Privacy Policy
Draft for legal review. This document was prepared as a complete working draft. Clauses marked [Lawyer review] need a licensed attorney's sign-off before this page is relied on.
1. Scope
This Privacy Policy explains how Click Heist LLC ("ClickHeist", "we", "us") handles personal information when you visit clickheist.com, apply to or use the ClickHeist network as an affiliate or advertiser, or contact us. It does not cover the websites of advertisers or affiliates, which have their own policies.
2. What we collect
- Information you give us. Application and account details: name, company, email, phone, country, website URLs, messenger handles, traffic descriptions, verticals, budget or revenue ranges, payment details needed to pay you or bill you, tax forms, and the content of your messages.
- Platform activity. Logins, offers viewed, links generated, campaign settings, conversion and payout records, and support history.
- Tracking data. When a consumer clicks a tracking link or converts on an offer, we process technical data such as IP address, user agent, timestamp, referrer, device and geo signals, click and transaction identifiers, and sub-ID values passed by affiliates. Affiliates must not pass personal information in sub-IDs.
- Website data. Standard server logs and analytics data for clickheist.com: pages viewed, approximate location, device, and referrer.
- Consumer lead data. For lead-generation and pay-per-call offers, we may process the lead or call record needed to deliver, validate, and pay for the conversion. We process it on behalf of the advertiser and under the offer's rules.
3. How we use it
- To review applications, operate accounts, and provide the network platform.
- To track, attribute, validate, and pay for conversions, and to bill advertisers.
- To detect and prevent invalid traffic, misrepresentation, and violations of offer rules or law.
- To meet legal, tax, and accounting obligations, and to enforce our terms.
- To communicate about your account, offers, payouts, and service updates. Marketing emails include an unsubscribe link.
- To improve the website and platform, using aggregated or de-identified data where possible.
[Lawyer review] Legal bases under GDPR/UK GDPR where applicable: performance of a contract, legitimate interests (network integrity, security, business operations), legal obligation, and consent where required.
4. Cookies and tracking
clickheist.com uses strictly necessary cookies and, if enabled, analytics cookies. The network's tracking links may set cookies or use server-side identifiers on advertiser and affiliate pages to attribute conversions. You can control cookies in your browser; disabling them may affect attribution. Where the law requires it, consent for non-essential cookies is collected before they are set. [Lawyer review] Cookie banner and consent tooling to be confirmed for EU/UK visitors.
5. Sharing
- Advertisers and affiliates see the data needed to run and reconcile offers, such as conversion records, sub-IDs, and the affiliate ID responsible for a conversion. We do not sell affiliate contact lists to advertisers or vice versa.
- Service providers who host, track, email, pay out, verify identity, or filter invalid traffic on our behalf, under contracts that restrict their use of the data.
- Payment and tax. Banks, payment processors, and tax authorities as needed to pay you, bill you, and file required reports.
- Legal. When required by law, subpoena, or to protect rights, safety, or the integrity of the network.
- Business transfers. In a merger, acquisition, or sale of assets, subject to this policy.
6. Retention
Account and payment records are kept for as long as the account is active and for the period required by tax and accounting law afterwards (generally seven years). Tracking data is retained for the attribution and reconciliation window of each offer plus a reasonable dispute period, then deleted or aggregated. Applications that are not approved are deleted within 12 months. [Lawyer review] Confirm retention periods against applicable law.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sale" or "sharing"; we do not sell personal information for money and do not use it for cross-context behavioral advertising. To exercise a right, email legal@clickheist.com. We will verify your identity before acting. You may appeal a decision by replying to our response. [Lawyer review] Confirm state-law disclosures (CA, VA, CO, CT, UT, TX, OR, and others) and EU/UK representative requirements if applicable.
8. Security
We use access controls, encryption in transit, logging, and vendor due diligence to protect data. No system is perfectly secure; if a breach affects you, we will notify you as required by law.
9. International transfers
We are based in the United States and process data there. If you are outside the U.S., your data will be transferred to the U.S. and other countries where our providers operate, using contractual safeguards where required. [Lawyer review] Standard Contractual Clauses or other transfer mechanism to be confirmed.
10. Children
The website and network are for businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us and we will delete it.
11. Changes
We may update this policy. The effective date at the top changes when we do, and material changes are announced by email or in the platform.
12. Contact
Click Heist LLC, 7901 4th St N, STE {{SUITE}}, St. Petersburg, FL 33702, USA. Email: legal@clickheist.com.