Privacy Policy

Clicko (“we”, “us”, “our”) is a web and AI agency based in Montréal, Québec, registered with the Registraire des entreprises du Québec. We are committed to protecting your personal information. This policy explains what we collect, why, how we protect it and the rights you have. It applies to our website (clicko.ca) and to our services: the prospecting dashboard (app.clicko.ca), the AI phone receptionist (app.clicko.ca) and Clicko Reviews, our Google review management service. We handle personal information in accordance with Quebec’s Act respecting the protection of personal information in the private sector (Law 25) and Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

Website visitors. We only collect the information you choose to give us through our contact forms and on-site chat:

• Your name, email address and phone number;
• The details you share about your project (type of business, needs, budget and your message);
• If you use the AI chat assistant, the messages you send in that chat.

Customers of our services. When you create an account or subscribe, we collect your name, email address, business name and the settings you choose. Payments are processed by Stripe; we never receive or store your full card number.

AI phone receptionist. When someone calls a business that uses our receptionist, the call audio is processed in real time to transcribe and answer the call. We keep the caller’s phone number, the transcript, and the details needed to handle the request (message, appointment, callback), on behalf of that business.

Clicko Reviews. When a business connects its Google Business Profile, we access the Google data described in the next section. The business may also give us the first name, phone number and email address of its own customers so we can send them a request to leave a review, on the business’s behalf.

We do not use advertising or analytics cookies, and we do not track you across other websites. We count visits with Cloudflare Web Analytics, which sets no cookies and does not identify you. Your browser keeps your language preference and, for 90 days, how you first reached our site (for example, from Instagram); that second piece is sent to us only if you create an account, so we know which channels bring new customers.

Google user data

If you connect a Google account to Clicko Reviews, you authorize us, through Google’s consent screen, to manage your Google Business Profile (scope business.manage). With that access we read your business accounts and locations, the reviews left on your locations and your existing replies, and we publish replies to reviews.

We use this data only to provide Clicko Reviews to you: to show your reviews in your dashboard, to draft replies with AI, to publish replies that you approved or that match the automatic-reply settings you chose, to alert you about new reviews and to produce your reports. The text of a review is sent to our AI provider only to generate a draft reply; it is not used to train AI models.

We never sell Google user data, never use it for advertising, and never let people read it except with your permission, for security purposes, to comply with the law, or when it is aggregated and anonymized for our internal operations. Your Google access tokens are encrypted at rest.

Clicko’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect your Google account at any time from your Clicko dashboard or at myaccount.google.com/permissions. When you disconnect or cancel, we delete your Google tokens immediately and the review data we stored within 30 days.

Why we collect it

We use personal information to respond to your requests, prepare demos and quotes, provide and bill the services you subscribe to, send the messages that our customers ask us to send on their behalf, keep our services secure and meet our legal obligations. We do not use it for any other purpose without your consent.

Consent

By submitting a form, creating an account or connecting a service, you consent to the collection and use of your information for the purposes described above. You may withdraw your consent at any time (see “Your rights” below).

When a business gives us its customers’ contact details for review requests, that business confirms it obtained their consent to be contacted, as required by Canada’s Anti-Spam Legislation (CASL). Every message identifies the business and can be stopped by replying STOP or using the unsubscribe link; we honour these requests right away.

How we share information

We never sell personal information. We share it only with the service providers we rely on to operate our website and services, and only to the extent needed:

• Hosting, databases and site statistics: Hostinger, Vercel, Railway, Supabase and Cloudflare;
• Artificial intelligence: Anthropic (text generation), Deepgram (speech-to-text) and ElevenLabs (voice);
• Communications: Twilio (calls and SMS), Resend (email) and Formspree (website forms);
• Payments: Stripe;
• Google, when you connect your Google Business Profile or when we look up public business information.

These providers may store or process information outside Québec, mainly in the United States. Before communicating personal information outside Québec, we assess whether it will receive adequate protection, and we bind our providers by contract to protect it.

How long we keep it

We keep personal information only as long as necessary for the purposes described above or as required by law. When you close your account, we delete your data within 90 days, except billing records we must keep for tax purposes. Google data is deleted as described in the “Google user data” section.

Your rights

Under Law 25 and PIPEDA, you have the right to access your personal information, to have it corrected or deleted, to withdraw your consent and to request the portability of the information you provided. To exercise these rights, contact us at gabriel@clicko.ca. We answer within 30 days. If you are not satisfied with our answer, you may file a complaint with the Commission d’accès à l’information du Québec.

Person responsible for the protection of personal information

As required by Law 25, the person responsible for the protection of personal information at Clicko is:

Gabriel Blier, Founder — gabriel@clicko.ca

Security

We take reasonable technical and organizational measures to protect personal information against loss, theft and unauthorized access, including encryption in transit, encryption of access tokens, and access restricted to the people who need it. If a confidentiality incident presents a risk of serious injury, we will notify the people concerned and the Commission d’accès à l’information, as the law requires.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page indicates the most recent revision. We will notify our customers by email of any significant change.