Privacy Policy

This Privacy Policy explains how Kliq (“Kliq”, “we”, “us”) handles personal data when you visit our website, create an account, or visit a page that a creator has published with Kliq (a “Kliq page”).

The short version: we collect what we need to run the service, page analytics never store raw IP addresses, we don’t sell personal data, and our database is hosted in the European Union.

Kliq is the controller for the personal data of account holders — creators, agencies and their team members — and of visitors to our own website. You can reach us at support@kliq.app.

Creators decide what their Kliq page shows and which third-party tools, such as tracking pixels, it loads. For visitor analytics on a Kliq page, we process data on the creator’s behalf to provide the service. Creators are responsible for how they use that data and for any third-party tools they add to their pages.

Account and workspace data

• Your email address, name and any profile details you choose to add.
• Sign-in data. You sign in with a link sent to your email address, or with Google or Discord. If you use Google or Discord, we receive your email address and basic profile information from that provider.
• Workspace details, such as the team members you invite, their roles and the groups you create.
• A log of changes in each workspace (the audit log), with the name and email address of the member who made each change. Workspace owners and admins can see it.

Content you create

Your pages, links, images and videos, design settings, custom domains and tracking pixel IDs.

Billing data

Payments are processed by Stripe. We receive your plan, subscription status, billing country and limited card details such as the card brand, last four digits and expiry date. We never see or store full card numbers.

Visitors of Kliq pages

When someone views a Kliq page or clicks a link on it, we record an analytics event that contains:

• a visitor identifier — a one-way, salted hash of the IP address, browser user agent, page and current date. Because the date is part of the hash, the identifier changes every day and can’t be used to follow a visitor over time. We never store the raw IP address.
• an approximate location (country, region and city) that our edge network derives from the request;
• the device type, browser, operating system and, where applicable, the in-app browser (for example Instagram);
• the referring website (domain only), UTM campaign parameters and which link was clicked.

Known bots and crawlers are not counted. When a creator enables smart location, the page looks up the visitor’s approximate city at the moment of the visit to display it; that lookup is not stored.

Our own website

We use Vercel Web Analytics and Speed Insights to understand the traffic and performance of the Kliq website and app. These tools collect aggregated usage and performance data and do not use cookies.

Referral links

If you arrive through a link with a referral code (?ref=), we count the click against that code, together with the page you landed on. If you then sign up, we link your account to the code.

Reports and support

If you report a page through the Report link, we store the page and the reason you chose. When you contact support, we keep the correspondence so we can help you.

• To provide the service — hosting your pages and serving them to visitors, including deeplinks, redirects and custom domains (performance of a contract).
• To show you analytics reports for your pages (performance of a contract).
• To process payments and keep accounting records (performance of a contract and legal obligations).
• To keep Kliq safe — preventing fraud, spam and abuse, enforcing our Terms of Service and handling reports (legitimate interests).
• To improve Kliq using aggregated website analytics and performance data (legitimate interests).
• To communicate with you about your account, security and important changes. We only send marketing emails with your consent, and you can unsubscribe at any time.

We don’t sell personal data and we don’t use it for third-party advertising.

When you log in, we set cookies that keep your session secure. The dashboard also sets kq_ws, which remembers your current workspace, and kq_sidebar, which remembers whether your sidebar is collapsed. Both last up to a year.

If you arrive through a link with a referral code (?ref=), we set kq_ref, which keeps that code for up to 60 days, or until your first visit to the dashboard after signing up.

We don’t use advertising or cross-site tracking cookies in our app or on our website.

Kliq pages may keep small values in the visitor’s browser storage so that features work as expected — for example to remember that a visitor confirmed they are 18 or older, that they dismissed the in-app browser screen, or to keep an evergreen countdown consistent. These values stay on the device.

Tracking pixels added by creators. Creators can add their own pixels (Meta, TikTok, Google Analytics 4, X, Snapchat or Google Tag Manager) to their pages. Those tools are operated by the respective companies under their own privacy policies and may set cookies. The creator who adds them is responsible for informing visitors and for obtaining any consent the law requires.

These providers help us run Kliq and process personal data under data processing agreements:

• Vercel — hosting, our global edge network and website analytics.
• Cloudflare — custom domains: certificates and passing visitors’ requests, including their IP address, on to Kliq.
• Supabase — database, file storage and authentication, hosted in the EU (Frankfurt, Germany).
• Stripe — payment processing and invoicing.

Kliq pages can also load content directly from other companies, which then receive the visitor’s IP address and browser details under their own privacy policies: Google, for the website icons shown next to links (through google.com/s2/favicons), and YouTube, Spotify, SoundCloud or Vimeo, when a page includes a video or music player from them.

Inside an Agency workspace, team members can see the pages and analytics that their role allows. We may also disclose data when the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or acquisition — in which case we will tell you first.

Our database is hosted in the European Union. Some providers, such as Vercel and Stripe, may process data outside the EU/EEA — for example in the United States — to deliver pages quickly worldwide or to process payments. Where that happens, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

• Account data and content — for as long as your account exists. If you ask us to delete your account, we delete or anonymize your personal data, except records we must keep by law.
• Analytics events — for as long as the account exists. Deleting a page also deletes its events.
• Billing records — for as long as tax and accounting laws require.
• Reports and support emails — as long as needed to handle them and to keep the platform safe.

We protect data with encryption in transit (HTTPS), row-level access controls in our database, hashed API keys, and least-privilege access for our team. No system is perfectly secure, but we work hard to keep yours safe — and if a breach affects your data, we will notify you and the authorities where the law requires it.

Under the GDPR and similar laws, you have the right to:

• access the personal data we hold about you and receive a copy of it;
• correct inaccurate data, or have your data deleted;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To use any of these rights, including deleting your account or getting a copy of your data, email support@kliq.app. We act on requests within the time the law sets. If you visited a creator’s page, we may forward your request to that creator. You also have the right to lodge a complaint with a supervisory authority; in the Czech Republic that is the Office for Personal Data Protection (ÚOOÚ).

Kliq is not intended for anyone under 18, and we don’t knowingly collect personal data from minors. If you believe a minor has created an account or appears on a Kliq page, please report the page or contact us at support@kliq.app and we will act quickly.

We may update this policy as Kliq evolves. The date at the top shows when it last changed. If the changes are significant, we’ll let you know by email or in the dashboard before they take effect.

Questions, requests or concerns about privacy? Write to support@kliq.app. You can also read our Terms of Service.