Clickwise Privacy Policy — v2 services

Version dated 8 November 2026. English is the canonical version.

1. Who is responsible

Clickwise is operated by SOFT DEV FZ LLC, a Free Zone Limited Liability Company licensed by the Fujairah Creative City Free Zone Authority (Media Free Zone) under licence No. 9485/2016, at the address shown on its licence: Fujairah – Twin Towers, P.O. Box 4422, Fujairah, United Arab Emirates; or, where the merchant's or affiliate's agreement says so, by AFVENTURES NETWORK S.L., Paseo de la Habana 12, 5º dcha., 28036 Madrid, Spain, NIF B87190906 (together and separately, "Clickwise", "we"). Clickwise is the controller for the processing described in this policy, except for the clicks and sales of a merchant's visitors, which Clickwise processes as that merchant's processor (section 3.3).

Privacy contact: privacy@hello.clickwise.net

2. What this policy covers

This policy covers:

• the Clickwise panel at partners.clickwise.net (also reachable as panel-v2.clickwise.net), including affiliate and merchant accounts, sign-up and onboarding;
• the public Clickwise API and MCP server under partners.clickwise.net/api/v1/ (also served as panel-v2.clickwise.net/api/v1/, including /api/v1/mcp/), the discovery files (llms.txt, /.well-known/ai-plugin.json, /.well-known/mcp.json), the public program and catalog pages, and the product feeds;
• the Clickwise Tracker at go.clickwise.net and Clickwise redirect links under /dl/ (for example on r2.clickwise.net and share.clickwise.net), including the conversion reports ("postbacks" and pixels) they receive;
• the emails we send and receive to run the service and to contact prospective partners;
• the Clickwise voice line and WhatsApp: the phone number +1 646 362 1368, the web call page at talk.clickwise.net (linked from partners.clickwise.net/talk), and WhatsApp messages to +1 646 362 1368.

It does not cover:

• t.clickwise.net and the legacy Clickwise v1 platform, which have their own notice;
• Clickwise AI Ads at ads.clickwise.net, which has its own privacy policy;
• the websites of advertisers, affiliate networks and publishers, which process data under their own policies.

3. What data we process

3.1 Accounts, sign-up and onboarding

When you create or use an account we process:

• Identity and login: username, first and last name, email address, and your password, which is stored as a salted hash rather than in clear text. We also keep your language, your time zone and the time of your last login and last activity.
• Affiliates: country, postal address, legal entity type, tax identification number, website name, URL and country, and the payment details you enter: PayPal ID and name, or bank name, account holder, bank country and address, IBAN or SWIFT code and account number.
• Merchants: company name, country, legal entity type, tax identification number, billing address, city and postcode, and the name, phone number, email address and messenger handles of the main and technical contacts.
• Documents you upload to verify your account or tax details.
• Sign in with Google (optional): your Google account identifier, Google email address and profile picture URL.
• Two-factor authentication (optional): your authenticator secret; your recovery codes; and, if you choose to trust a device, a record of that device including its browser user agent.
• Onboarding applications, including those started through our MCP server: what you or your AI agent submit (for example company name, website, contact name and email, country, business vertical, networks used, where links will be published, free-text messages and answers to our follow-up questions), the language used, and the country estimated from your IP address (section 3.7).

Our AI assistant (Google Gemini, section 5) evaluates onboarding applications and asks follow-up questions. Merchant applications can be approved or declined automatically on the basis of that evaluation. You can request human review of an automated decision by writing to privacy@hello.clickwise.net.

3.2 Public API and MCP server

For every call to a tool on our MCP server we record: the time, the tool name and method, the result status, the response time, the name of the AI client when it can be identified, your IP address, your user agent, the protocol version, a summary limited to selected request fields, a summary of the response, any error message, and the linked affiliate account or application, if there is one.

Product search and product feed tools require an affiliate API key (X-API-Key), which links those calls to the affiliate account. The request_tracked_links, request_merchant_onboarding and update_profile tools receive the kinds of data described in 3.1, for example a contact or claim email, display name, website, country and payment method.

The public program and catalog pages, llms.txt, the manifests and the product feeds describe programs and products. Visiting them produces the request logs described in 3.5. The public affiliate-program pages may also load the OpenAI measurement pixel, under the rules in 3.4.

3.3 Tracking links, clicks and conversions

When someone follows a Clickwise tracking link on go.clickwise.net or a /dl/ link, we record a click with: a click ID; the time; the host; campaign, affiliate and link identifiers; the destination URL; any sub-ID supplied by the affiliate; the IP address as received, not truncated, masked or hashed; the browser user agent; the HTTP Referer; and, when present in the link, advertising click identifiers such as Google's gclid, gbraid and wbraid, and an external click ID. Clicks recorded by our earlier tracking platform are also copied into this system. The copies can include the kinds of data described above, except the IP address and the user agent, and, where that platform recorded them, the visitor's country, city and device type.

For a click on a /dl/ link, we store the visitor's country as a two-letter code when the request already carries it from our load balancer; we do not look it up for this and store no other location. If a link restricts traffic by country, the /dl/ redirect looks up the country of the IP address in our own database (section 3.7) to choose the route; the result of that lookup is not stored with the click.

The tracker's /api/touch endpoint can create or recover a click from identifiers supplied to it. It stores the same kinds of data and does not set a cookie.

The destination website, and the affiliate networks that handle the link, receive the parameters contained in the destination URL. These can include identifiers that Clickwise adds so the sale can be attributed.

The cwclk click ID. The click ID is a random value that Clickwise creates when someone follows a tracking link. When the link leads to a merchant that runs its program on Clickwise, we add it to the destination address as the cwclk parameter, and, except where 3.4 says it is not set, the redirect also stores it in the cwclk cookie, for the program's cookie days. For these clicks and the sales attributed to them, including the click ID and order data, Clickwise acts as the merchant's processor: we use them only to track, attribute and pay commissions and to prevent fraud in that merchant's program. Clickwise acts as an independent controller only for its own commission, invoicing, accounting and tax records, and for the account data of merchants and affiliates. The click ID is shared with the merchant of that program, which receives it on its website and sends it back to us with the sale: through our conversions API, or through the payment provider it connects to Clickwise (Stripe or Lemon Squeezy). When a payment provider sends us a payment event, we keep only what we need to attribute the sale and pay the commission: identifiers, amounts, currency, status, the click ID and dates. The affiliate can see the click IDs of its own clicks in its reports. As controller of its site, the merchant informs its visitors and, where the law requires it, obtains their consent before the click ID is kept; our integration instructions ask merchants to keep it no longer than the program's cookie days. On our side, the click ID is kept with the click and with the sales attributed to it, as described in section 7.

Conversion reports. When an advertiser, a network or a website reports a sale, lead or other event to us, including the conversion notifications that affiliate networks send us server to server, we record the event type, order ID, amounts, commission, currency, status, programme, the click ID and any Google click identifiers supplied, together with technical data about the reporting request: IP address, user agent, Referer, HTTP method, path and query parameters, and, for some reports (such as those from affiliate-network webhooks), the request body. When the report is a pixel loaded by a browser (for example on an order-confirmation page), these technical data are those of that browser.

3.4 Cookies and similar technologies

Clickwise app. The affiliate app at partners.clickwise.net/app/ uses the cookies above to keep you signed in. When you open or install it, a service worker stores on your device only the app's own files (page shell, styles, scripts, icons and an offline page) so that it opens quickly. It does not store account data, links or figures: they load from our servers each time. Removing the app or clearing the site's data deletes these files.

In the European Economic Area, the United Kingdom and Switzerland, or when we cannot determine your country, the redirect does not set cwclk: the click ID travels only in the destination address, and the merchant is responsible for keeping it only with your consent. Elsewhere, Clickwise considers cwclk a network attribution cookie necessary to calculate and pay commissions. A tracking redirect works without cookies or JavaScript, and your browser settings can block or delete cookies. When the ad platform checks a tracking link in the background ("parallel tracking"), a cookie set in that background request does not necessarily reach your browser.

OpenAI measurement pixel. On the affiliate and merchant sign-up pages and on the public affiliate-program pages we may load OpenAI's Ads Measurement Pixel, a script hosted by OpenAI. Where the law requires prior consent for it (including the European Economic Area, the United Kingdom, Switzerland and Brazil), or when we cannot determine your country, it loads only after you accept advertising measurement (cw_consent=all); until then, neither the pixel script nor a request to its host is loaded. Elsewhere it loads unless you have chosen essential cookies only or your browser sends a Global Privacy Control signal. We infer your country from your IP address to apply these rules. After a successful sign-up or application, the page sends OpenAI an event name and a reference built from the internal number of the new account or application. We do not pass form fields, email addresses, names or URLs to it. You can change your choice at any time with the "Cookie settings" link on those pages; choosing essential cookies stops future loads and measurement events. If the pixel has already loaded, that choice reloads the page to stop it. What the script reads or stores in your browser is determined by OpenAI.

Sign in with Google. If you choose it, Google's sign-in service runs in your browser under Google's terms.

The panel home page loads no advertising scripts. It loads our own product analytics script described in 3.9, which sets no cookies and uses no browser storage. Where prior consent is required, or when we cannot determine your country, it shows a cookie banner; the "Cookie settings" link in its footer lets you change your choice. The sign-up and public affiliate-program pages also provide the consent notice and cookie settings.

3.5 Server logs

For each request to our services, our hosting provider, Google Cloud, records the IP address, user agent, full requested URL including query parameters (which can include click identifiers such as gclid), method, status, size and response time, and the Referer when the browser sends one. The tracker's own application log records the route name, not the path or query string. IP addresses are also used as keys of per-minute rate-limit counters, which expire after 60 seconds.

For provisional publisher signups, we store a keyed hash (HMAC-SHA256) of the IP address in the application for 90 days to prevent abuse and detect duplicates. We do not store the raw IP address in that application field; a daily task removes the hash after 90 days.

3.6 Emails and outreach

• Sending. We send service emails and outreach through Resend, using the sender domain send.clickwise.net, and through the Gmail API of our Google Workspace mailboxes.
• Delivery events. Resend reports delivery events to us: sent, delivered, opened, bounced, complaint and delayed. We store them with the message.
• Replies and incoming mail. Mail sent to @clickwise.net addresses is delivered to a Google Workspace mailbox. Our systems read it automatically and store the sender, recipients, date, subject and body in our contact records. Google Gemini may classify and summarise it and draft a reply. Mail sent to certain personal mailboxes is excluded from automated reading.
• Order and sales reports. This mailbox may receive, from affiliate networks, partners and merchants, reports of orders that may include buyer details, used only to validate and reconcile commissions. Report attachments are not loaded into our panel or sent to AI tools; the text of the email may be processed by an AI service (Google Gemini) to classify and summarise the email and draft a reply. These emails are kept in the mailbox; those that support commission and accounting records are kept for as long as tax and accounting law requires.
• Outreach. To find prospective merchants and publishers, we collect business contact data: company name, website or domain, contact name, business email address, country, industry, affiliate networks used, and a research summary written by our AI. Our sources are affiliate-network data, public websites, referrals, manual entry, incoming messages, Clickwise AI Ads, and the B2B contact-data providers Hunter, Apollo, Prospeo and Snov.io. We check with Bouncer whether an address can receive email. If a recipient reports our message as spam, the contact is set to "do not contact". Before any outreach is sent, the system checks that status and any recorded opt-out.

• Privacy requests. Messages to privacy@hello.clickwise.net are received by Resend for human handling, outside the automated commercial and onboarding workflows. The panel records the sender, recipient, message identifiers, time and handling status, without fetching or retaining the message body or subject in that record. A notification containing the sender and subject is sent to the owner’s Workspace mailbox. The complete message remains in Resend for the person handling your request. Correspondence involving protected personal mailboxes is excluded from this automated intake. Resend’s shared-account inbound webhooks also notify other internally operated projects of message metadata, including sender, recipient and subject.

3.7 Language and country detection

We look up the country of your IP address in a database kept on our own servers (DB-IP «IP to Country Lite», CC BY 4.0: IP Geolocation by DB-IP) in these cases: when you open the panel home page with no language in the address, when you use the sign-up and onboarding forms, when you follow a /dl/ link that is restricted by country, and, if the request does not already carry your country, to apply the cookie rules in 3.4. Your address is not sent to any third party for this, and the result is not stored, except that for onboarding applications the estimated country is stored with the application.

3.8 Phone calls, web calls and WhatsApp with our AI assistant

Calls to our phone numbers and to the web call page, and messages to our WhatsApp number, are answered by an AI assistant, not by a person. On calls it says that it is an AI assistant when it greets you, and it answers truthfully if you ask. Our WhatsApp profile also states that an AI assistant answers. If you prefer not to talk to an AI, write to partnerships@clickwise.net.

• Calls. Phone calls are connected through Twilio. While the call lasts, its audio is streamed to the Google Gemini Live API so that the assistant can understand you and answer. We do not record call audio. Gemini transcribes both sides of the conversation. With each call we store your phone number, the time, duration and direction of the call, the transcript (up to 20,000 characters), a summary, the outcome and technical metrics. The assistant uses earlier calls from the same number as context.
• Web calls. On talk.clickwise.net, the audio goes from your browser to our server and to Gemini Live in the same way, and the transcript and summary are stored as for phone calls. To prevent abuse, we count calls per day and per IP address per hour; the counter is keyed by a one-way hash of your IP address, not by the address itself.
• WhatsApp. We use Meta's WhatsApp Business Platform (Cloud API): Meta hosts and delivers the messages between you and us. For each incoming message we store your WhatsApp number and profile name, the time, the message type and text, and the identifier, type and file name of any attachment. We also keep the latest 60 turns of the conversation: your text messages and the assistant's answers. The text of your message and the recent conversation are sent to the Google Gemini API to write the answer. Voice notes are downloaded from Meta and sent to Gemini so that the assistant can understand them; we do not keep the audio. The assistant answers a limited number of messages per number each day.
• Your affiliate account on WhatsApp. If you are a Clickwise affiliate, you can link your WhatsApp number to your account: you give us the account's email, we send a 6-digit code to that email, and you type it in the chat. While the number is linked, the assistant can read your programs, performance reports, conversions and payment status (balance, next payout and a masked payout method) and create your tracked links, with the same permissions as an app connected to your account through our MCP server (read and links only). It cannot change your payout details or postback settings, apply to programs, or approve anything. The link appears among your account's connections as «Clickwise WhatsApp»; it ends when you revoke it there, write «unlink» in the chat, or change your password. We keep the linked number, the account, when it was linked and a hash of each code; codes expire after 15 minutes. What the assistant reads to answer you is sent to the Google Gemini API and becomes part of the WhatsApp conversation.
• Linking WhatsApp from your profile (affiliates, merchants and Clickwise AI Ads users). You can also link your WhatsApp number from your profile in the panel or on ads.clickwise.net. You accept a consent that says what the channel is for («I agree that Clickwise may message me on WhatsApp about my account and my campaigns, and to use this channel to ask about them. I can opt out at any time by writing STOP or from this profile.»), we show you a one-time code that expires after 15 minutes, and you send «CW ALTA» with that code from the WhatsApp number you want to link: that message proves the number is yours. A number links to one account, and a number linked to another account is not taken over. An affiliate gets the same link and permissions as in the previous point. For a merchant, while the number is linked the assistant can read the status of your Clickwise account and of the ad accounts connected to it and, where available, the figures, campaigns and alerts that Clickwise AI Ads shows you; it cannot change campaigns, budgets, payments or settings. We email you when a number is linked, and when you unlink it in the chat or from your profile; the email never shows the full number. The link ends when you write STOP (or BAJA) in the chat, disconnect it from your profile or change your password; a merchant's link also ends if the account is closed or becomes a staff account. Commands (the «CW ALTA» message and its code, STOP, BAJA and BLOQUEAR, which blocks changes over WhatsApp for your account) are handled by fixed rules before the assistant: they are not sent to the Google Gemini API, and codes and PINs are never kept in the message records; we keep which command arrived and our answer. If changes confirmed over WhatsApp are added later, they will need a PIN, which we store only as a hash. An access token pasted in the chat is removed before the message is stored or reaches the assistant, and we ask you to revoke it. We keep the linked number, the account, when it was linked, the version and time of your consent and whether you asked for campaign alerts on WhatsApp (for now they are sent by email), a record of each consent and opt-out, and a hash of each code.
• Brainstorm with Clickwise. If you are a Clickwise affiliate or merchant, you can start a voice brainstorm from your account with the «Brainstorm with Clickwise» button. The panel creates a single-use link to the web call page and gives the assistant a summary of your account only: for an affiliate, your approved programs, the offers available in your country, your total clicks, sales and commission for the last 30 days, the channels in your profile, and this week's offers, deals and the codes you may use; for a merchant, your program (rates, conditions and allowed channels), the number of your active affiliates and their type of channel (without names or identifiers), your total clicks and sales for the last 30 days and whether you have a product feed. That summary never includes payment details or data about other accounts, and it is deleted when the call ends or the link expires. At the start of the call the assistant asks whether you accept the transcript; if you do not, we keep only the summary and the suggested actions. After the call we email you, at your account's email address, the summary and the suggested actions with their links; the links carry a reference to the session so that we can count the clicks and sales they bring in the following 7 days. Brainstorm transcripts are not emailed to our team and are deleted 30 days after the call. A brainstorm by phone, or on the web call page without that link, does not use account data.
• Contact files. For people we already work with, the assistant may use a short contact file (name, company, role, email address, phone numbers, time zone, language and notes about our relationship) to recognise you and give context. We also keep a do-not-call status for each number.
• Follow-up. After a call, the summary and the transcript are emailed to our team's Google Workspace mailbox and kept in our internal follow-up files. Each call (its summary and the follow-up action, not the transcript) and each WhatsApp message (with the assistant's answer) is also kept in a record for your number in our panel, linked to your contact record (3.6) when we know your email, so that a person on our team can follow up and, within WhatsApp's 24-hour window, answer you there. For WhatsApp, the first message of the day from each number is also emailed to that mailbox. Anything agreed in a call or chat is confirmed in writing by email.

3.9 Product analytics

To find errors and improve the panel, our public pages and our API, we record how the services are used. We do it on our own infrastructure (Google Cloud) and without third-party analytics tools.

What is recorded.

• The screens viewed, as a route template without identifiers or URL parameters.
• How you arrived, as a category only: the kind of place you came from (direct, this same site, an email, a search engine or another website), the search engine's name from a fixed list, and whether the visit came from an ad. Never the address of the page you came from or what you searched for. When a page doesn't exist, we also keep the website that linked to it (the domain only; if the link was on our own site, also which of our pages it was, without identifiers), to fix broken links.
• Clicks on buttons and links, identified by the element's technical name and never by its text.
• Video progress, by the video’s technical name, playback stage, duration and captions language.
• Progress through forms, by field name only and never what you type.
• JavaScript errors, with email addresses, phone numbers and links removed from the message.
• Requests to our API that fail.
• The response time and status of our API.
• Searches in the program and product catalog. The search text is kept only when the search returns no results, shortened to 50 characters, with email addresses, phone numbers, links and similar data removed.
• Calls to our MCP server (tool, result and timing).
• The milestones of sign-up and activation, such as approval, first link, first click and first sale.

How you are identified.

• If you are signed in, events carry a pseudonymous identifier computed from your account number with a secret key (HMAC). They do not contain your name, your email address or the account number itself.
• If you are not signed in, you get no identifier that lasts beyond the page: the script sets no cookies and stores nothing in your browser, and its session identifier exists only while the page is open.
• We keep a shortened IP address (the first three blocks of an IPv4 address or the first 48 bits of an IPv6 address), the device type, the browser and operating-system family, the page language and, when our load balancer provides it, the country.
• The full IP address is used only when the event is received, to recognise our own test traffic. The full browser identification string is not kept.

Your choice.

• If you are not signed in and your browser sends a Global Privacy Control signal, or you have chosen essential cookies only in the cookie settings of the site you are visiting, the script records nothing, and we do not record your searches or the addresses you could not find. Only the technical time and status of your requests to our API are kept, without identifiers, like the server logs in 3.5.
• If you are signed in, you can object by writing to privacy@hello.clickwise.net.
• Our staff, test and internal accounts are marked and left out of the analysis.

In the affiliate app. We also record, linked to your account, when you install or open the app, share or copy an offer, start a brainstorm and turn notifications on or off, and whether the app was opened as an installed app. We use this to measure the app and its offers. Links shared from the app carry the sub-ID pwa, which you also see in your reports.

Retention. Product events are kept for 400 days, and technical events (API timings, errors and background tasks) for 90 days. Daily totals without identifiers are kept for up to 25 months.

3.10 Clickwise Link (Chrome extension)

Clickwise Link is our browser extension for Clickwise affiliates. It is part of the Clickwise service: the Clickwise entity responsible for your account (section 1) is the controller of the data it handles, and the legal basis is the same as for your account (section 4).

• What it reads. Only the address of the tab you are on, and only when you click the Clickwise Link icon. It does not read page content, your browsing history or other tabs, and it does not run on pages in the background.
• What it sends. It reduces the address to the store's domain (for example, example.com) and checks it against your Clickwise programs on your device. To show offers and codes, or whether a store is on Clickwise, it sends that domain to our MCP server with your sign-in token, so that only signed-in affiliates can look stores up. The full page address, without the part after "#", is sent only when you tap "Copy link to this page", with your sign-in token, to create your tracked link to that page. Like every call to our MCP server and every request to our services, these calls are recorded as described in 3.2 and 3.5. Links you create are kept like links created in the partner portal (3.3 and section 7).
• What it stores. Your sign-in tokens, on your device, until you disconnect or uninstall the extension. A copy of your program list and of this week's offers in browser memory, refreshed at most every 6 hours and deleted when Chrome closes. It uses no analytics, advertising or third-party services, and no data is sold.
• What it never does. It never adds links to pages, changes pages or cookies, or touches checkout. It creates a link only when you tap a Copy button.
• Permissions. activeTab: the current tab's address, when you click. identity: the Clickwise sign-in window. storage: keeping you signed in on this device. partners.clickwise.net: talking to the Clickwise API.
• Disconnect. Use "Disconnect" in the extension, which revokes its access and deletes its data on your device, or remove "Clickwise Link" at partners.clickwise.net/oauth/connections. Uninstalling the extension deletes its data on your device.
• The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

4. Why we use your data, and on what legal basis

The following bases state the position adopted by Clickwise as controller and, for the processing it carries out as a merchant's processor, the merchant's legal basis (sections 1 and 3.3). They are not a statement that an independent legal assessment has been completed.

5. Who receives data

Service providers

The provider-by-provider assessment of processor or independent-controller roles and the associated data processing agreements remains pending.

Payments. Affiliate payments are currently made manually through banks or PayPal. The payment provider receives the recipient and transaction details needed to make the payment.

Other recipients. The advertisers, affiliate networks and affiliates involved in a referral receive the identifiers and transaction information needed for attribution and payment. We may also disclose data where the law requires it or to establish, exercise or defend legal claims.

6. International transfers

SOFT DEV FZ LLC is established in the United Arab Emirates. Our application servers, databases, cache and file storage are in Google Cloud's europe-west1 region (Belgium). Encrypted backup copies are kept in Google Cloud's europe-west4 region (the Netherlands) and in Amazon Web Services' eu-west-1 region (Ireland). Google Cloud Logging keeps our logs in its global location. The voice-line and WhatsApp records in 3.8 are stored in Google Cloud's us-central1 region (Iowa, United States). Some other providers in section 5 may process data outside the United Arab Emirates and the European Economic Area, including in the United States. Privacy mail received on hello.clickwise.net is stored by Resend in its US East (Northern Virginia) region. Mail in the clickwise.net mailboxes is stored by Google Workspace in Google's data centres, which can be outside the European Economic Area. For the clicks and sales we process as a merchant's processor, our merchant terms incorporate the EU Standard Contractual Clauses (controller to processor). The assessment of each provider’s locations and applicable transfer safeguards remains pending; this policy does not claim that particular contractual safeguards have already been put in place. Product analytics events (3.9) pass through Google Cloud Logging and are stored in BigQuery in europe-west1.

7. How long we keep data

Our retention position is to keep data while your account is active and for the time required for reconciliation and accounting. Commission, invoicing, accounting and tax records are kept for as long as the law that applies to the operator requires (for SOFT DEV FZ LLC, up to seven years under UAE tax law). When a merchant leaves Clickwise, we delete the click and sale data of its visitors, except the records we must keep by law. There is currently no automatic deletion schedule for accounts, affiliate clicks and conversion reports, commission records, MCP call records, onboarding applications, contact records or emails. Closing an account marks it as deleted without automatically erasing associated data. Other deletion and anonymisation tooling, including for click IP addresses, remains to be implemented; we do not promise a deletion deadline that the system does not enforce.

• Call audio: not recorded; it exists only while the call is in progress.
• Call transcripts, summaries and call logs, WhatsApp message records and voice-line contact files (3.8): no automatic deletion schedule. We keep them to follow up on your requests and to give the assistant context in later conversations, until you ask us to delete them. The WhatsApp conversation record keeps only its latest 60 turns.
• Brainstorm with Clickwise transcripts (3.8): deleted 30 days after the call. The brainstorm summary and suggested actions are kept as described in the previous point.
• WhatsApp account links (3.8): kept while the link is active; the record of the link, the record of each consent and opt-out and the hashes of its codes are deleted 12 months after the link ends (a code that was never used, 12 months after it expires). The record of each command (which command arrived and our answer, never a code) is deleted after 90 days.
• Web call counters: no automatic deletion; they contain only hashed IP addresses and counts.
• Server logs: 30 days.
• Database backups: automated backups; we keep the latest 30 of the panel database and the latest 7 of the tracking database, plus 7 days of transaction logs.
• Country lookup cache: 24 hours (5 minutes after a failed lookup).
• Product analytics: pseudonymised usage events (no names or email addresses; IP addresses shortened; free text scrubbed): technical events 90 days and product events 400 days (3.9). Daily totals without identifiers are kept for up to 25 months.
• Affiliate app events (3.9): 400 days.
• Cookies: as listed in 3.4. When a cookie expires, the records on our servers are not deleted.

8. Your rights

Depending on the law that applies to you, you may have the right to access your data, correct it, delete it, restrict or object to its processing (including objecting to outreach at any time), receive it in a portable format, withdraw consent where processing relies on consent, and complain to a data protection authority. The controller’s position is that the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies, and that the GDPR applies to users in the European Union under Article 3(2). We have not designated an EU representative; the representative requirement and competent supervisory authorities remain pending legal advice.

To exercise these rights, contact privacy@hello.clickwise.net. We may ask for reasonable information to confirm your identity before acting on a request. Please do not send passwords, payment details or unnecessary identity documents. Records held by an advertiser or network may need a separate request to that organisation. We will respond within one month of receiving your request. This response commitment does not mean that all records are automatically erased within that period; accounting obligations may require us to retain some records.

Calls and WhatsApp. To have the voice-line and WhatsApp records about you deleted, write to privacy@hello.clickwise.net and tell us the phone or WhatsApp number you used and roughly when. We may ask you to confirm that the number is yours, for example with a WhatsApp message from it. We will delete the call transcripts and summaries, the WhatsApp messages and the contact file held for that number and, if you wish, mark it as do-not-call. Our team does this manually. The copies sent by email, kept in the panel record for your number or added to our contact records (3.6) are handled in the same request.

9. Security

Passwords are stored as salted hashes. Two-factor authentication is available for accounts. Authenticator secrets are stored encrypted; a secret saved before encryption was introduced is converted the next time it is used. In production, session and CSRF cookies are only sent over HTTPS. Service credentials are kept in Google Cloud Secret Manager.

10. Changes to this policy

When our processing changes, we will update this policy and its date. This version reflects the implementation reviewed on 27 September 2026; section 3.8, the related entries in sections 4 to 8 and the cookie rules in section 3.4 reflect the implementation reviewed on 2 October 2026; section 3.9 and the related entries in sections 3.4, 4, 6 and 7 reflect the implementation reviewed on 9 October 2026; linking WhatsApp from the profile in section 3.8 and the related entries in sections 4, 5 and 7 reflect the implementation reviewed on 10 October 2026; the visitor's country stored with /dl/ clicks in section 3.3 reflects the implementation reviewed on 19 October 2026; the click ID, the copy of earlier clicks and conversion reports in 3.3, the cwclk and cw_sd_<campaign> cookies in 3.4 and the related entries in sections 1, 4, 6 and 7 reflect the implementation reviewed on 19 October 2026.