Privacy Policy
At Inclik, we believe your creator identity, bio link visitors, and connected social tokens belong entirely to you. Here is how we safeguard your data.
1. Introduction & Overview
Welcome to Inclik (“Inclik”, “we”, “our”, or “us”), operated by Goofybag Online Pvt. Ltd. Inclik provides a high-performance link-in-bio platform, creator commerce tools, dynamic widgets, and direct multi-platform social media publishing services.
This Privacy Policy details the types of information we collect when you access our website (inclik.com), create a creator profile, connect social media accounts, sell digital products, or interact with an Inclik-hosted bio page.
2. Information We Collect
A. Account & Profile Information
When you register for an Inclik account, we collect your name, email address, chosen handle (inclik.com/@handle), profile biography, avatar images, and billing contact details for subscription plans.
B. Bio Page Content & Widgets
We store all media, custom links, consultation booking slots, lead magnet downloadable assets, podcast notes, and digital store inventory you upload to render your personalized public bio page.
C. Visitor & Analytics Data
When visitors view your bio page, we aggregate non-personally identifiable metrics such as page impressions, link click counts, geographic region (country-level), browser type, and referrer URLs for creator analytics.
4. How We Use Your Information
- Service Delivery: To render your custom bio pages with ultra-fast edge caching across Cloudflare network.
- Multi-Platform Publishing: To schedule and dispatch updates to your selected personal profiles, company pages, and business feeds.
- Creator Commerce & Invoicing: To facilitate instant digital product delivery, consultation slot booking calendar syncs, and generate automated purchase receipts.
- Security & Fraud Prevention: To authenticate account access, verify email addresses, and block malicious bots.
5. AI & Google Gemini Integration
Inclik features Gemini AI-powered caption generators, bio copy polishers, and hashtag recommendations.
Zero User Data AI Training Policy:
Prompts, text drafts, and topics you submit to the AI Assistant are sent via secure enterprise API endpoints to Google Gemini solely to generate immediate responses. Your private post drafts and bio page data are NOT used to train public AI models.
6. Spam Prevention & Cloudflare Turnstile
To protect creators from automated bots, credential stuffing, and spam signups, Inclik implements Cloudflare Turnstile on authentication and registration forms.
Turnstile evaluates client interaction signals silently and privately without tracking user browsing across unrelated sites or serving intrusive visual puzzles. All evaluation tokens are single-use and validated on our secure backend.
7. Data Retention, Soft Disconnect & Account Deletion
Social Account Disconnect: When you disconnect a social media account or page from your dashboard, the connection status is set to disconnected and tokens are revoked. Historical delivery audit trails remain accessible to you so you retain your published post URLs.
Complete Account Deletion: You may delete your Inclik creator account at any time from your Account Settings. Upon deletion, your bio page, stored media files, encrypted tokens, and subscriber emails are permanently purged from active databases within 30 days.
8. GDPR, CCPA & Global Creator Rights
Regardless of your country of residence, Inclik affords all creators and visitors fundamental digital privacy rights:
Request an export of all links, uploaded files, and customer orders associated with your profile.
Edit or update any incorrect profile information directly in your live dashboard.
Request permanent deletion of your profile, subscriber lists, and social connections.
Opt-out of non-essential marketing emails with a single click in any footer communication.
9. Contact & Data Protection Officer
If you have inquiries, feedback, or would like to exercise any of your data protection rights, please contact our team:
Attention: Data Protection & Creator Privacy Officer
Email: privacy@inclik.com / support@inclik.com
General Inquiries: inclik.com/contact
3. Social Media Connections & Direct OAuth Security
Inclik features a Direct Social Publishing system allowing creators to link their personal accounts, LinkedIn Company Pages, Facebook Business Pages, and Instagram Professional accounts via official OAuth 2.0 protocols.
All OAuth access tokens and refresh tokens received from social platforms are encrypted at rest using authenticated AES-256-GCM symmetric encryption with unique initialization vectors (IVs). Tokens are decrypted strictly in memory on the server during authorized post execution and are never returned to client-side browsers.
Requests only member & organization social posting permissions (
w_member_social,w_organization_social). We do not read private InMail or direct messages.Requests page publishing and media container permissions (
pages_manage_posts,instagram_content_publish). We do not access personal Facebook profiles.Authenticates using OAuth 2.0 PKCE with
tweet.writescope solely to dispatch scheduled tweets on your behalf.If third-party aggregator mode is enabled by administrator configuration, individual isolated Profile Keys are provisioned per creator.