Privacy Policy

Your privacy matters to us. This Policy explains how Clicks collects, uses, and protects your personal information when you use our platform.

1Introduction

Clicks ("we," "our," or "us") is committed to protecting the personal information of our users. This Privacy Policy describes our practices regarding data we collect through the Clicks platform, including our website at clickscloud.io, our APIs, and related services.

This Policy is governed by applicable Nepali law, including the Privacy Act, 2075 (2018) and Individual Privacy Regulation, 2077 (2020).

2Data We Collect

  • Account information: Full name, organization name, work email address, and password (stored encrypted).

  • Business data: Product listings, order information, inventory records, customer data you upload to your store, and financial transaction records.

  • Usage data: Log data, IP addresses, browser type, pages visited, features used, and session duration.

  • Communications: Support tickets, chat messages, and emails you send to us.

  • Payment information: Billing details processed by our third-party payment partners. We do not store full card numbers.

  • AI interaction data: Prompts and interactions with our AI features, used to improve platform performance.

3How We Use Your Data

We use collected data to:

Create and manage your account and provide the Services
Process transactions and send related communications
Operate and improve AI agents, automation, and platform features
Send service updates, security alerts, and administrative messages
Provide customer support and respond to inquiries
Detect, investigate, and prevent fraudulent or illegal activity
Comply with legal obligations under Nepali law
Conduct analytics to understand platform usage and improve experience

We do not sell your personal data to third parties for advertising purposes.

4Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: To provide the services you have signed up for

  • Legitimate interests: To improve and secure the platform, and prevent fraud

  • Consent: For marketing communications (you may withdraw at any time)

  • Legal obligation: Where required by Nepali law or regulation

5Data Sharing and Disclosure

We may share your data with:

  • Service providers: Cloud hosting, payment processors, analytics, and customer support tools under data processing agreements

  • AI infrastructure partners: For processing AI-powered features, under strict confidentiality obligations

  • Legal authorities: When required by Nepali law, court order, or to protect our legal rights

  • Business transfers: In the event of a merger, acquisition, or sale of assets, with prior notice to users

We require all third parties to handle your data with the same level of protection as described in this Policy.

6International Data Transfers

As a global commerce platform, some data processing may occur outside Nepal. When we transfer data internationally, we take measures to ensure adequate protection, including contractual safeguards with our service providers. By using Clicks, you acknowledge that your data may be processed in countries with different data protection laws than Nepal.

7Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. After account termination:

  • Account and profile data is retained for 30 days before deletion
  • Transaction and financial records are retained for 7 years as required by Nepali law
  • Backup copies may persist for up to 90 days
  • Anonymized or aggregated data may be retained indefinitely

8Your Rights

Under the Nepal Privacy Act, 2075 and applicable regulations, you have the right to:

Access

Request a copy of your personal data

Correction

Request correction of inaccurate information

Deletion

Request deletion (subject to legal retention)

Portability

Export your business data via dashboard

Objection

Object to processing based on legitimate interests

Withdraw consent

Opt out of marketing at any time

To exercise any of these rights, contact us at hi@clickscloud.io. We will respond within 30 days.

9Cookies and Tracking

We use cookies and similar tracking technologies to:

  • Keep you logged in and maintain session security
  • Remember your preferences and settings
  • Analyze platform usage and improve performance
  • Detect and prevent security threats

You can control cookie settings through your browser. Disabling certain cookies may affect platform functionality. We do not use cookies for cross-site behavioral advertising.

10AI and Automated Processing

Clicks uses AI to automate store setup, generate components, and optimize operations. You should be aware that:

  • AI agents may process your business data to perform tasks on your behalf
  • AI-generated outputs should be reviewed before publishing or acting on them
  • You may opt out of having your interaction data used to train AI models
  • Significant automated decisions will always be reviewable by a human

11Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security audits, and incident response procedures.

In the event of a data breach affecting your rights, we will notify you and relevant Nepali authorities as required by law, within the timeframes prescribed by applicable regulations.

12Shopify Integration (Clicks Connect)

When you connect a Shopify store to Clicks, we access that store only with the permissions you approve during installation: reading products, collections, inventory, orders and customers, and updating inventory.

What we access and store

  • Catalog data — product and collection titles, descriptions, images, variants, prices, SKUs and stock levels — copied into your Clicks Commerce store when you choose to sync
  • Order summaries — order number, date, totals, payment and fulfillment status, and the items and quantities ordered — used to keep stock in sync and to show your orders in Clicks
  • Customer records — your Shopify customers' names, email addresses, phone numbers and addresses — copied into your Clicks Commerce store so you can serve them there
  • Your store's Shopify access token, encrypted at rest and used only by our servers

Your customers' personal information is written only to your own Clicks Commerce store. It passes through the Clicks platform on the way and is not kept there: the order summaries Clicks keeps contain no names, email addresses, phone numbers or addresses.

How we use it

Only to provide Clicks Connect: syncing your catalog and your customers into your Clicks Commerce store, keeping inventory consistent between Shopify and Clicks in both directions, and showing your Shopify orders and sync status in your dashboard. We do not sell this data or use it for advertising.

Retention and deletion

  • We keep this data while your store is connected
  • When you uninstall the Clicks app from Shopify, we delete your store's access token immediately
  • About 48 hours after uninstall, Shopify asks us to erase your store's data; we then delete the connection, order summaries and related logs
  • Products and customers you synced into your own Clicks Commerce store stay there as your records until you delete them
  • When a customer is deleted in Shopify, we remove them from your Clicks Commerce store too — unless they have their own Clicks account, which stays theirs

Customer privacy requests

We respond to Shopify's mandatory privacy requests. When one of your customers asks for their data, it is in the customer records of your Clicks Commerce store, where you can view it and provide it to them. When a customer asks to be erased, we erase their record from your Clicks Commerce store (a customer with their own Clicks account keeps that account, minus everything that came from Shopify) and delete the summaries of their orders. You can also contact us at the address below.

13Children's Privacy

Clicks is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

14Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a platform notice at least 14 days in advance. The "Effective date" at the top reflects the most recent revision. Continued use of the platform constitutes acceptance of the updated Policy.

15Contact Our Privacy Team

For privacy-related questions, data requests, or concerns:

Last updated: September 28, 2026