Privacy policy

Last updated 2026-08-16

This policy explains what personal data we handle when you use keklik.io and the application at https://app.keklik.io, why we handle it, and what rights you have. It covers two quite different things: data about you, our customer, and data you collect through the Service. Sections 2 and 6 deal with those separately, because our role differs in each.

1. Who is responsible

For data about you as a customer, the data controller is:

Privacy questions: legal@kekliktech.com.

2. Data we hold about you

• Account data — your email address and a hashed password. We never store your password itself.
• Session data — a session identifier stored in a cookie, plus the IP address and browser user-agent recorded when a session is created, so we can secure accounts and detect misuse.
• Usage and billing records — your plan, credit balance, and a ledger of credits granted and spent. We keep this to run billing and to answer questions about it.
• Support and enquiry correspondence — what you send us when you contact us or request access, including your name and email address.

We do not run advertising trackers, we do not sell personal data, and we do not profile you for marketing.

3. Why we handle it, and on what basis

• To provide the Service — performance of our contract with you.
• To take payment and keep accounts — contract, and our legal obligations for financial records.
• To keep the Service secure — our legitimate interest in preventing abuse and unauthorised access.
• To answer you — our legitimate interest in responding to enquiries, or your consent where you asked to be contacted.

4. Cookies

The application sets one essential cookie holding your session identifier. It exists to keep you signed in and cannot be switched off without making sign-in impossible. It is not used for analytics or advertising.

This marketing website sets no cookies of its own and runs no analytics or advertising scripts.

5. Who else processes it

We use the following providers. Each handles data only on our instructions and under contract.

Some of these are outside the UK and EEA. Where personal data is transferred internationally we rely on the standard contractual clauses or equivalent safeguards offered by the provider.

6. Data you collect through the Service

The Service retrieves publicly available business information on your instruction. Some of it can be personal data — a review carries the reviewer’s display name and what they wrote, and a business website may list named staff or personal email addresses.

For that data you are the controller and we are your processor. You decide what to collect, why, and what happens to it next. We process it only to deliver it to you, to store it in your account, and to let you export or delete it.

This means, practically:

• You are responsible for having a lawful basis to collect and use it, and for honouring the rights of the people it concerns.
• You are responsible for complying with marketing law before contacting anyone using details collected through the Service.
• We will not use the data you collect for our own purposes, sell it, or share it with anyone other than the providers listed above.
• Deleting a project or run deletes its collected rows from our database.

If someone contacts us about data you collected, we will refer them to you as the controller, and tell you.

7. How long we keep it

• Account data — while your account is open, and up to 90 days after closure so it can be restored if you change your mind.
• Collected data — until you delete it, or until your account is closed.
• Billing records — as long as tax and accounting law requires, typically six years.
• Enquiry correspondence — up to two years from our last exchange.

8. Your rights

Depending on where you live you may have the right to access a copy of your personal data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where consent is the basis we rely on.

Exercise any of these by writing to legal@kekliktech.com. We will respond within one month. If you think we have handled your data badly you can also complain to your local data protection authority.

9. Security

Passwords are stored hashed with a modern algorithm. Traffic is encrypted in transit. Access to production systems is limited to people who need it. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.

10. Children

The Service is for business use and not intended for anyone under 18. We do not knowingly collect data about children.

11. Changes

We will update this policy when our practices change, and revise the date at the top. Material changes will be notified by email or in the application.

12. Contact

legal@kekliktech.com, or write to the postal address in section 1. See also our terms of service and acceptable use policy.