Privacy Policy

1. What we collect

Account data: your email address and password (our authentication provider stores your password in hashed form -- we never see or store it ourselves), your username(s), and, if you set them, your display name, bio, and profile/banner images.

Page content: the links, headings, banners, and other blocks you add to your page(s), plus any social profile links you connect and any images you upload.

Public page analytics: when someone views your page or clicks a link, we log the event -- timestamp, best-effort country and device type, and referrer source. This exists solely to give you, the page owner, insight into how your page is performing -- we don't build profiles of your visitors from it. The same applies to clicks on your short links and scans of your QR codes. Retention: 3 months on Free, 6 months on Starter, and 2 years on Premium and Agency -- after that window, the events are automatically and permanently deleted.

Billing and tax data: if you buy a paid plan, we collect the details needed to issue a valid invoice -- your name, billing address, country and state, and, if you provide one, your GSTIN. We may also hold your mobile number and date of birth where you have given them. Indian tax law requires us to keep issued invoices for a fixed statutory period, so these records outlive account deletion (see "Your rights" below).

Approximate location: we read a coarse country/region hint derived from your IP address to pre-fill the country and state on billing forms and to decide which currency to show you. It's a convenience you can overwrite, we don't store the IP address itself for this purpose, and whatever you submit is what we use.

Collaborators: if you invite someone to help manage a page, we share their email address with you (and yours with them) so the invitation can be accepted and the access shown. They can see and edit that page's content, never your account, billing details, or other pages.

Cookies/session data: used to keep you logged in and your dashboard session secure. See our Cookie Notice for the full breakdown.

2. Advertising

We show ads on public pages and inside the dashboard on the Free plan. That's what keeps the free tier free.

We run our own ad platform. We do not use a third-party ad network, which means no outside advertising company receives anything about you or the people who visit your page, and there are no third-party ad trackers running on your page.

What advertisers receive: aggregate campaign performance only -- how many times their ad was shown, how many times it was clicked, and broad demographic breakdowns of the audience that saw it. These are reported as totals, never as individual records.

What advertisers never receive: your personal data. No names, email addresses, account details, or anything identifying an individual person, and no visitor-level data about the people who open your page. We do not sell or share personal data with advertisers.

If we ever change this -- for example by introducing a third-party ad network -- we'll name it here, state exactly what it receives, and, where that involves tracking or profiling, ask for your consent again specifically rather than relying on this notice. Every paid plan (Starter, Premium, Agency and Enterprise) is ad-free, now and after any such change.

3. Who we share data with

• Cloud hosting and infrastructure -- runs the application, stores the database, and holds the images you upload.
• Authentication -- manages logins and account security. Your password is stored only in hashed form; we never see it.
• Payment processing -- handles subscription payments. Your card, UPI or netbanking details are entered directly with the processor and never reach our servers. We receive only the subscription status, the payment reference, and the amount, which is what we need to activate your plan and issue your invoice.
• Transactional email -- delivers account emails such as address verification, password reset, payment receipts, and security alerts. It receives your email address and the contents of that message.
• Advertisers -- receive aggregate performance figures for their own campaigns only (impressions, clicks, broad audience breakdowns). Ads are served by our own platform, so there is no third-party ad network in this list and no personal data reaches an advertiser. See "Advertising" above.

Each of these only receives what it needs to do its job, each is bound by contract, and none of them may use your data for their own purposes. We choose providers that offer appropriate security and data-protection commitments, and we'll tell you exactly which companies these are if you ask -- email klick@xhadow.in. We do not sell your personal data, ever.

4. Your rights

• Access & correction: view and edit your account and page details any time from your dashboard.
• Erasure: delete individual links or pages, or your entire account and all associated data, from Account Settings. One honest exception: invoices we have already issued are kept for the statutory period Indian tax law requires, because we're legally obliged to retain them. Nothing else survives an account deletion.
• Withdraw consent: turn off "product updates and offers" in Account Settings at any time -- it takes effect immediately and doesn't affect your account. Withdrawing consent to our Terms/ Privacy Notice means deleting your account, since we can't provide the Service without it.
• Grievance redressal: email klick@xhadow.in with any question or complaint about your data. If you're not satisfied with our response, you have the right to escalate to the Data Protection Board of India.

5. Children's privacy

Klick.ing isn't directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

6. Changes to this notice

Whenever we materially change what we collect, why, or who we share it with, we'll treat it as a new version of this notice -- meaning we'll ask for your consent again where required, rather than silently relying on an old agreement.

Notice version: 2026-08-13 (last updated 13 August 2026).