a code in its description.
What data we receive:
| Scope | What we read | Why |
|---|---|---|
youtube.readonly | your channel ID, title and handle (@name), its avatar, number of subscribers (unless hidden) and videos; the list of the channel's latest (up to 20) videos: ID, title, thumbnail, publish date, duration, number of views, likes and comments; for videos that you submitted to a campaign: video and channel ID, publish date, duration, privacy status, number of views, likes and comments | to confirm that the channel is yours and that the submitted video was published on it; to show you the channel profile and “My videos” in your account so you can submit a video to a campaign in one click; to count views for the payout |
yt-analytics.readonly | views and engaged views of the submitted videos and of the videos in “My videos” — for your channel only | to show you engaged views in “My videos”; to assess the quality of views of a submitted video when accounting for it |
Google also issues access tokens (access and refresh token) so that we can make these requests without asking you to sign in again. You can leave yt-analytics.readonly unchecked on the Google consent screen — then only youtube.readonly is used.
We do not request comment texts, the list of subscribers, playlists (other than the channel's uploads playlist for “My videos”), or the email and contacts of your Google Account. We never post, edit or delete anything on your channel.
How we use it. Only to confirm the channel, to show you the profile and “My videos” in your account, and to account for views of submitted videos. Google user data is not used for advertising, retargeting or credit assessment; it is not sold and not transferred to advertising platforms or data brokers; it is not used to develop, improve or train artificial intelligence or machine learning models, nor to create or modify images or videos. Data received through access to your Google Account is not sent to the speech recognition and text checking services listed in section 4.
Who can see it. The campaign's advertiser sees your channel and the statistics of the submitted video in reports — without access tokens, payout details or Telegram. The service owner sees the statistics for support, complaint handling and fraud prevention. Nobody sees the access tokens, including in the admin panel. Google user data is not shared with third parties except as required by law.
Where and how we store it. On CutPay's server. Access tokens are stored only encrypted (AES-256-GCM, a separate key; each token is bound to the creator and the platform); tokens and Google responses are not written to server logs.
Retention and deletion:
- access tokens — while the channel is connected; after “Disconnect” a server job (every 10 minutes) revokes them at Google and deletes them;
- channel ID, title and handle — while the channel is in your profile;
- channel profile (title, avatar address, number of subscribers and videos) — while the channel is connected, refreshed daily; erased immediately after “Disconnect” or when the channel is deleted;
- the “My videos” list (latest videos, thumbnails, counters) — not stored: kept only in server memory for up to 5 minutes to show it to you;
- statistics of submitted videos obtained with your access (views, likes, comments, engagedViews) — no longer than 30 days; after “Disconnect” or revoking access in your Google Account settings — deleted within 7 days (a daily server job);
- video statistics obtained without access to your account (with a YouTube API key) — up to 30 days;
- only the outcome stays in the accrual records: the number of views the payment was based on and the amount — this is an accounting record (section 5);
- to delete everything together with the account — https://cutpay.ru/en/data-deletion.
How to revoke access: creator account → “Channels” → “Disconnect”, or in your Google Account settings: https://security.google.com/settings/security/permissions. After access is revoked, no new data is requested with it.
Limited Use. CutPay's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
YouTube API Services. CutPay uses YouTube API Services. By connecting a channel you agree to be bound by the YouTube Terms of Service: https://www.youtube.com/t/terms. How Google processes data is described in the Google Privacy Policy: https://policies.google.com/privacy. For the automatic check and accounting we also read public data of submitted videos (title, description, statistics) through the YouTube Data API — without access to your account.
Questions about Google user data — info@cutpay.ru.
10. Instagram and TikTok
Accounts are connected through the platform's official sign-in, with read-only access. We never post, edit or delete anything on your behalf.
- Instagram (Instagram Login, professional account):
instagram_business_basic— account ID, username, name, profile picture, account type, number of followers and posts, the list of your posts (link, date, type, caption, thumbnail, likes, comments) — to find the submitted Reel and make sure it is yours, and to show you the profile and “My videos” in your account;instagram_business_manage_insights— views of the posts in “My videos”, and views, likes, comments and shares of submitted Reels for accounting. “Disconnect” deletes the access token on our side; you can also remove access in Instagram settings. - TikTok (Login Kit and Display API):
user.info.basic— ID, display name and avatar;user.info.stats— number of followers, videos and likes;video.list— the list of your latest videos (up to 20: link, cover image, date, title, views, likes, comments) for “My videos” and data of submitted ones (link, date, duration, title and description, views, likes, comments, shares). “Disconnect” revokes access at TikTok and deletes the token.
The profile (name, avatar, counters) is shown only to you in your account; it is kept while the account is connected and erased on “Disconnect”. The “My videos” list is not stored — only in server memory for up to 5 minutes. The avatar and cover images are loaded through CutPay's server — your browser does not contact the platforms' servers. The caption (description) of a submitted Instagram or TikTok video is used in the automatic check (section 4). Access tokens are stored the same way as Google tokens: encrypted only.
11. Cookies
On cutpay.ru we do not set cookies and do not use analytics counters or third-party scripts. In the user accounts (app.cutpay.ru) we use only necessary cookies: the sign-in session, protection against cross-site request forgery, and binding a platform sign-in to your browser (lives 10 minutes). The account stores your chosen color theme in the browser.