Legal
Privacy Policy
How we collect, use, and protect your personal information on Cliq.
Last updated: 7 February 2026
Information We Collect
We collect information you provide directly to us, information collected automatically when you use our platform, and information from third-party services.
Account Information
When you create an account, we collect your name, email address, phone number, and account type (business or creator). If you register as a creator, we also collect your social media handles, follower counts, content niches, and the Dubai neighborhoods you operate in. Business accounts provide company name, industry, and contact details.
Payment Information
We use Stripe to process all payments on Cliq. When you make or receive payments, Stripe collects your payment details (card information, bank account details) directly. We do not store your full payment card numbers on our servers. We receive limited transaction data from Stripe, including amounts, dates, and transaction status.
Profile & Content Data
Creators may upload portfolio images, profile photos, service descriptions, and pricing information. Businesses may submit campaign briefs and project descriptions. Messages exchanged between users through our booking system are stored to facilitate the collaboration process.
Automatically Collected Information
When you access Cliq, we automatically collect certain information including:
- Device type, browser type, and operating system
- IP address and approximate geographic location
- Pages visited, features used, and time spent on the platform
- Referring URLs and how you interact with our content
How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Cliq platform and its features
- Process bookings, payments, and escrow transactions between businesses and creators
- Verify creator profiles and business identities for trust and safety
- Send transactional communications such as booking confirmations, payment receipts, and status updates
- Respond to your requests, questions, and customer support inquiries
- Detect, prevent, and address fraud, abuse, and security issues
- Analyse usage patterns to improve platform performance and user experience
- Comply with legal obligations and enforce our Terms of Service
We do not sell your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal effects.
Data Sharing & Third Parties
We share your information only in the following circumstances and with the following service providers:
Between Users
When you book a creator or accept a booking, relevant profile information is shared between the business and the creator to facilitate the collaboration. This includes names, profile details, and booking-related messages.
Service Providers
- Supabase — Database hosting and user authentication. Your account data is stored securely on Supabase infrastructure.
- Stripe — Payment processing and creator payouts via Stripe Connect. Stripe processes payment information in accordance with their own Privacy Policy.
- Resend — Transactional email delivery for booking notifications, account updates, and system alerts.
- Vercel — Application hosting and content delivery.
Legal Requirements
We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to comply with legal proceedings, a court order, or a government request; protect the rights, property, or safety of Cliq, our users, or the public; or investigate potential violations of our Terms of Service.
Data Security
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols
- Secure authentication through Supabase Auth with row-level security policies
- Regular access reviews and principle of least privilege for internal systems
- Payment data handled exclusively by PCI DSS-compliant Stripe infrastructure
While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.
Your Rights
You have the following rights regarding your personal information:
- Access — Request a copy of the personal information we hold about you.
- Correction — Request correction of inaccurate or incomplete data. You can update most information directly through your account settings.
- Deletion — Request deletion of your personal data, subject to legal retention requirements and legitimate business needs.
- Data Portability — Request your data in a structured, commonly used, machine-readable format.
- Objection — Object to the processing of your personal information in certain circumstances.
- Withdrawal of Consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at [email protected]. We will respond to your request within 30 days.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
- Account data is retained for the duration of your account and deleted within 90 days of account closure, unless required for legal or compliance purposes.
- Transaction records are retained for a minimum of 6 years to comply with financial record-keeping regulations.
- Messages and booking data are retained for 2 years after booking completion, after which they are anonymised or deleted.
- Usage logs are retained for up to 12 months for analytics and security purposes.
International Data Transfers
Cliq is based in Dubai, United Arab Emirates. Your information may be transferred to and processed in countries other than the UAE where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements with our providers.
Children's Privacy
Cliq is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting a prominent notice on the platform or sending you an email. Your continued use of Cliq after any changes indicates your acceptance of the updated policy.
If you have any questions about this policy, please contact us at [email protected]