Privacy Policy

ClickLedger is run by Brandon Chin (“we”, “us”). This policy explains what we collect when you use clickledger.io, and what we collect on your behalf about the people who click your links. Questions or requests go to support@clickledger.io.

Two kinds of people

• Customers: creators and businesses with a ClickLedger account.
• Visitors: people who click a customer's tracked link, visit a page with the customer's tracking snippet, or book or buy through a tool the customer has connected.

For visitor data, the customer decides what is tracked and why; we process it for them, under their instructions. Visitors with questions should contact the creator whose link they clicked, and can also write to us.

What we collect from customers

• Your name, email address and a hashed password (we never store the password itself).
• Your setup answers, the content and links you create, and your website address.
• Keys and access you give us to connect tools such as Calendly, Stripe, Whop, Tally, Typeform or YouTube. These are encrypted when we store them, and we use them only to set up and read the tracking you asked for.

What we collect about visitors

• Link clicks: the time, the link, the browser's user agent, the referring site, device type and an approximate country. We do not store visitors' IP addresses; we keep only a one-way hash of the address and browser, used to collapse the duplicate requests a single tap can produce.
• Page activity, where the customer has installed our snippet: pages viewed, tagged button clicks, the referring site, and email addresses entered into forms on that page when the customer has turned email capture on.
• Bookings and sales reported by the customer's connected tools: the person's name and email where the tool provides them, the time, the amount, refunds, and the provider's order or booking reference.

We use this to show the customer which piece of content led to each sign-up, booking and sale. We do not sell visitor data or use it for advertising, and we never show one customer's data to another. We look at account data to help you, fix problems, and understand how ClickLedger is used so we can improve it.

Cookies and similar storage

• Visitor ID (tk_vid): a random ID set when someone clicks a tracked link, kept for up to a year, and also saved in the customer's own site storage so a later booking or sale can be credited to the right link.
• Opt-out: a customer can mark their own browser so their visits aren't counted.
• Account cookies on clickledger.io: your login session and dashboard preferences. These are needed for the site to work.

Who we share data with

We use these services to run ClickLedger, and they handle data only to provide them:

• Vercel (hosting) and Supabase (database)
• Resend (account emails such as password resets)
• Google's YouTube Data API (public video details and view counts)
• Anthropic (AI tools we use to analyze data and support customers)
• The tools a customer chooses to connect, such as Calendly, Stripe, Whop, Tally or Typeform

We may also disclose data if the law requires it, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.

How long we keep it

We keep customer and visitor data while the customer's account is open. A customer can delete a piece of content and its tracking data from the dashboard at any time. When an account is closed, we delete its data within 30 days, except where the law requires us to keep it longer.

Your rights

You can ask us for a copy of your data, or ask us to correct or delete it, by emailing support@clickledger.io. Depending on where you live (for example the EU, UK or California), you may have further rights, including objecting to processing or complaining to a regulator. We will answer within 30 days. Visitor requests may be passed to the creator responsible for the tracking.

Security

Data travels over HTTPS, stored keys are encrypted, webhook addresses use private tokens, and access is limited to what running the service needs. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.

Children

ClickLedger is not meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update the date above, and tell customers by email when a change is significant. See also our Terms of Service.