Privacy policy for ClicAuto products
How ClicAuto's Chrome extensions and the service behind them handle your data: what we receive when you sign in with Google, what stays in your browser, who helps us run the service, how long we keep your data and how to have it deleted.
The short version. When you sign in with Google, we receive your email address and your Google account ID, nothing else. We use them only to run your account, your free trial and your subscription. Your settings and everything the extensions do in your browser stay on your computer. Payments are handled by Link, by Stripe. We don't sell your data, we don't use it for advertising and we don't use it to train AI models.
1. Who is responsible
ClicAuto's products are made by:
- The U-Shaped House LLC, a limited liability company formed in the State of Delaware, United States, trading as ClicAuto
- 1925 Grand Ave Ste 129 PMB 83841, Billings, MT 59102, United States
- Email: contact@clicauto.com
We are responsible for your data (the "controller"). For any question about this policy or to exercise your rights, email the address above. We answer within 30 days, in English or French.
2. Scope and product policies
This policy applies to ClicAuto's Chrome extensions, ClicAlarm and ClicGuard, and to the service behind them at api.clicauto.com (accounts, free trials, subscriptions and licenses). It applies to all their users.
Each product also has its own privacy policy, which describes what that extension does in your browser. Both say the same thing as this page about your account, payments and your rights:
- ClicAlarm — clicalarm.clicauto.com/privacy/
- ClicGuard — clicguard.clicauto.com/privacy/
The website clicauto.com itself has its own privacy policy.
3. Google sign-in and Limited Use
Our extensions let you sign in with your Google account, through Chrome. When you do, we receive:
- your email address, and
- your Google account ID, a number that identifies your Google account.
Nothing else from your Google account is read or stored: not your name, your photo, your contacts, your emails, your files or your calendar.
We use these two pieces of information only to create your account, start your free trial, link your subscription or license to you, and send you emails about your trial and your subscription.
ClicAuto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide the sign-in, account, trial and subscription features of our extensions.
- We don't transfer it to anyone, except to the service providers listed in section 7 that help us run those features, when needed for security, or when the law requires it.
- We don't sell it, we don't use it for advertising, and we don't use it to build profiles or to train AI or machine learning models.
- Nobody reads it, except with your permission (for example, when you ask us for help), for security reasons, or when the law requires it.
4. What we receive, and why
- Your Google account email and Google account ID, when you sign in (see section 3).
- Your trial, subscription or license status: start date, end date, active or not. It decides which features you can use.
- Payment status. Payments are handled by Link, a payment service by Stripe. Link is the seller of record: it sells our subscriptions and licenses on our behalf, takes care of taxes and keeps the payment records. Link receives your payment details, billing address and email; its own privacy policy applies to that. Stripe sends us your email and billing details with each purchase; we only use and keep your email, your Stripe customer ID and the status of your purchase. We never see your card number, and we don't issue invoices.
- Your confirmation when you buy that your subscription or license starts right away and that you lose your 14-day right of withdrawal once it has started (see each product's terms), with its date and time.
- Newsletter, only if you opt in. The box is unticked by default. If you tick it, we record your choice with its date, and we may email you when ClicAuto launches a new tool. Every email has a one-click unsubscribe link. We haven't sent any newsletter yet.
- An anonymous install signal, sent once, when you install an extension: the extension version and your browser language, nothing else. It is only counted: no IP address is stored and no identifier is attached.
- Technical error logs, to keep the service running. They can contain your account number or your Stripe customer ID, never the content of what you do in the extensions. We don't keep logs of your requests, and your IP address is only used in memory to limit abuse; it is never written to disk.
5. What stays in your browser
Each extension keeps its settings and its data in Chrome, on your computer. We never receive them.
- ClicAlarm: your alarms, quiet hours, settings and the sounds you add. ClicAlarm has no access to websites at all.
- ClicGuard: your settings, your client list and the log of what was caught. ClicGuard looks for sensitive data (API keys, passwords, bank details, card numbers, emails, phone numbers, client names) in what you paste or type on a few AI chat sites, inside your browser. The text of your messages never leaves your computer and is never sent to us.
Uninstalling an extension deletes what it kept in your browser. It doesn't delete your account: to do that, see section 11.
6. What we never collect
Your browsing history, the pages you visit, the content of your tabs or of your messages, your contacts or your location. There are no ads, no trackers and no analytics in our extensions.
7. Who processes your data
| Provider | Role | What it receives | Location |
|---|---|---|---|
| Hetzner Online GmbH | Our servers and encrypted backups | Everything described in section 4 | Servers in Falkenstein, Germany; backups in Helsinki, Finland (European Union) |
| Resend, Inc. | Sends our emails about your trial, subscription or license | Your email address and the content of those emails | United States company, sending from its European Union region (Ireland) |
| Link, by Stripe | Seller of record: payments, taxes and payment records | What you enter at checkout: payment details, billing address, email | United States and European Union |
| Sign-in | Google confirms who you are when you sign in | United States | |
| Telegram FZ-LLC | Private alerts to us: a trial starts, a purchase, a cancellation, a declined payment | Your email, masked (like p•••@gmail.com). Only when a payment matches no account does the alert show the full email and Stripe customer ID given at checkout, so we can link the payment to the right account by hand. | United Arab Emirates (outside the European Union) |
We don't sell your data, we don't share it for advertising and we don't use it to train AI models. Resend, Link, Stripe and Google may process data in the United States; they do so under their own safeguards for international transfers. Telegram processes our alerts outside the European Union, which is why the emails in them are masked.
8. Legal basis
- Performance of a contract: your email, Google account ID and status, to provide the service you asked for.
- Legal obligation: your confirmation that your purchase starts right away, which consumer law requires us to record.
- Consent: the newsletter. You can withdraw it at any time with the unsubscribe link or by email.
- Legitimate interest: the install signal, error logs and internal alerts, to run a reliable service and know how many people install our products.
9. How long we keep it
| Data | Kept for |
|---|---|
| Your account: email, Google account ID, status, newsletter choice, purchase confirmation | Until you ask us to delete it, or until we stop the product. Either way, we erase it within 30 days. |
| Email and Stripe customer ID of a payment that matches no account | Until we've linked the payment to the right account; then we erase them, along with the alert that showed them |
| Payment records | Kept by Link, by Stripe, as the law requires, under its own privacy policy. We don't issue invoices. |
| Error logs | Overwritten automatically by newer ones |
| Server backups | Encrypted, overwritten within 12 months |
| Install counts | No time limit: they identify no one |
10. Security
- Everything between the extensions and our service travels over HTTPS.
- Our database is not reachable from the internet.
- Backups are encrypted before they leave our server.
- Your card number never reaches us: Link, by Stripe, handles it.
11. Your rights
You can ask to see, correct, export or delete your data, object to how we use it, or withdraw your consent, at any time: email contact@clicauto.com from the address of your account. We answer within 30 days.
If you are in the European Union or the United Kingdom, you can also complain to your data protection authority. A directory of European authorities is published by the European Data Protection Board; in the United Kingdom, it is the Information Commissioner's Office.
12. Children
Our products are not meant for children under 16.
13. Changes
If we change this policy in a way that matters, we update the version above and tell users by email.