Privacy Policy

Effective Date: October 24, 2026

1. About This Policy

This Privacy Policy explains how Clinket collects, uses, discloses, stores and protects personal information in Canada and the United States. It applies to the Clinket customer and provider websites and mobile apps, the AI Assistant phone service, Outbound calls, Ask Clinket, Clinket messages and emails, and every other Clinket service that links to this Policy (together, the "Platform"). It is also our notice at collection for California residents.

It applies to everyone whose personal information we handle: customers who look for and book services; providers (businesses that offer services) and the people who run them; team members invited to a provider's business; people who phone a business's AI Assistant line; contacts a business calls through Outbound calls; people whose business we list from public information; and visitors to our websites and apps.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and its fair information principles, Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), the Personal Information Protection Acts of Alberta and British Columbia, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), and the comprehensive privacy laws of other U.S. states. When a business uses Clinket to keep its own contacts, call them, store its documents or keep records about its own customers, Clinket handles that information on the business's behalf as its service provider (see Section 19).

2. The Short Version

We collect the personal information needed to run the Platform: your account details, the bookings, quotes, messages and invoices you create, and, for businesses, their profile, team and calls.
When a business turns on the AI Assistant, calls to its Clinket number can be answered by an AI, recorded, transcribed and summarized. Callers hear a notice at the start. Recordings, transcripts and summaries are kept for 90 days.
We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use your messages or documents to train AI models. We use call recordings, transcripts and summaries to improve our AI only when the business that received or made the call allows it, and our AI provider does not use any of them to train its models.
We do not collect biometric identifiers or create voiceprints. Callers are recognized by their phone number, never by their voice.
Your information is stored in Canada and the United States, and some is processed in other countries. Section 12 explains this.
You can access, correct and delete your information, withdraw consent, and opt out of certain uses, as Section 15 explains.

3. Personal Information We Collect and Why

This section lists each kind of personal information we collect and the purpose we use it for. The category names used by California law are shown in Section 10.

3.1 Your account and sign-in

What: your name, email address, mobile number, language, the way you sign in (password, one-time code by SMS, WhatsApp or email, passkey, or Google, Facebook or Apple sign-in), your passwords in protected (hashed) form, the public part of any passkey you register, your signed-in devices and sessions, and a record of sign-in attempts including the IP address and browser or app details.
Why: to create your account, sign you in, keep your account secure, stop misuse, and contact you about your account.
If you sign in with Google, Facebook or Apple, we receive your name and email address from that provider. Passkeys use your device's own fingerprint or face check, which never leaves your device; we receive only a public key.

3.2 Customers

What: saved addresses, the services you search for and view, your cart, bookings, quote requests ("Get Quotes"), quotes you receive, invoices, reviews, photos you add, messages with providers, and your notification, marketing and calling-permission choices.
Why: to show you services near you, send your requests to suitable providers, let you book, message and pay providers where payments are available, show your history, send you updates about your bookings, and handle problems and disputes.
A business may also create a booking, quote or invoice for you, for example after you phone it. If you later prove that your phone number or email address is yours, those records are linked to your account. If a booking or invoice is not yours, you can tell us using "This isn't my booking" or "This isn't my invoice".

3.3 Providers and businesses

What: business name and description, the business email, phone and address (with its map location), service areas, Locations, opening hours, services and prices, offers, photos and portfolio, licences or certificates you upload, tax details you give us, your public page name, and your plan, add-ons and billing history.
Why: to build and show your public Clinket page, place you in search results, send you Customer requests, manage your bookings, quotes, invoices, contacts and calendar, bill you for your plan, and support you.
Public information: your business name, business email, business phone, address and map location, hours, services, prices, photos and reviews are shown publicly on your Clinket page and may be shown by search engines and AI assistants. Do not put personal details on your public page that you do not want to be public.

3.4 Team members

What: your name, email address and phone number, your roles, teams and Locations, when you joined, whether you are active, suspended or removed, and the work assigned to you.
Why: to let the Primary owner manage who can do what in the business, route work and messages, and keep a history of who did what.
Your name, email and phone number are visible to the people in the business whose role lets them see the team, such as the Primary owner, Administrators, Operations managers, Dispatchers and Read-only auditors. The business keeps an activity history of actions taken in its account, showing the name of the person who acted. When a business uses the AI Assistant, the AI may know team members' first names so it can respond when a caller asks for someone by name.

3.5 People who call a business's AI Assistant line

What: your phone number, the call time and length, the call recording (if the business has recording on), a written transcript, an AI summary, the languages spoken, and anything you choose to tell the AI, such as your name, address, the service you need, or a message for the business. If you agree on the call to receive calls about offers, or ask not to be called, we record that answer.
Why: to answer the call on the business's behalf, book or reschedule appointments, prepare quotes, take messages and callback requests, send you the details you ask for, record your calling choices, and give the business a record of the call so it can follow up.
Section 6 explains call recording, transcripts and how callers are recognized.

3.6 Contacts called through Outbound calls

What: the name and phone number the business holds for you, the details the business chooses to share with its AI Assistant for the call (for example an appointment reminder or a past booking), the call result, your answers to the business's questions, any callback you ask for, any permission you give to be called and how you gave it, and any request to stop calls.
Why: to place the call the business asked for, record the outcome for the business, keep proof of permission, and make sure stop requests are always respected.
When you give a business permission to call you, for example on our permission page, we record the date, the wording you agreed to, the name you typed, how your phone number was confirmed and, for a permission given on a recorded call, the relevant part of the recording.

3.7 Businesses listed from public information

What: for a business that is not yet on Clinket, we may prepare a listing from information the business has made publicly available online, such as its name, business contact details, address, services, prices, opening hours, photos and the name of the owner where it is publicly shown. We record where each item came from.
Why: to help customers find local services and to invite the business to claim and manage its listing.
These listings are marked as set up by Clinket. We use AI to help check and tidy the information. Until the business claims the listing, we contact it by email only, never with marketing, and every email has a link to stop further emails. The business can claim the listing, correct it, or ask us to remove it. Anyone can use "Report wrong info" on the listing.

3.8 Website and app visitors

What: device and browser details, a shortened IP address, your language, the pages you visit, and your approximate location if you allow it. See Section 8 for analytics.
Why: to run and protect the websites and apps, understand how they are used and improve them.
If you use "Tap to talk" on the AI Assistant website, you speak with an AI in your browser. That conversation is not recorded and no transcript is kept; only the callback details you give and a short summary are sent to the Clinket team so we can get back to you. Some public forms are protected by Google reCAPTCHA, which checks for automated misuse.

3.9 Payments and billing

What: your plan, add-ons, minute packs, invoices, taxes and payment history; for cards, only the card brand, last four digits and expiry date.
Why: to charge for subscriptions, the AI Assistant add-on and minute packs, take payments for bookings where that is available, keep tax and accounting records, and prevent fraud.
Clinket never stores full card numbers or security codes. Card details are entered in our payment processor Stripe's secure fields.

3.10 Messages and notifications

What: messages, photos and files you send through Clinket, and the record of messages we send you by email, SMS, WhatsApp and push notification, including whether they were delivered.
Why: to let customers and businesses talk to each other and to keep you informed about your bookings, quotes, invoices, calls and account.
Messages are stored in encrypted form. If an address or number cannot receive messages, we keep a short record of that so we stop sending to it.

3.11 Ask Clinket and business documents

What: documents a business uploads (such as price lists, menus or brochures), the text read from them, the questions team members ask in Ask Clinket and the answers.
Why: to let a business ask questions about its own documents and data, and to let the AI Assistant answer callers from the business's own information.
Ask Clinket only shows a team member what their role allows. Answers are produced by AI and can be wrong.

4. Where Personal Information Comes From

From you, when you create an account, book, message, call, upload or fill in a form.
From businesses that use Clinket, when they create a booking, quote or invoice for you, save you as a contact, invite you to their team, or ask their AI Assistant to call you.
From your calls, when you phone a business's AI Assistant line or answer an Outbound call.
From public sources, for listings of businesses that are not yet on Clinket.
From sign-in providers (Google, Facebook, Apple, WhatsApp) when you choose to use them.
From phone carriers and payment processors, such as caller numbers and caller verification results, delivery reports, number checks and payment results.
From your device, such as device type, app version and, if you allow it, approximate location.

5. How We Use Personal Information and Your Consent

To provide the Platform: accounts, search, Customer requests, bookings, quotes, invoices, messages, reviews, the AI Assistant, Outbound calls, Ask Clinket and team tools.
To keep the Platform safe: securing accounts, detecting fraud, spam and abuse, enforcing our terms, and pausing campaigns that receive many opt-outs or complaints.
To bill businesses, process payments where available and meet tax and accounting duties.
To send service messages, and marketing where you have agreed or the law allows it (Section 17).
To give businesses statistics about their own listings and calls, and market comparisons built only from groups of businesses large enough that no single business or customer can be identified.
To improve search, recommendations and features, using analytics as described in Section 8.
To comply with the law, respond to lawful requests and protect people's rights and safety.

We collect only what we need for these purposes. We ask for your consent in a way that fits the sensitivity of the information and what you would reasonably expect: express consent for optional uses such as analytics in Canada, marketing messages and calling permissions, and implied consent where the use is obvious from what you asked us to do. You can withdraw consent at any time, subject to legal or contractual limits, by changing your settings or writing to legal@clinket.com. If you withdraw consent needed for a service, we may not be able to provide it.

6. Calls: AI Assistant and Outbound Calls

6.1 Calls to an AI Assistant line

A business that uses the AI Assistant has a Clinket phone number. Depending on the business's settings, the call may ring the business first and be answered by the AI if nobody answers, or be answered by the AI straight away.
At the start of the call, before anything else, callers hear a notice that the call may be recorded and may be answered by an AI assistant. The AI Assistant identifies itself as an AI, and businesses are not allowed to set it up to claim to be a person.
Recording is on by default; the business can turn it off. When it is on, the whole call after the notice is recorded, including any part where a person from the business talks to you, and any voicemail. By continuing the call after the notice, you agree to the recording. If you do not want to be recorded, you can hang up and contact the business another way.
Transcripts and summaries: the conversation is turned into a written transcript, and our AI writes a summary with suggested next steps for the business, such as a draft booking, quote or new contact. The business can watch the transcript live and can join the call.
If a business has paused its AI, uses its private mode, or has used up its minutes, the call is simply passed to the business: nothing is recorded, transcribed or summarized, and no notice is played.
Some U.S. states and Canadian rules require every party to agree to a recording. Businesses are responsible for giving any additional notice their local law requires.

6.2 Recognizing callers

When you call an AI Assistant line, we check your phone number against the business's own contacts and against Clinket accounts. If we find a match, the AI is given your name (and, where held, your email address) so it can greet you by name, find your bookings and save the call correctly, and the business sees who called. We recognize callers only by phone number. We do not collect biometric identifiers or biometric information, such as voiceprints or face geometry, and we do not identify people by their voice.

6.3 Outbound calls

With Outbound calls, the business is the caller: it chooses who to call and why, and Clinket provides the tool. The AI Assistant says at the start that it is an AI and names the business it is calling for. Nothing about the reason for the call is shared until the person confirms who they are.
If the business has recording on, the call is recorded only after you have heard the notice that the call is recorded.
Calls about offers are made only to people who have given that business their own permission, and the AI tells you how to stop them. You can ask the AI to stop calling you at any time, and it will record your request immediately. A stop request is always honoured: it blocks future calls from that business, and a request never to be contacted blocks all messages from that business to your number. Clinket also keeps its own platform-wide stop list.
Clinket checks stop lists, permitted calling hours in your local time and limits on how often a number can be called. Clinket does not check the Canadian National Do Not Call List or the U.S. National Do Not Call Registry; the business is responsible for following those rules, the Telephone Consumer Protection Act, the Telemarketing Sales Rule, the CRTC Unsolicited Telecommunications Rules, Canada's Anti-Spam Legislation and state laws. Our Terms explain these responsibilities.

6.4 What we do not do with calls

We use call recordings, transcripts and summaries to improve our AI only when the business that received or made the call has left on the setting “Use call recordings to improve the Clinket AI assistant” in its AI Assistant settings; the business can turn it off at any time. We never sell them, share them with other businesses or use them for advertising, we do not use messages for this, and our AI provider, Microsoft Azure OpenAI, does not use them to train its own models. The business that received or made the call can listen to and download its recordings; once a business downloads a recording, the business is responsible for that copy. Phone carriers may keep their own copies of call records under their own policies.

7. AI and Automated Decisions

We use AI to answer and make calls for businesses, write call summaries and suggestions, read documents businesses upload, answer questions in Ask Clinket, help businesses write descriptions and call scripts, check listings prepared from public information, and improve search.
Our AI runs on Microsoft Azure AI services under contract. Your content is processed to provide the feature and is not used to train AI models, by us or by Microsoft.
Some decisions are made automatically, such as which providers receive a Customer request, the order of search results, and draft bookings, quotes or contacts created from a call. Bookings requested by the AI must be confirmed by the business.
If a decision about you is made only by automated processing, you may ask us what personal information was used, the main reasons and factors that led to it, and to have a person review it, and you may ask us to correct the information used. Write to legal@clinket.com.
AI can make mistakes. Please check important details, such as dates, prices and addresses, with the business.

8. Analytics

8.1 How our analytics work

To improve search, recommendations and other features, and to detect fraud and abuse, the Clinket apps record structured analytics events about actions taken on the Platform. Analytics events do not contain the text of your messages or reviews, the description of a quote, booking or contact notes, the contents of files you upload, call audio or transcripts, or other free text you type. They contain only short labels.

Before analytics data is stored, your IP address is shortened so that it no longer identifies your device, any email address or phone number that appears is replaced with a placeholder, and your location, if you have allowed it, is rounded to about one kilometre. Clinket does not keep precise geolocation in analytics records.

8.2 Your choice, and the default where you live

In Canada, privacy is the default: analytics events are kept without your account number, device identifier or business identifiers unless you say yes to analytics in Cookie Preferences. In the United States, analytics events include those identifiers unless you say no in Cookie Preferences. Anywhere, if you say no, events are kept only in de-identified form. You can change your choice at any time.

8.3 Information sent with analytics events

Your account number when you are signed in, subject to your choice above.
A device identifier created by Clinket and stored in your browser or app, used to keep recommendations consistent on that device. It is not an advertising identifier, and Clinket never reads your phone's advertising ID. You can clear it by clearing your browser or app storage.
A session identifier that ends when you close the tab or app.
The app version, a short request reference used to find errors, the page path you visit (without the rest of the address), and the website that sent you to us.
Your shortened IP address, browser or app type, country and language.
Your rounded location, only if you have allowed location for features such as nearby search. Clinket never asks for location only for analytics.
For businesses, the business, team membership and Location the action belongs to.
The reference numbers of the services, providers, bookings, quote requests, invoices and categories an action relates to, but never their contents.
The search words you type, used to improve spelling correction and results, with email addresses and phone numbers removed.
Engagement signals such as which result you clicked, time on a page and how far you scrolled, and a reference linking a search to what you then viewed or booked.

8.4 Activity we record

Account and settings: registration, sign-in, security and preference changes, sign-out.
Marketplace: search, page views, bookings, quote requests and quotes, Customer requests, invoices and cart actions.
Messages and contacts: opening conversations, sending messages, attaching files and managing contacts, never the text.
Reviews: posting, editing, voting, reporting and replying, never the review text.
Business tools: services, photos, offers, calendar, team, Ask Clinket, plan and billing pages and their outcome (for example payment succeeded or failed), never card details.
Calls: for AI Assistant and Outbound calls, only the type of outcome (for example missed, handled by the AI, booking made) and a length range, linked to the business; never the caller's phone number or identity.
Navigation and errors: menus, notifications, permissions given or refused, and error codes. Some frequent events are recorded only for a sample of visits.

8.5 What analytics never capture

Message, review, quote, booking or note text, or the contents of uploaded files.
Call audio, recordings or transcripts.
Your name, full email address, full phone number or postal address.
Passwords, one-time codes, passkeys or other sign-in secrets.
Card numbers or bank details.
Precise geolocation.
Health, religious, political, sexual-orientation or biometric information.
What you type before you submit a form.
Pages for resetting passwords or verifying codes.

8.6 Google Analytics, Google Tag Manager and crash reports

On our websites, Google Analytics and Google Tag Manager are loaded only after you say yes to analytics cookies. Their advertising features are turned off, and they are not loaded on pages opened from private links or permission pages. Our mobile apps use Google Firebase Crashlytics, which sends a report when the app crashes, with device model, operating system, app version, crash details and an app-install identifier, so we can fix errors. See our Cookie Policy for details.

9. Technology That Identifies, Locates or Profiles You

Some features use technology that can identify, locate or build a profile of you: recognizing callers by phone number (Section 6.2), nearby search using your approximate location, and personalized recommendations based on your searches and views. Location is used only if you allow it in your browser or device settings, and you can turn it off there at any time. Analytics identifiers in Canada are off until you turn them on in Cookie Preferences, and you can turn them off anywhere at any time.

10. Disclosure, Sale and Sharing

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months, and we have no actual knowledge of selling or sharing the information of anyone under 16. We do not disclose personal information to third parties for their own direct marketing. We disclose personal information only as follows:

With the businesses you deal with: when you book, request a quote, message, call or are called by a business, that business receives the details needed to serve you.
Within a business: team members see records according to their role.
Publicly: provider public pages, reviews and business replies are public and may appear in search engines and AI assistants. We tell search engines when public pages change.
With our service providers (Section 11), who process information only on our instructions and under contract.
For legal reasons: when required by law, court order or a lawful request from a government authority, or to protect the rights, safety and property of people and of Clinket, and to prevent fraud.
In a business transfer: if Clinket is merged, acquired or sells its assets, personal information may pass to the new owner under this Policy.

In the past 12 months we collected, and disclosed for business purposes, the following categories of personal information under California law:

Identifiers (name, email, phone, account number, IP address, device identifier): disclosed to businesses you deal with and to service providers for hosting, messaging, calls, sign-in and payments.
Customer records (addresses, bookings, invoices, payment card brand and last four digits): disclosed to businesses you deal with and to hosting and payment service providers.
Commercial information (services viewed, bookings, quotes, plans and purchases): disclosed to businesses you deal with and to hosting and analytics service providers.
Internet or network activity (pages viewed, searches, app interactions): disclosed to hosting and analytics service providers.
Approximate geolocation (rounded location, addresses): disclosed to hosting and mapping service providers.
Audio and electronic information (call recordings, transcripts, photos, files): disclosed to the business on the call or that owns the file, and to hosting, telephone and AI service providers.
Professional information (business details, roles in a team): disclosed publicly for business listings, within the business, and to hosting service providers.
Inferences (search preferences used for recommendations): not disclosed except to hosting service providers.
Sensitive personal information (account sign-in details with password; contents of messages between customers and businesses): disclosed only to hosting and messaging service providers. We use it only to provide the services you ask for, to secure the Platform and for other purposes the CCPA allows, so the right to limit its use does not apply.

11. Our Service Providers

Microsoft Azure: hosting, databases, file storage, search, push notifications, server logs, and AI services (Azure OpenAI, Azure AI Speech and Azure AI Document Intelligence).
Amazon Web Services (Amazon SES): sending email.
Telnyx: AI Assistant and Outbound phone calls, browser calling for businesses, and SMS.
Meta Platforms: WhatsApp messages and sign-in, and Facebook sign-in.
Stripe: subscription billing and, where available, booking payments.
Google: Google sign-in, Google Maps (address search and maps), Google Analytics and Tag Manager (only with your consent), Firebase (crash reports and app notifications) and reCAPTCHA.
Apple: Sign in with Apple and app notifications on Apple devices.
Mailchimp (Intuit): managing our email list for newsletters and product news.

Each of these providers handles personal information under contract and for the purposes above, and is not allowed to sell it or use it for its own purposes beyond what the law permits. Some, such as Google, Apple and Meta, also handle information you give them directly under their own privacy policies.

12. Where Your Information Is Stored and Transfers

Personal information of users in Canada and the United States is stored in data centres in Canada and the United States. Your account, sign-in and payment records and the files you upload are kept in Canada; bookings, messages, quotes, invoices, reviews, business profiles, customer contacts, notifications and carts are kept in the United States. Some is processed in other places:

AI processing (live AI Assistant and Outbound calls, call summaries, Ask Clinket, document reading and other AI features) takes place in the United States.
Service providers such as Telnyx, Stripe, Google, Meta, Apple and Mailchimp may process information in the United States or other countries.

We protect information outside your province, state or country with contracts and security measures that give comparable protection. Information stored or processed outside Canada, or outside your own country, may be accessed by the courts, law enforcement and national security authorities of that country under its laws. Before transferring personal information of Quebec residents outside Quebec, we assess whether it will receive adequate protection.

13. How Long We Keep Information

We keep personal information only as long as needed for the purpose it was collected for, or as the law requires, and then delete it or de-identify it. Main periods:

Call recordings, transcripts and summaries: 90 days. The live transcript of a call is deleted within 24 hours, once the summary is made.
Records that a call notice was played: kept as evidence that callers were told, showing only part of the phone number.
Stop requests and calling permission records: while the business is on Clinket and for 5 years after it closes, so stop requests keep working; supporting evidence files for 7 years. A permission to receive calls about offers lasts 2 years, after which the person must be asked again.
Outbound call results and finished campaigns: 365 days; closed follow-ups: 12 months.
Bookings and invoices: about 2 years; quotes: 1 year; quote requests: up to 1 year. Businesses should keep their own copies for tax purposes.
Messages: generally 1 year; closed conversations: 90 days.
Notifications: 30 to 90 days. Carts and recently viewed items: 30 to 90 days.
Business activity history: 90 days; payment-related entries: 1 year.
Sign-in attempts, account activity and ended sessions: 90 days.
Ask Clinket conversations: 30 days. Replaced documents: 60 days. Documents a business keeps on Clinket stay until the business removes them or closes.
Files from listings prepared from public information: 30 to 365 days (normally 90). The listing itself stays until it is claimed or removed.
Records of undeliverable addresses: 180 days.
Analytics: up to about 7 years; some search measurement records: about 90 days.
Billing and payment records: about 7 years.
Account details: while your account is open; see Section 16 for deletion.

14. Security and Breaches

We protect personal information with safeguards suited to its sensitivity, including encryption in transit and at rest, encrypted message storage, access limited by role, protected passwords and sign-in codes, monitoring and regular review. No system is perfectly secure, so we cannot guarantee absolute security.

If a breach of security safeguards or a confidentiality incident creates a real risk of significant harm to you, we will notify you and the regulators the law requires, including the Office of the Privacy Commissioner of Canada and the Commission d'accès à l'information du Québec, and we keep a record of every such incident. We also give notice under the U.S. state breach laws that apply.

15. Your Rights

15.1 Canada

Access: ask what personal information we hold about you, how it has been used and to whom it has been disclosed.
Correction: have inaccurate or incomplete information corrected.
Withdraw consent at any time, subject to legal or contractual limits.
Deletion: ask us to delete information we no longer need.
Portability (Quebec): receive personal information you gave us in a structured, commonly used technical format, or have it sent to another organization.
De-indexing (Quebec): ask us to stop spreading your personal information or to de-index any link to your name that gives access to it, where the law allows.
Automated decisions (Quebec): be told about, and ask for review of, a decision made only by automated processing (Section 7).
Complain: to our Privacy Officer, and then to the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or the Information and Privacy Commissioner of Alberta or British Columbia.

15.2 California

Right to know the categories and specific pieces of personal information we collect, its sources, the purposes and who we disclose it to.
Right to delete personal information we collected from you, subject to legal exceptions.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing: we do neither, but you can still use the "Do Not Sell or Share My Personal Information" page at /do-not-sell-share, and we honour the Global Privacy Control signal from your browser as an opt-out.
Right to limit the use of sensitive personal information: we use it only for permitted purposes (Section 10).
Right not to be discriminated against for using these rights. We do not offer financial incentives for personal information.

15.3 Other U.S. states

If you live in a state with a comprehensive privacy law, such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you may have rights to access, correct, delete and receive a copy of your personal data, and to opt out of targeted advertising, sale and certain profiling. We do not sell personal data, use it for targeted advertising or use it for profiling that produces legal or similarly significant effects. If we refuse your request, you can appeal by replying to our decision; if we deny your appeal, you can contact your state Attorney General.

15.4 How to make a request

You can change most account details yourself in the app. For any other request, write to legal@clinket.com. We verify your identity before acting, usually by confirming details on your account or a code sent to your email or phone. You may use an authorized agent; we may ask for your signed permission and confirm your identity directly. We respond within 30 days in Canada and within 45 days in the United States, and we tell you if we need more time as the law allows. If your information was given to us by a business (for example as one of its contacts), we may pass your request to that business and help it respond.

16. Deleting Your Account

You can ask us to delete your account in the app (in your profile, under data deletion) or by writing to legal@clinket.com. We deactivate your account straight away: you are signed out everywhere and your account can no longer be used. We then complete the deletion within the time the law requires, keeping only what the law requires or allows us to keep, such as tax and billing records, stop requests (so they keep working), and records needed to prevent fraud or resolve disputes. Deleting your account does not close a business you own; the Primary owner can close the business separately.

17. Messages and Marketing Choices

We send service messages about your account, bookings, quotes, invoices, calls and security by email, SMS, WhatsApp and push notification. WhatsApp messages are sent from Clinket's shared business number.
We send marketing messages only with your consent where Canada's Anti-Spam Legislation or other law requires it, and every marketing email follows the CAN-SPAM Act, including a working unsubscribe link. You can opt out at any time with the unsubscribe link, in your notification settings, or by replying STOP where offered. Opting out of marketing does not stop important service messages.
We never add you to our marketing list just because a business booked, quoted, invoiced or saved you as a contact.

18. Children

Clinket is for adults: you must be 18 or older, or the age of majority in your province or territory. The Platform is not directed to children, and we do not knowingly collect personal information from children under 13 or from anyone under the age required to use Clinket. If you believe a child has given us personal information, contact legal@clinket.com and we will delete it.

19. Data a Business Puts on Clinket

When a business uploads or creates information about its own customers, contacts or staff (for example its contact list, call scripts, notes or documents), the business controls that information and is responsible for having consent or another lawful basis and for giving any notice required, including before it calls anyone through Outbound calls. Clinket handles that information as the business's service provider, following its instructions and our terms. If you want to exercise your rights over such information, please contact the business; you can also write to us and we will help.

20. Changes to This Policy

We may update this Policy when our services or the law change. If a change is significant, we will tell you in the app or by email before it takes effect, and where the law requires it we will ask for your consent again. The effective date at the top shows when this Policy last changed.

21. Privacy Officer and Contact

Clinket is accountable for the personal information it controls. Our Privacy Officer is responsible for our compliance with this Policy and is the person in charge of the protection of personal information under Quebec law. You can reach the Privacy Officer at legal@clinket.com. For general help, write to support@clinket.com.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), to your provincial privacy commissioner, or, in the United States, to the California Privacy Protection Agency or your state Attorney General.