Privacy Policy

Effective: May 14, 2025 · Last updated: May 14, 2025

Important: Click & Call is a business-to-business tool. When a visitor uses a Click & Call button on a third-party website, that website's operator (our customer) is responsible for their own privacy disclosures to their visitors. This policy covers data we collect directly.

1. Who We Are

Click & Call ("we," "us," "our") operates the website at www.clickandcall.com and provides a browser-based click-to-call widget service. Our service is available in the United States only.

For privacy questions, contact us at privacy@clickandcall.com.

2. Information We Collect

Account information

When you sign up we collect your name, email address, company name, website URL, and phone number. This is used to create and manage your account.

Contact form submissions

If you contact us via our website form we collect your name, email, company name, website, and message content. We use this solely to respond to your inquiry.

Call log data

When a visitor uses a Click & Call button, we record the call session including: the originating IP address, call duration, timestamp, and the button and account the call was associated with. We do not record or store audio from any calls. Call routing is handled by Twilio and subject to their data practices.

Payment information

Payments are processed by Stripe. We do not store credit card numbers or full payment details. We retain billing records (amounts, dates, subscription status) for accounting and dispute purposes.

Usage and analytics data

We collect anonymized usage data including page views, feature interactions, and performance metrics through PostHog and Vercel Analytics. This data helps us understand how the service is used and improve it.

IP addresses

We log IP addresses for security purposes including rate limiting and abuse prevention. IP addresses that trigger abuse thresholds may be blocked from using the service.

Uploaded files

If you upload a logo for use with your call button, that file is stored in our cloud storage and served publicly as part of your button configuration.

3. How We Use Your Information

  • To provide, operate, and improve the Click & Call service
  • To authenticate you and secure your account
  • To process payments and manage your subscription
  • To display call logs and usage statistics in your dashboard
  • To send transactional emails (account confirmations, password resets)
  • To detect and prevent fraud, abuse, and unauthorized access
  • To comply with legal obligations

We do not use your data to serve third-party advertising, and we do not sell your personal information to any third party.

4. Third-Party Services

We use the following third-party services to operate Click & Call. Each has its own privacy policy governing how they handle data.

ServicePurpose
TwilioVoice call infrastructure and phone number management
StripePayment processing and subscription billing
SupabaseAuthentication and file storage
VercelWebsite hosting and edge delivery
PostHogProduct analytics
ResendTransactional email delivery
CloudflareBot protection (Turnstile CAPTCHA) and CDN
UpstashRate limiting (Redis)

5. Data Retention

We retain your account data for as long as your account is active. Call logs are retained for the life of your account to support your dashboard history. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

IP addresses collected for security purposes are retained for up to 12 months unless an IP has been flagged for abuse, in which case it may be retained longer.

6. Your Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know — You may request a summary of the personal information we have collected about you and why.
  • Right to delete — You may request deletion of personal information we hold about you, subject to certain exceptions.
  • Right to opt out of sale — We do not sell personal information. There is nothing to opt out of.
  • Right to non-discrimination — Exercising your privacy rights will not result in different service levels or pricing.

To exercise any of these rights, email privacy@clickandcall.com. We will respond within 45 days.

7. Cookies and Tracking

We use cookies and similar technologies to keep you logged in and to understand how our site is used. We do not use third-party advertising cookies. The analytics tools we use (PostHog, Vercel Analytics) collect anonymized, aggregated data and do not build individual advertising profiles.

8. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed credentials, and access controls. We conduct periodic security reviews of our codebase and infrastructure. However, no system is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

Click & Call is a business service not directed at children. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify active account holders via a notice in the Customer Portal. Your continued use of the service after the effective date constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:

Click & Call
Email: privacy@clickandcall.com