Privacy Policy

Kliqbot™ Privacy Policy
Version 1.2
Effective Date: July 9, 2026
Last Updated: July 9, 2026

Kliqbot LLC (“Kliqbot,” “we,” “us,” or “our”) operates the Kliqbot™ platform at kliqbot.com and generates landing pages at kliqpages.com. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our services.

This policy is designed to comply with the Google API Services User Data Policy, Google Ads API Terms and Conditions, GDPR, CCPA/CPRA, and other applicable data protection laws. It applies to business owners (Command plan), agencies (Agency OS plan), and visitors to Kliqbot-generated landing pages.

1. Introduction and Scope

Kliqbot provides an all-in-one Google Ads automation platform for local service businesses and the agencies that serve them. We help users launch, optimize, and manage Google Ads campaigns with strong advertiser controls, including human approval gates for spend-impacting actions.

This Privacy Policy covers:

Information collected through the Kliqbot dashboard and account management.
Public website content you provide via URL for campaign and landing page generation.
Google Ads account data accessed and managed via your OAuth authorization.
Lead, call, and conversion data generated through the platform and landing pages.
Usage data, cookies, and technical information.

A separate Cookie Notice governs our use of cookies and similar technologies.

2. Information We Collect

Information You Provide
Account details, organization information, billing data, business type, and configuration preferences (including AI autonomy settings and notification preferences).

Website Content (Public Ingestion)
When you submit a website URL, we retrieve and analyze publicly available content from that site and linked pages. This includes text, images, structure, services, pricing, credentials, reviews, and other information you have made public. We use this solely to generate relevant keywords, ad copy, landing pages, and insights grounded in your own content. We do not access password-protected or non-public areas.

Google Ads Account Data (OAuth Authorization)
With your explicit OAuth consent, we access and process data necessary to deliver the service, including campaign structure, keywords, ads, performance metrics, search terms, and conversion data. Write operations are strictly limited to the three-tier autonomy model described in Section 3.

Lead, Call, and Conversion Data
Form submissions and leads from landing pages; call tracking data (duration, classification, and, where enabled and legally permitted, recordings and transcripts with required caller notices); AI-generated classifications and value estimates.

Usage and Technical Data
Log data, IP addresses, device and browser information, and usage patterns within the dashboard and landing pages.

We do not collect or process data for prohibited sensitive verticals, including: gambling / casinos / sports betting; adult content / sexual entertainment; cannabis / marijuana dispensaries; firearms / weapons dealers; political campaigns / PACs; addiction treatment / rehab facilities; bail bonds / payday loans / debt collection.

3. Google Ads Account Data and Advertiser Controls

Limited Use and Purpose
We access and use Google user data only to the minimum extent necessary to provide the features you have authorized and only within the three-tier autonomy model described below. We do not use Google user data to serve ads, retarget users, build profiles for third parties, or for any purpose inconsistent with your authorization and the controls in this policy.

Three-Tier Autonomy Model and Human Oversight
We operate under a graduated control model that prioritizes advertiser protection:

Tier 1 (Always Autonomous): Protective actions that can only reduce or safeguard spend (e.g., pausing underperforming keywords, adding negative keywords, fraud IP exclusions). These are logged but execute automatically.
Tier 2 (Bounded Autonomy): Routine bid and targeting adjustments within guardrails you configure. Changes exceeding your chosen limits require your explicit Approval.
Tier 3 (Always Requires Explicit Approval): Any action that could increase spend or materially alter campaign structure (budget changes, new keyword or ad activation, campaign activation/pause). These are proposed with clear reasoning and projected impact; nothing executes until you Approve in the dashboard.

Transparency and Audit Trail
Every AI recommendation and executed action is recorded in plain English in an immutable Audit Trail visible to you in the dashboard, showing what changed, why, when, before/after values, and estimated cost impact.

Emergency Spend Protection
If daily spend significantly exceeds your configured budget, the system automatically pauses the affected campaign(s) as a protective measure. This is the only action that bypasses normal approval flows and exists solely to protect your advertising spend.

Instant Disconnect
You may disconnect your Google Ads account at any time via Settings. Upon disconnect we immediately revoke API access, automatically pause all active campaigns, clear cached data, and provide a window to export historical information.

4. How We Use Your Information

We use information to:

Deliver core platform features (website analysis, campaign building and optimization within the approval model, landing page generation, real-time reporting, lead delivery, call intelligence, and fraud protection).
Manage accounts, billing, and subscriptions.
Send transactional communications (lead alerts, performance summaries, critical account events).
Improve platform reliability and aggregated, anonymized model performance.
Detect and prevent fraud, spam, and abuse.
Comply with legal obligations and enforce our Terms of Service and Acceptable Use Policy.

Where GDPR or UK GDPR applies, we rely on the following legal bases:

Contract (Art. 6(1)(b)): Processing necessary to provide the Kliqbot service you have subscribed to, including OAuth-authorized Google Ads management and website analysis for campaign generation.
Consent (Art. 6(1)(a)): OAuth authorization for Google Ads access; certain conversion uploads and marketing communications (where applicable); call recording where required.
Legitimate Interest (Art. 6(1)(f)): Fraud prevention, security, protective automation (Tier 1 actions), platform improvement (aggregated/anonymized), and enforcement of our policies.
Legal Obligation (Art. 6(1)(c)): Compliance with applicable laws and valid legal requests.

6. Automated Decision-Making, Profiling, and Human Oversight

Kliqbot uses automated systems and AI to assist with keyword generation, ad copy, landing page creation, bid optimization, call classification, and fraud detection. However, we do not make solely automated decisions that produce legal or similarly significant effects on you without meaningful human oversight.

The three-tier autonomy model described in Section 3 ensures that:

Actions with potential financial impact on your advertising spend (Tier 3) always require your explicit Approval.
You retain full visibility through the dashboard Audit Trail.
You can adjust autonomy settings or disable categories of automation at any time.

This structure provides the transparency and control required under GDPR Article 22 and aligns with Google’s expectations for responsible third-party tools.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising under CCPA/CPRA.

We share information only in these limited circumstances:

Google: As necessary to manage your authorized campaigns and upload conversions (respecting consent signals and using hashed identifiers only when consent is granted).
Service Providers and Sub-processors: Trusted vendors bound by data processing agreements who assist with hosting, database services, email/SMS delivery for alerts, payment processing, consent management, and secure infrastructure. A current list of sub-processors is set forth in Annex III – List of Sub-processors.
Legal and Protection: When required by law or to protect rights, property, or safety.
Corporate Transactions: In connection with a merger, acquisition, or asset sale, with appropriate safeguards and notice where required.
With Your Direction: For example, webhook exports to your CRM.

Agency OS: You (the agency) are responsible for obtaining necessary authority and providing notices to your clients. Data remains isolated per tenant. For agency-specific terms, see the Agency OS Addendum. Processing of Personal Data is also governed by our Data Processing Addendum.

Landing Pages (kliqpages.com): For leads and form data collected on landing pages, the business owner or agency client is the data controller. Kliqbot acts as a processor to deliver those leads to you and enable attribution and reporting.

8. Data Security

We implement appropriate technical and organizational measures, including:

Encryption of sensitive data in transit (TLS 1.3) and at rest (AES-256-GCM for Google Ads credentials and other sensitive fields).
Tenant isolation via database Row-Level Security.
Strict access controls, authentication, monitoring, and credential health checks.
Regular security assessments.

While no system is infallible, we continuously work to protect your data and advertising account.

9. Data Retention

We retain personal information only as long as necessary for the purposes described, unless a longer period is required by law. Our current retention practices are as follows:

Google Ads performance metrics and reports: up to 365 days for historical dashboard access.
Lead, call, and conversion data: up to 365 days.
Audit logs of optimization actions (Audit Trail): retained for the life of the account plus a reasonable period for transparency and accountability.
Google Ads OAuth credentials and tokens: only while your integration is active; revoked and securely deleted upon Disconnect.
Billing and transactional records: retained as required for tax, accounting, and legal compliance (anonymized where possible).

Upon account deletion or Disconnect, we delete or anonymize personal data within a reasonable period (typically 30 days), subject to legal retention obligations. You may request earlier deletion or export.

10. Your Privacy Rights and Choices

You have the following rights (subject to applicable law and exceptions):

Access, correction, and portability of your personal information.
Deletion of your personal information (dashboard self-service account deletion triggers a full purge process).
Instant disconnect of Google Ads access (with automatic campaign pause).
Management of notification preferences and AI autonomy settings.
Withdrawal of consent (OAuth revocation or marketing opt-out).
Objection to processing based on legitimate interest.
CCPA/CPRA (California): Right to know, delete, correct, and opt-out of any “sale” or “share” (we do not sell or share personal information for cross-context behavioral advertising). Non-discrimination for exercising rights.
GDPR/UK GDPR and similar laws: Additional rights to restrict processing and lodge a complaint with your supervisory authority.

Many rights can be exercised directly in the Kliqbot dashboard. For other requests, contact us at privacy@kliqbot.com. We will respond within required timeframes.

11. International Data Transfers

We are based in the United States. Data may be transferred to and processed in the U.S. and other countries where our sub-processors operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses and ensure sub-processors provide adequate protection.

12. Cookies and Tracking Technologies

We use essential cookies for security and functionality, plus analytics and performance cookies. Landing page visitors see a consent management banner. Details are in our separate Cookie Notice.

13. Children’s Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. Contact us immediately if you believe we have done so.

14. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technology, legal requirements, or Google policies. Material changes affecting Google Ads data handling or user rights will be notified prominently (including in-product where appropriate). Continued use after the effective date constitutes acceptance of the updated policy.

Version History

Version 1.2 (July 9, 2026): Added precise Data Retention Schedule, updated sub-processor reference to Annex III, harmonized sensitive verticals list, strengthened limited-use language tied to three-tier model.
Version 1.1 (July 9, 2026): Prior refinements for Google compliance and GDPR transparency.

15. Contact Us

Kliqbot LLC
Privacy / Legal Team
privacy@kliqbot.com

For data protection matters in the EEA/UK, you may also contact our designated representative if applicable under local law.