Privacy Policy

1. About this policy

This policy explains how Clikr handles personal data when you use clikr.to, create an account, connect a social account, or visit a Clikr link. For privacy questions or requests, contact hello@clikr.to.

2. Information we collect

• Account information: your email address, account identifier, username, preferences, and profile information supplied by a sign-in provider such as Google.
• Links: your links and destinations.
• Social media connections: when you connect a social account (Instagram or TikTok), we store the account identifier, username or display name, and the access tokens needed to publish on your behalf. For TikTok, this includes a refresh token. Tokens are encrypted before we store them and are only sent over encrypted connections.
• Your content: the captions, images, videos, drafts, schedule times, and post settings you add, and the publishing status of each post, so we can publish it to the accounts you choose.
• Post analytics: performance data for posts you publish through Clikr, fetched from the connected platform to show you your results. For Instagram, this includes views, reach, likes, comments, saves, shares, and total interactions, plus watch time for videos. For TikTok, this includes views, likes, comments, and shares.
• Billing information: subscription status, payment and customer references, and transaction information needed to manage your subscription. Stripe processes your payment details; Clikr does not store your full payment card number.
• Link visits and technical information: click times, referring websites, approximate country and region, browser, operating system, device type, and request and network information used for analytics and bot detection. We process IP addresses and derive a protected identifier from them to estimate unique visitors. This identifier is pseudonymous, not anonymous.
• Communications: information you send us when you request support or exercise your privacy rights.

3. How and why we use information

We use account, content, connection, and billing information to provide the service you request, authenticate you, redirect links, manage subscriptions, and carry out publishing instructions. Where applicable, the legal basis is performance of our contract with you.

We use your social connections and content to publish and schedule posts to the Instagram and TikTok accounts you connect, and to show you analytics for those posts. We do not sell your data, and we do not use your content for advertising.

We process technical information to maintain security, prevent abuse, diagnose problems, and provide useful click analytics. Where applicable, we rely on our legitimate interests in operating a reliable service and helping account holders understand their traffic, balanced against your privacy rights.

We also process information to comply with legal obligations, including required billing records. Where processing requires consent, we will ask for it; you can withdraw that consent without affecting processing that took place before withdrawal.

4. Cookies and sign-in

Clikr uses cookies and similar storage to maintain your sign-in session and support essential account functionality. Blocking these may prevent parts of the service from working. Google sign-in, Stripe checkout, and websites you visit through a Clikr link may use their own cookies under their own policies.

5. Who receives information

We share information as needed with providers that operate our infrastructure, authentication, database, storage, and payments, including Supabase and Stripe. If you choose a third-party sign-in provider such as Google, information is exchanged with that service to sign you in.

When you publish, we send your content to the social platforms you connect (Instagram or TikTok). Their handling of it is governed by their own terms and privacy policies.

Clikr account holders can view analytics about visits to their links, including traffic sources, approximate location, and device information. Information you choose to publish or include in a public link may be visible to others. Destination websites receive your visit when you follow a link and handle that information under their own privacy policies.

We may disclose information where required by law or necessary to protect users and the service. If a provider processes data outside your country, applicable data protection requirements still apply. Where required for transfers from the European Economic Area, we use a recognized transfer mechanism, such as an adequacy decision or standard contractual clauses. Contact us for details about applicable safeguards.

6. Data retention and account deletion

We retain personal data for as long as needed to provide the features you use and fulfill the purposes described in this policy. You can request deletion of your data or account at any time.

Social connection tokens are kept until you disconnect the account or delete your Clikr account. At that point, they are deleted.

If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain records, such as billing records. Records retained for a legal requirement are kept only for the required period and purpose.

Deleting your account removes your Clikr links, saved destinations, click history, connected social account information, drafts, scheduled posts, uploaded media, and analytics, and cancels your subscription. Deleting only your Clikr data keeps your login and subscription active.

Deleting data from Clikr does not remove posts already published on social platforms or information held independently by destination websites. Manage or delete that information directly with the relevant service.

7. Your data and account

To access, correct, export, or delete your data, or to delete your account, contact us at hello@clikr.to and we will handle it promptly.

You can disconnect any Instagram or TikTok account at any time from the Accounts page in your dashboard. This deletes its tokens right away and stops any further posting to that account. Scheduled posts for that account that have not started publishing are cancelled. For TikTok, we also ask TikTok to revoke Clikr's access.

Email us from the address associated with your account, tell us which action you are requesting, and include your Clikr username if you have one. If your request relates to a link you visited, include the link and approximate visit time so we can help locate relevant information. We may request information reasonably necessary to verify your identity.

Depending on applicable law, you may also have the right to restrict or object to processing, receive your information in a portable format, and withdraw consent. We respond without undue delay and within the deadlines required by applicable law, generally within one month for requests under the GDPR. If a legally permitted extension is necessary, we will explain why and when to expect a response.

You may lodge a complaint with your local data protection authority. You can learn more about these rights in the European Commission's guidance.

8. Security

We use technical and organizational measures designed to protect personal data. No online service can guarantee absolute security. Keep your email and connected accounts secure, and contact us if you suspect unauthorized access to your Clikr account.

9. Policy updates

We may update this policy as Clikr changes. The date above shows the latest revision. We will provide additional notice of material changes where required by law. You can also read our Terms of Service.