Privacy policy

This policy explains how ClickMesh (“we”, “us”), operated by [legal entity name, registered address], handles personal data when you visit https://clickmesh.app, use the app at https://app.clickmesh.app, or when visitors click tracking links on hopwire.xyz or load our analytics script on our customers’ websites.

1. Our two roles

For our own customers (people who sign up for ClickMesh) we are the controller of account and billing-related data.

For data we collect on our customers’ behalf (clicks on their tracking links, visits to their websites, conversions and payments they send us) we act as a processor. Our customer is the controller and decides why that data is collected. If you clicked a link or visited a site that uses ClickMesh, please contact the owner of that link or site first; we will help them answer your request.

2. Data we process

Account data

• Email address, name (if you give one) and a hash of your password.
• Two-factor authentication settings.
• Workspace settings: campaigns, offers, traffic sources, sites and ad cost you enter or upload.
• Plan and subscription status. Card details are collected by our payment provider, not by us.
• Messages you send to support.

Tracked click data (on behalf of customers)

• Time of the click, the campaign, and the values our customer passes in the link (sub1–sub5 and the traffic source’s click ID).
• A hash of the visitor’s IP address. We do not store the raw IP address with click records.
• User agent (browser and device information), country derived from the IP address, and whether the click looked like a bot.
• Conversion data sent by affiliate networks by postback: the click ID, payout and the network’s transaction ID.

Website visitor analytics (on behalf of customers)

• Pages viewed, referrer, UTM campaign parameters, country and device type.
• A random visitor ID stored in a first-party cookie on the customer’s site, used to count visitors and to match a later payment to the visit.
• The analytics script does not collect names, email addresses or other personal identifiers, and we do not store raw IP addresses for pageviews.

Stripe payment metadata (on behalf of customers)

When a customer connects Stripe, Stripe sends us webhook events for completed checkouts and paid invoices. We use the amount, currency, time, Stripe object IDs and the visitor ID our customer placed in metadata. We do not receive card numbers. Stripe events can contain the buyer’s email or name; we use only the fields needed for attribution and [confirm before launch: whether any such fields are stored].

This marketing website

• We store the campaign that first brought you here (UTM parameters, ad click IDs, referrer) in your browser’s local storage for 30 days, and pass it to the app when you sign up, so we know which marketing works.
• When enabled, we use the Meta Pixel to measure our own ads. [Confirm the consent approach for the Meta Pixel before launch.]

3. How we use data

• To provide the service: redirect links, record clicks and conversions, show reports and attribute revenue.
• To filter bots and protect the service and our domains from abuse, including enforcing our acceptable use policy.
• To bill you and to send account and service emails.
• To answer support requests.
• To understand which of our own marketing brings sign-ups.

We do not sell personal data, and we do not use our customers’ tracked data to target ads.

4. Legal bases

Where the GDPR or similar laws apply, we rely on: performance of our contract with you (providing the service and billing), our legitimate interests (security, abuse prevention, improving the product, measuring our marketing), consent where the law requires it (for example, some cookies and pixels), and legal obligations (tax and accounting records). For data we process on behalf of customers, the customer is responsible for having a legal basis.

5. Processors we use

• Amazon Web Services (AWS): hosting, databases, queues and file storage.
• Cloudflare: the edge network that serves tracking links, the analytics script and this website.
• Dodo Payments: our merchant of record. Dodo Payments sells subscriptions to you, processes payments and handles sales tax, and acts as a controller for the payment data it collects.
• Brevo: sending account and service emails.

When the Meta Pixel is enabled on this marketing site, Meta Platforms receives data about your visit under its own terms.

6. International transfers

Our processors may handle data outside your country, including in the United States. Where required, transfers rely on safeguards such as the European Commission’s standard contractual clauses. [Confirm hosting regions and transfer mechanisms before launch.]

7. How long we keep data

• Raw click logs: 30 days on Free, 90 days on Starter and Pro, 180 days on Scale.
• Aggregated reports: 6 months on Free, 12 months on Starter, 24 months on Pro, 36 months on Scale.
• Account data: while your account is open, then deleted within [number] days of closing it, except records we must keep for tax or legal reasons.
• Backups are overwritten on a rolling schedule of [number] days.

8. Security

Data is encrypted in transit. IP addresses in click records are hashed. Accounts support two-factor authentication. Access to production systems is limited to people who need it. No system is perfectly secure; if a breach affects your data we will tell you as the law requires.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict some processing, to withdraw consent, and to complain to your data protection authority. To use these rights, email [email protected]. We will answer within the time the law requires.

10. If you are a ClickMesh customer

You are responsible for telling your visitors about tracking on your links and sites, and for getting consent where the law requires it, for example for the analytics cookie in some countries. Contact us if you need a data processing agreement.

11. Children

ClickMesh is a business tool and is not meant for anyone under 18.

12. Changes

We will post changes on this page and update the date at the top. If a change is significant, we will email account holders before it takes effect.

13. Contact

Email [email protected] or write to [legal entity name, registered address]. [Add an EU/UK representative if required.]