Legal
Privacy Policy
How clikd: collects, uses, and protects your personal data.
Last updated August 10, 2026
This Privacy Policy describes how clikd:, provided and operated by Cheriie AB (org. nr: 559527-2393, VAT: SE559527239301, "we", "us", "our"), collects, uses, stores, and protects your personal data when you use our website (https://clikd.app), applications, social media planning tools, bio storefronts, member communities, AI copilot features, custom domain services, and associated services ("the Service").
We respect your personal privacy and process all personal data in compliance with the EU General Data Protection Regulation (GDPR), UK GDPR, and applicable global data protection legislation.
1. Data Controller & Contact Information
Cheriie AB is the Data Controller responsible for processing your personal data on the clikd: platform.
- Legal Entity: Cheriie AB
- Org. nr: 559527-2393
- VAT Registration Number: SE559527239301
- Registered Address: Sturegatan 18 A, 211 50 Malmö, Sweden
- Official Website: https://clikd.app
- Privacy, Legal & GDPR Contact: hello@clikd.app
- Support Inquiries: hello@clikd.app
2. Personal Data We Collect
We collect data directly provided by you, data generated through your use of the Service, and data received from third-party social media and AI platforms that you choose to connect to your account.
A. Account, Profile & Custom Domain Information
Name, email address, encrypted password, profile avatar, username/handle, and preferred language.
For PRO Users: Custom domain names (e.g., yourname.se), CNAME/A-record verification states, and Vercel SSL routing status.
For Creators: Business details, tax registration number / personal identity number (for identity verification), VAT registration number, and billing address.
B. AI Copilot & Prompt Inputs (OpenAI API)
When you use our AI Copilot tools (such as automated social caption generation, content polishing, or AI member Q&A), we process the text prompts, tone selections, and topic inputs you provide.
Note: AI inputs are processed transiently via the official OpenAI API to generate response content and are not used by us or OpenAI to train public AI models.
C. Payment & Transaction Data
When purchasing subscriptions, digital products, or community memberships, we collect transaction history, purchase amounts, and chosen payment methods (Swish, Vipps, Card, or Bank Transfer).
Note: All card and direct payments are securely processed by our certified payment partners (Stripe, Swish). clikd: and Cheriie AB never store full credit card numbers or sensitive banking details on our servers.
D. Social Media & Direct Messaging Data (APIs)
When you connect third-party platforms (Instagram, Facebook, TikTok, Pinterest, YouTube, LinkedIn) to our Content Planner, Social Inbox, and Analytics Suite, we collect:
- User ID, account handle, profile picture, follower counts, and valid OAuth access tokens.
- Scheduled media (images, videos, captions, hashtags, Pinterest Pins, TikTok drafts).
- Performance and analytics data (impressions, reach, clicks, video views, engagement rates).
- Direct Messaging Data (Instagram DMs & Meta Messenger): When enabled for your Social Inbox or automated comment-to-DM flows, we process incoming message text, sender handles, and automated response triggers.
3. Third-Party Integrations & Platform-Specific API Terms
To provide multi-channel scheduling, messaging, and AI generation, clikd: integrates with official third-party APIs. By connecting your accounts, you agree to the processing of data in accordance with each platform's respective terms:
A. OpenAI API (AI Copilot Suite)
We utilize the OpenAI API (gpt-4o-mini / gpt-4o) for social caption generation and AI assistants. Data sent to OpenAI is governed by OpenAI's Business Privacy Policy.
B. Pinterest API
We utilize the Pinterest Developer API (boards:read, boards:write, pins:read, pins:write) to publish and schedule Pins. Your interaction with Pinterest is subject to the Pinterest Privacy Policy.
C. TikTok API (Display & Content Posting API)
Data received from TikTok (account stats, video lists, Direct Post uploads) is processed in accordance with the TikTok Privacy Policy.
D. Meta (Instagram Graph API, Facebook & Messenger API)
We process Meta data strictly in compliance with Meta's Platform Terms. To request automated deletion of your Meta data, visit https://clikd.app/api/auth/data-deletion or contact hello@clikd.app.
E. YouTube API Services (Google)
Our Service utilizes YouTube API Services. By using YouTube features in clikd:, you agree to the YouTube Terms of Service and Google Privacy Policy. Manage access via Google Security Settings.
4. Purpose and Legal Basis for Data Processing
| Purpose of Processing | Categories of Personal Data | Legal Basis (GDPR) |
|---|---|---|
| Provide & Operate the Service (Planner, Bio Store, Community, Custom Domains) | Account Details, Custom Domain Records, Usage Data | Performance of a Contract (Art. 6.1 b) |
| AI Content Generation & Assistance | Text Prompts, Topic Inputs, Tone Preferences | Performance of a Contract (Initiated by User) |
| Process Payments, Payouts & Taxes | Payment & Transaction Data, Billing Address | Performance of a Contract & Legal Obligation (Accounting Laws) |
| Social Media & Pinterest Publishing | API Tokens, Scheduled Pins/Posts, Captions | Performance of a Contract (Initiated by User) |
| Social Inbox & Automated Direct Messaging | Message Sender Handles, Message Content | Legitimate Interest / Contract |
| Customer Support, Debugging & Security | Account Data, IP Address, Technical Logs | Legitimate Interest (Art. 6.1 f) |
5. Sub-processors
We never sell your personal data. We share data only with trusted third-party sub-processors under strict Data Processing Agreements (DPA):
| Sub-processor | Purpose | Location | Transfer Safeguard |
|---|---|---|---|
| Supabase Inc. | Relational Database, Auth & Realtime | EU (Frankfurt) | GDPR DPA / EU Hosting |
| Vercel Inc. | Web Application Hosting & Custom Domain SSL | EU / Global Edge | EU-U.S. Data Privacy Framework |
| OpenAI LLC | AI Copilot Text Generation | USA | Data Privacy Framework / DPA |
| Stripe Inc. | Payment Processing & Subscription Billing | EU / USA | PCI-DSS Level 1 / DPA |
| Meta Platforms Inc. | Instagram, Facebook & Messenger API | EU / USA | Meta Platform Terms / SCCs |
| TikTok Inc. | TikTok Content Posting & Analytics API | EU / USA | TikTok Developer DPA |
| Pinterest Inc. | Pinterest Pin Publishing & Board API | USA | Pinterest Developer Terms |
| Fortnox AB | Nordic VAT Calculation & Invoice Sync | Sweden | Swedish Accounting Laws |
6. Your Rights Under GDPR (EU & UK)
You have the following rights regarding your personal data:
- Right of Access & Portability: Request a copy or structured export of your personal data.
- Right to Rectification: Request correction of inaccurate information.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your account and associated social API tokens.
- Right to Withdraw Consent / Disconnect: You can disconnect any social media account (Instagram, Pinterest, TikTok, YouTube, LinkedIn) at any time via Settings → Socials in your dashboard. This immediately deletes all stored OAuth tokens.
To exercise your rights, contact hello@clikd.app. We respond to all requests within 30 days.
7. Updates to This Policy
We may update this policy periodically to reflect platform enhancements or legal requirements. Material updates will be notified via email or displayed in the Service at least 14 days prior to taking effect.