About you, as a customer
When you open an account we store:
- your name and email address, so the account has an owner and we can reach you about it
- a hash of your password — we never hold the password itself and cannot recover it
- your workspaces, the links and rotators in them, and the settings you choose
- billing details held by Paddle, our payment processor: we see the plan, the amount and the last four digits, never the card
- anything you write to us in support chat, including screenshots you attach
About the people who click your links
Every click through a ClickLookup link is recorded so you can report on it and so the quality score can tell a person from a bot. For each click we store the time, the destination, the country and city, the network operator, the device, browser and operating system, the referring page, the user agent and the quality score we worked out.
We do not store the visitor's IP address. It is hashed on arrival and only the hash is kept, which is what lets us tell a repeat click from a new one without holding the address itself. We do not set cookies on your visitors, and we do not build a profile of anybody across the links of different customers.
The click data belongs to your workspace. No other customer can see it, and we do not sell it, share it or use it to advertise to anyone.
Cookies
On our own site we set one cookie to keep you signed in, one to remember which workspace you were looking at, and — while an admin is helping you — one that records that. There are no advertising or analytics cookies. Clearing them signs you out and nothing else.
Who else sees it
- Paddle, which handles payment and is the merchant of record for your subscription
- our hosting and email providers, which process data on our instructions and store it for us
- anybody you invite into your workspace, which is your decision to make and to undo
We hand data to authorities only where the law requires it, and we will tell you when we are allowed to.
How long we keep it
Click records are kept for as long as your account is open, so your reports stay intact. Close your account and the workspace and everything in it — links, rotators, clicks, conversions — is deleted within 30 days. Invoices are kept for as long as tax law requires, which is usually seven years.
What you can ask for
You can export your data at any time from the console, and you can ask us to correct it, delete it or send you a copy. Write to support@clicklookup.com and we will answer within 30 days. If you are in the UK or the EU you also have the right to complain to your data protection authority.
Security
Traffic is encrypted in transit, passwords are hashed with argon2id, and access to production is limited to the people who need it. No system is perfect: if data of yours is ever exposed we will tell you what happened and what we did about it, without waiting to be asked.
Changes
If this policy changes in a way that affects you we will email you before it takes effect. The date above always says when it last changed.