Privacy Policy

Scope

clicked.bio is owned and operated by Papagoose LLC. This policy covers our website, the portal editor, and public portal pages hosted by clicked.bio. References to "clicked.bio," "we," "us," and "our" mean Papagoose LLC and its operation of the service. The data controller for personal information collected through clicked.bio is Papagoose LLC.

Information we collect

We collect only what is needed to operate the platform. The specific data depends on how you use clicked.bio.

• Account data: email address, password hash, account roles, and basic settings.
• Portal content: portal name, bio, avatar/cover images, links, blocks, posts, and custom domain settings.
• Audience submissions: email, name, consent status, and any lead fields a portal owner configures (for example company, budget, or project brief).
• Analytics metadata: page views, clicks, device type, and referrer URL for portal analytics.
• Reports: content report reason, optional note, and contact email when a report is submitted.
• Integrations: Instagram account identifiers and tokens when you connect Instagram.
• Payment metadata: when you make or receive a payment through clicked.bio, we receive limited transaction information from Stripe (transaction id, amount, currency, status, last four card digits, card brand, card country, billing zip code). We do not receive or store full card numbers, CVCs, or full card details.
• Support communications: messages you send us and any information you include.

Avoid submitting sensitive personal information in audience forms unless it is strictly necessary for your use case.

How we use information

• Provide and maintain the clicked.bio service.
• Authenticate accounts and secure access to portals.
• Render public portal pages and track aggregate performance.
• Deliver audience submissions to portal owners and provide CSV exports.
• Communicate about service updates, billing, and account notices.
• Detect abuse, protect security, and enforce acceptable use.

How we share information

We do not sell personal information. We share data only as needed to operate the service.

• With portal owners: audience capture submissions are shared with the portal owner who configured the form.
• With service providers: hosting, storage, analytics, email, and payment providers that process data for us. Our payment processor is Stripe (see "Payments and card data" below).
• With integrations: if a portal owner enables tracking pixels (Meta, Google), those providers may receive visitor data.
• For legal reasons: to comply with law, enforce our terms, or protect rights and safety.
• Business transfers: if we are involved in a merger, acquisition, or asset sale.

Payments and card data

clicked.bio uses Stripe as its payment processor in two distinct directions: payments your visitors make to you through your portal (subject to Stripe Connect, see below) and the subscription fees you pay clicked.bio to use the service. Stripe is responsible for collecting, processing, and storing payment-card information in both directions.

• We never collect or store full card numbers. When you enter your card to pay, that data goes directly to Stripe via a Stripe-hosted page or secure form. clicked.bio does not see, transmit, or retain primary account numbers (PANs), CVCs, or full magnetic-stripe data.
• Card storage for future use is handled by Stripe. If you choose to save a card for future purchases or for a recurring subscription, your payment method is stored by Stripe under a customer record linked to the merchant who collected it. We retain only an opaque Stripe customer identifier for that purpose.
• Saved card management is self-serve. Subscribers can view, update, or delete saved payment methods, view past invoices, and cancel active subscriptions through the Stripe-hosted Customer Portal accessible from your account.
• Stripe Connect. Creators on clicked.bio receive payments via Stripe Connect Express. That means the creator opens a Stripe-managed account during onboarding, and the funds for purchases on a creator's portal flow into that creator's Stripe account, not clicked.bio's. clicked.bio may take a platform fee on those transactions; we do not act as the merchant of record for creator sales.
• Your subscription to clicked.bio (separate from Connect). If you subscribe to a paid clicked.bio plan, that charge is processed by Stripe on clicked.bio's own Stripe account — clicked.bio is the merchant of record for your platform-subscription fee, not for your buyers' purchases. The same card-handling rules apply: card data goes directly to Stripe, never to us. Your saved payment methods for clicked.bio billing live on Stripe under a customer record we identify only by an opaque customer ID.
• SCA / 3-D Secure. For payments subject to Strong Customer Authentication (PSD2 — primarily EU/UK card payments), Stripe handles the authentication challenge. clicked.bio simply receives the success or failure result.
• PCI DSS. Because card data flows directly to Stripe and never touches our servers, our card-handling scope is limited to PCI DSS SAQ A controls. Stripe is a PCI-DSS Level 1 certified service provider.
• Disputes and refunds. If you dispute a charge, your bank, your card network, and Stripe handle the chargeback process. Refunds are issued by the merchant (the creator) using clicked.bio's tools, which instruct Stripe to refund your original payment method.
• Stripe's privacy policy. Stripe processes payment data under its own privacy policy at stripe.com/privacy. You should review it if you want detailed information about how Stripe handles your data.

If you want a saved payment method or a Stripe-stored customer record deleted, contact us or the creator whose portal collected it. We will instruct Stripe to detach the payment method and (if applicable) cancel any active subscriptions tied to it.

Cookies and local storage

We use cookies and local storage to keep you signed in, remember preferences, and support portal analytics.

• Essential: session cookies for authentication and security.
• Preferences: UI preferences like theme settings and editor panel states.
• Analytics: aggregate portal analytics and referrer tracking.
• Third-party: optional tracking pixels set by portal owners.

See the Cookie Policy for more details.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information. To make a request, send a message via our contact form.

If you are a portal owner, you control the audience data you collect and are responsible for honoring requests from your subscribers.

If you have saved a card or have an active subscription, you can manage and delete those records through the Stripe-hosted Customer Portal, or by contacting the creator whose portal you transacted with.

Instagram data deletion. If you connected your Instagram account to a clicked.bio portal and want the Instagram-derived data deleted, you can submit a deletion request directly through Instagram → Settings → Apps and Websites → clicked.bio → "Request data deletion". We process the request synchronously: tokens, imported posts and reels, and the Instagram user identifier are removed from every clicked.bio portal that had them. You can verify the status of your request at our deletion status page. The clicked.bio portal and account themselves are not affected — only the Instagram-sourced data.

Retention

We keep data for as long as needed to provide the service and meet legal or operational requirements. Portal owners can delete content and audience submissions; for additional deletion requests, contact us.

Security

We use administrative, technical, and physical safeguards to protect information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Contact

Questions about this policy can be sent to our contact form.