Privacy Policy

1. Scope and processing roles

This Policy applies to Clientky, its website, platform, applications, integrations, communications, and related services.

For account, billing, security, analytics, support, and general operational data, Clientky may act as a data controller. For data that the customer uploads, connects, or processes about its end users, Clientky typically acts as a processor or technology provider processing data on behalf of the customer.

The customer is responsible for having a valid legal basis, informing its end users, and obtaining any consent required to send messages, import contacts, enable integrations, or process data through Clientky.

2. Data we collect

We may collect the following categories of data, depending on how you use Clientky:

• account data: name, email, phone number, organization, role, credentials, preferences, and user settings;
• billing and subscription data: plan, subscription status, currency, payment history, applicable taxes, and identifiers provided by Whop, Polar, or other processors;
• technical and usage data: IP address, browser, device, operating system, visited pages, events, logs, access dates, performance metrics, cookies, and similar identifiers;
• service operational data: conversations, messages, contacts, tags, notes, files, attachments, automations, reports, tasks, calendar events, and workspace settings;
• support and communication data: inquiries, tickets, emails, responses, voluntarily submitted information, and records required to handle requests;
• commercial form data: demo requests, contact forms, sales inquiries, company data, job title, country, WhatsApp number, acquisition source, and communication preferences;
• career application data: CV, experience, portfolio, contact details, form responses, and any information submitted during recruiting processes;
• partner and marketplace data: information from applicants, partners, reviews, business profiles, specialties, country, contact details, materials, logos, and content submitted for authorized directories or public pages;
• AI data: prompts, instructions, conversations, operational context, and generated outputs when artificial intelligence features are enabled.

3. Data from third parties and integrations

When you connect external services, Clientky may receive data from Meta, WhatsApp Business Platform, Instagram, Facebook, Messenger, Google, connected APIs, email services, Whop, Polar, AI providers, and other systems authorized by the customer.

This data is used to synchronize conversations, contacts, messages, events, files, payments, subscriptions, automations, and other features requested or configured by the customer.

Each external service maintains its own terms and policies. Clientky does not control those third parties' independent decisions, permissions, reviews, API changes, technical limits, or practices.

Our website and platform may contain links to third-party sites or services. Those third parties have their own privacy policies and terms, and Clientky does not control or assume responsibility for their independent practices.

When WhatsApp Business Platform or the WhatsApp Cloud API is used, Meta may process, transmit, or temporarily store messages and metadata according to its documentation, policies, and applicable terms.

4. Purposes of processing

We use personal data for legitimate purposes related to the service, including:

• providing, operating, maintaining, personalizing, and improving Clientky;
• creating and administering accounts, workspaces, permissions, authentication, and sessions;
• processing payments, subscriptions, billing, taxes, renewals, and cancellations;
• enabling integrations with Meta, WhatsApp, Instagram, Messenger, email, Google, AI providers, and other connected services;
• providing support, responding to inquiries, and sending operational communications and service notices;
• protecting security, preventing fraud, investigating abuse, auditing activity, and enforcing terms and policies;
• performing analytics, measurement, attribution, product improvement, and campaign optimization where applicable;
• complying with legal obligations, authority requests, regulatory retention, and defense of rights.
• sending commercial or product communications where applicable, and allowing you to unsubscribe or opt out of them;
• generating aggregated, statistical, or de-identified data for analytics, security, quality, research, product improvement, and development of new features, without directly identifying natural persons.

5. Legal bases

Where applicable law requires a legal basis, Clientky may process data based on performance of a contract, consent, legitimate interest, compliance with legal obligations, or protection of the rights and legitimate interests of Clientky, customers, or third parties.

The customer must ensure that processing data about its end users through Clientky has a valid legal basis, including consent where required for commercial communications, WhatsApp messaging, campaigns, integrations, or automations.

6. Data sharing and subprocessors

We do not sell personal data. We may share data with providers and subprocessors only as necessary to operate Clientky, provide features, process payments, host infrastructure, deliver communications, run integrations, provide AI, perform analytics, protect security, or comply with legal obligations.

Depending on service usage, providers may include GCP or other cloud providers, Meta, Google, email services, Whop, Polar, OpenRouter, Deepgram, analytics tools, and other subprocessors published by Clientky.

The updated list of subprocessors is available at /subprocessors. Not all subprocessors apply to all customers; some are activated only when the customer enables a specific integration or feature.

We may also disclose data where necessary to comply with law, respond to valid authority requests, protect rights, prevent fraud or abuse, investigate security incidents, enforce our agreements, or participate in a merger, acquisition, financing, reorganization, sale of assets, or similar corporate transaction.

7. International transfers

Clientky uses global providers and may process, transfer, or store data in countries other than the user's or customer's country of residence, including the United States and other jurisdictions where our providers operate.

Where appropriate, Clientky adopts reasonable contractual, technical, and organizational measures to protect data in international transfers, including agreements with subprocessors and access restrictions based on operational need.

8. Retention and deletion of data

We retain data while the account is active, while necessary to provide the service, comply with legal obligations, resolve disputes, prevent fraud, maintain security, backups, auditing, or exercise rights.

As a general rule, account and service data is retained during the life of the account; billing, payment, and tax data for legally required periods; security and audit logs for the period needed to investigate and prevent abuse; and backups during limited retention cycles before overwrite or secure deletion.

When data is no longer needed, Clientky may delete, anonymize, or retain it in a limited manner where there is a legal obligation, legitimate interest, contractual requirement, or reasonable technical need, such as backups for a limited period.

The customer may delete certain data from the application, disconnect integrations where that option is available, delete the account, or request assistance by writing to support@clientky.app.

For Facebook and Instagram, Clientky provides a data deletion callback or endpoint to handle requests initiated through Meta, together with a request status page where applicable. This feature complements the options available inside the application.

9. User rights

Depending on applicable law, you may have the right to request access, rectification, update, deletion, objection, restriction, portability, or withdrawal of consent regarding your personal data.

You may exercise these rights from platform settings where available or by writing to support@clientky.app. Before responding, Clientky may request reasonable information to verify identity, account, authorization, or scope of the request.

Where Clientky acts as a processor for data about a customer's end users, we may need to forward or coordinate the request with the customer acting as data controller.

If you are an end user of one of our customers, we recommend contacting that customer first, because it determines the source, purpose, content, and duration of processing within its workspace. Clientky will assist the customer where appropriate and technically feasible.

10. Security

Clientky applies reasonable technical and organizational measures to protect personal data, including access controls, least privilege, encryption in transit and at rest where appropriate, backups, auditing, monitoring, and vulnerability management.

Security also depends on the customer and authorized users. You must protect credentials, devices, integrations, tokens, internal permissions, and automation settings.

No system is completely secure. If you identify a vulnerability, unauthorized access, or incident related to Clientky, contact us immediately at support@clientky.app.

11. Cookies, analytics, and marketing

Clientky uses cookies and similar technologies to operate the website, maintain sessions, remember preferences, measure performance, analyze usage, improve the product, and, where applicable, measure or optimize marketing campaigns.

Cookies may be classified as essential, analytics, marketing, and preference cookies. Essential cookies are necessary for the website or service to function; others may depend on your preferences, consent required by applicable law, or available settings.

When tools such as Meta Pixel, Conversions API, Google Analytics, or other measurement technologies are enabled, Clientky may collect and share events with providers such as Meta or Google for measurement, attribution, fraud prevention, performance analysis, and campaign optimization.

You can manage privacy and cookie preferences at /privacy-preferences. You can also configure your browser to block or delete cookies, though this may affect certain features.

Clientky currently does not respond uniformly to browser Do Not Track signals because there is no consistent technical and legal standard for interpreting them. Where legally recognized and technically applicable signals exist, Clientky will seek to honor them in accordance with applicable law.

12. Artificial intelligence and AI providers

Clientky may use AI providers, including OpenRouter, Deepgram, or others, to offer features such as reply assistance, classification, summaries, automations, analysis, content generation, and operational support.

When these features are used, prompts, instructions, conversations, files, customer context, or outputs may be processed by Clientky and AI providers to the extent necessary to provide the requested feature.

AI outputs may contain errors, omissions, or incorrect interpretations. The user must review outputs before sending, publishing, automating, or making decisions based on them. AI features do not constitute professional advice.

13. Integrated Data Processing Addendum (DPA)

When Clientky processes personal data on behalf of the customer, the customer acts as controller and Clientky as processor, unless applicable law or a specific relationship provides otherwise.

Clientky will process that data according to the customer's documented instructions, these legal terms, the purpose of the service, reasonable security measures, and obligations applicable to subprocessors.

The customer authorizes Clientky to use subprocessors necessary to provide the service. Clientky will maintain reasonably updated information about those subprocessors and apply contractual obligations oriented to confidentiality, security, and data protection.

14. Minors

Clientky is not directed to individuals under 18 years old. We do not knowingly collect data from minors. If we become aware that a minor's data has been processed without valid authorization, we will take reasonable measures to delete it or restrict its processing.

15. Changes, governing law, and contact

Clientky may update this Policy to reflect legal, technical, commercial, provider, or service changes. Material changes will be communicated through reasonable means.

This Policy is governed by the laws of the Argentine Republic, without prejudice to privacy, data protection, consumer, or other mandatory rules that may apply depending on the case.

For privacy questions, rights requests, data deletion, security, or processing of personal information, contact us at support@clientky.app.