Privacy & Data Processing Notice

Clikiti helps web-design agencies and freelancers find businesses whose websites could be improved and prepare redesign proposals for them. This notice explains what business information we process, why, and how any business can object or ask us to delete it.

What we collect

We process publicly available business information about company websites, including the domain, publicly listed business name, location and contact details, and the results of an automated review of the public website (for example mobile-friendliness, performance, accessibility and trust signals). We do not attempt to collect special-category personal data, and we do not access anything behind a login.

Scanning of public websites

When an agency adds or discovers a business, Clikiti visits that business's publicly accessible web pages in the same way a browser or search engine would. We may capture screenshots, page text, images, colors, logos and technical signals (such as page speed or the technologies in use) so the agency can see what could be improved. We only read pages that anyone can open without an account, and we do not bypass paywalls, logins or other access controls.

Redesign concepts

Using the scan, Clikiti can generate a redesign concept: an illustrative mock-up of how the business's website could look. To make the concept relevant, it may reference the business's own public content and branding, such as its name, logo, colors, photos and copy. Concepts are created only so an agency can pitch its services to that business.

Redesign concepts are not affiliated with, sponsored by, or endorsed by the business they depict. They are unsolicited proposals prepared by an independent agency, and the business's trademarks and content remain the property of their owners.

Why we process it (lawful basis)

We rely on legitimate interests: enabling agencies to identify businesses that may benefit from a website improvement and to make a relevant, proof-based proposal. This is business-to-business processing of information that is already public. You have the right to object to this processing at any time, as described below.

Who sees it

A review and any redesign concept are visible only to the specific agency that created them and to anyone the agency chooses to share the private proposal link with. Proposal pages are not indexed by search engines and are not publicly listed.

Outreach by agencies

Agencies, not Clikiti, decide whether and how to contact a business, and they are responsible for doing so lawfully (see our Terms of Service). Every outreach email sent through Clikiti includes the sending agency's name and an opt-out line linking to the removal method below. If you reply asking not to be contacted again, the agency must honor that request.

Data retention

We keep scan results, page captures, screenshots and redesign concepts only for as long as the agency that created them keeps the related record in its workspace, and no longer than needed to provide the service:

• If a business requests removal, all records we hold for its domain are deleted immediately and the domain is added to a suppression list so it is not surfaced again.
• When an agency deletes a record, the related scan data and concepts are deleted with it.
• When an agency closes its account, its workspace data, including scans and captures, is deleted within 90 days, except where we must keep limited records to meet legal obligations.
• We keep a minimal log of removal requests (the domain, the date and any contact details you give us) so we can prove we honored the request and keep the domain suppressed.

Subprocessors

We use the following service providers to run Clikiti. They process data on our behalf, under contract, and only to provide their service:

• Google Cloud: AI analysis of scans and generation of redesign concepts and images.
• Abacus.AI: document rendering and email notifications.
• Amazon Web Services (S3): storage of page captures, screenshots and uploaded files.
• Stripe: subscription billing and payments for agencies. Stripe does not receive scanned business data.
• Netlify: only when an agency chooses to deploy a concept or site to Netlify from Clikiti.

Some of these providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Your rights

You can object to processing and request deletion of everything we hold about your website at any time. You also have the right to access the information we hold and to lodge a complaint with your local data-protection authority. These rights apply under the GDPR, UK GDPR, CCPA/CPRA and PIPEDA where relevant.

How to remove your data (opt-out)

You can have your business removed in either of these ways:

1. If you received a proposal link or an outreach email, open the proposal link and use Request removal in its footer. That immediately deletes all records we hold for your domain across every agency and prevents your site from being surfaced again.
2. Email [email protected] with the website domain you want removed. We will action it promptly and confirm by email.

To stop a particular agency from contacting you, you can also reply to its email and ask it not to contact you again.

Contact

For any privacy request or question, contact [email protected].

See also our Terms of Service.