Draft for checking. This hasn't been reviewed by a solicitor yet, and the bits in [square brackets] still need filling in.
Privacy
Last updated [date]
The short version
- We collect as little as we can.
- Fans who visit a page aren't tracked across the web. We count visits and taps without storing IP addresses or device details.
- Brand enquiries go straight to the creator. We don't keep a copy.
- We never see card details. Stripe handles payments.
- We never sell your data.
Who we are
clickit.bio is run by Click It Social, [company name, registered number and address], in the UK. We're the controller of the personal data described here. Questions or requests: [privacy email].
If you make a page
What we keep
- Your email address and a scrambled (hashed) password, or your basic Google profile (name, email, photo) if you sign in with Google.
- What you put on your page: name, photo, bio, links, follower counts, media kit details, drops, and any photos or videos you upload.
- Your YouTube channel's public details (name, photo, subscribers, latest videos, live streams and premieres), if you connect it.
- Your plan and whether you're paying. Stripe tells us this; we never see your card.
- Who referred you, if you signed up after tapping a creator's "Made with clickit.bio" badge.
Why
To run your account and page (our contract with you), to take payment, and to keep clickit.bio safe and working (our legitimate interests). We'll email you about your account and plan. We won't send you marketing without asking first.
If you visit a page
- Stats for the creator. We record that the page was visited or something on it was tapped, what was tapped, roughly where the visit came from (for example TikTok or Instagram, worked out from the app's browser or the site that sent you) and when. We don't store your IP address, device details or anything that identifies you.
- "New" tags show on anything a creator added in the last week. Your phone works this out from its own clock. Nothing is stored on your phone.
- Night mode reads the time on your phone to decide whether to show a dark page. The time isn't sent anywhere.
We don't use cookies on creator pages or our home page, and we don't store anything on your phone or use third-party trackers. The only cookie we use is the login cookie on app.clickit.bio, set when a creator logs in to edit their page. It's needed for logging in to work, so it doesn't need your consent.
If you send a brand enquiry
We email what you type (your brand, email, what you'd like, budget and dates) straight to the creator, with your email as the reply address. We don't keep a copy. To stop spam, we keep a scrambled version of your internet address that can't be turned back into the original, for 24 hours.
Who helps us run clickit.bio
- Supabase: accounts, database and file storage (London, UK).
- Vercel: hosting.
- Stripe: payments.
- Resend: emails, including brand enquiries.
- Google (YouTube API Services): reading public YouTube channel details. By connecting YouTube you agree to the YouTube Terms of Service, and Google's Privacy Policy applies.
- Anthropic: when you use "Fill it in" on a drop, the drop page's text and your bio are sent to write a short line for it.
- song.link: finding a song on other music services.
- Twitch and Kick: checking whether a creator is live.
Some of these are in the US. Where your data leaves the UK, it's protected by [the UK adequacy regulations or the UK International Data Transfer Agreement; check each one].
How long we keep it
- Your account and page: until you delete them. [Say how deletion works and how long backups last.]
- Visit and tap stats: [for example 26 months], then deleted.
- The scrambled address used to stop enquiry spam: 24 hours.
- Payment records: as long as the law needs us to keep them (usually 6 years).
Your rights
You can ask to see, correct or delete your data, ask us to stop using it or to limit how we use it, or ask for a copy to take elsewhere. Email [privacy email]. If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office.
Age
You need to be [13 or over] to make a page. [Decide the age, and what happens for under-18s taking brand deals.]
Changes
If we change this in a way that matters, we'll tell creators by email before it happens.