Privacy Policy

This Privacy Policy is issued by Clickgo Digital (“Clickgo”, “we”), an Indian company headquartered in Jhunjhunu, Rajasthan. It applies to all products offered under the Clickgo brand — Clickgo Checkout, Clickgo Logistics and Clickgo Growth — including our web app, mobile app, storefront widgets, tracking pages and APIs.

For merchant account data (your business, users, wallet, invoices), Clickgo is the data controller. For end-customer data that flows through your checkout, shipping labels and tracking pages, the merchant is the data controller and Clickgo acts as a data processor. We process that data only to deliver the Service and only on the merchant’s documented instructions.

Merchant & Team

• Name, email, phone, role, password hash
• Business name, GSTIN, PAN, KYC documents, bank details
• Billing history, wallet transactions, invoices
• Device, IP, browser and session data for security

End-Customer (routed via merchant)

• Name, phone, email, shipping & billing address, pincode
• Order line items, order value, payment mode (Prepaid/COD)
• Checkout events (add-to-cart, abandonment, upsell interactions)
• Delivery status, NDR reasons, RTO reasons, tracking scans

Integrations

• Shopify store data (orders, products, customers, fulfilments)
• Meta / Google Ads performance and audience metadata
• Payment gateway transaction IDs (BulkPe, Cashfree, others)
• Courier API responses, AWB numbers and status webhooks

• Provide checkout, shipping label generation, tracking and remittance
• Recommend the best courier per shipment using our AI models
• Recover abandoned carts and run merchant-approved marketing flows
• Compute commissions, wallet debits/credits and issue invoices
• Detect fraud, prevent abuse and secure the platform
• Provide customer support and resolve claims
• Improve our models on aggregated, de-identified data only

We share only the minimum data required with the parties that actually deliver the service:

• Courier partners — Delhivery (Air & Surface), Blue Dart, DTDC, Xpressbees, Ekart, Shadowfax, Amazon Shipping, Ecom Express — receive the recipient’s name, address, phone, order weight, value and COD amount for the sole purpose of delivery.
• Payment gateways — BulkPe, Cashfree and any gateway the merchant enables — receive transaction metadata for wallet top-ups and payouts.
• Communication providers — Brevo (email), WhatsApp Business, SMS gateways — receive contact details for transactional notifications you configure.
• Cloud infrastructure — hosted on Supabase / AWS / Cloudflare within India-adjacent regions with encryption at rest and in transit.
• Analytics providers — Meta Pixel, Google Analytics when enabled by the merchant on their storefront.

We do not sell, rent or licence your data or your customers’ data to any third party for their own marketing.

We use TLS 1.2+ in transit, AES-256 encryption at rest, row-level security on our database, principle-of-least-privilege for team access, hardware-backed MFA for admins, and audit logs for privileged actions. API credentials, courier tokens and payment gateway keys are stored in an encrypted secrets vault, never in application logs.

• Order, shipment and financial records — 8 years (statutory requirement under Indian tax law).
• Merchant account data — for the life of the account plus 12 months.
• Marketing engagement data — 24 months, or until the merchant deletes it.
• Support conversations — 36 months.

• Right to access and receive a portable copy of your data
• Right to correct inaccurate data
• Right to request deletion (subject to statutory retention)
• Right to withdraw consent for marketing
• Right to nominate a legal representative
• Right to grievance redressal with our Data Protection Officer

End-customers should raise requests with the merchant they purchased from; Clickgo will assist that merchant in fulfilling the request.

We use first-party cookies for authentication, session security and dashboard preferences. On merchant storefronts, Clickgo Checkout sets a short-lived session token to power abandoned-cart recovery and live analytics. Merchants can disable this in the Clickgo Checkout settings.

Primary storage is within India. Some sub-processors (e.g., Cloudflare edge, Meta APIs) may process data outside India. Transfers are protected by standard contractual clauses and equivalent safeguards.

Clickgo is a B2B platform and is not intended for individuals under 18. We do not knowingly collect data from minors.

We will update this policy from time to time. Material changes will be communicated at least 7 days in advance by email and via a dashboard banner.

We aim to acknowledge every privacy request within 72 hours and resolve it within 30 days.