Clico — Privacy and Data Protection Policy

Last Updated: 19/06/2026

1. Who we are and the purpose of this Policy

Clico.ai ("Clico", "we", "us"), operates the Clico platform at clico.ai and through our browser extension, web and mobile applications, WordPress widget, and APIs (the "Service"). This Policy explains how we collect, use, share, and protect personal data, and the rights you have over your data. We are the controller of the personal data described here, except where we act as a processor/operator on your behalf (for example, when handling materials you upload for your White-Label Reports).

2. Our commitment to data-protection compliance

This is important to us, and we want to be clear about it.

Clico is committed to processing personal data lawfully, fairly, and transparently, and in compliance with all applicable data-protection laws, including:

the Brazilian Lei Geral de Proteção de Dados (LGPD), Lei nº 13.709/2018;
the EU General Data Protection Regulation (GDPR), where it applies to users in the European Economic Area and the UK; and
other applicable national, state, and local privacy and consumer laws in the regions where we operate.

We apply the LGPD principles of purpose, adequacy, necessity, free access, data quality, transparency, security, prevention, non-discrimination, and accountability to everything we do with personal data.

3. The two kinds of data on the platform — and why this distinction matters

To be transparent, we distinguish clearly between two very different things:

3.1 Market and competitive-intelligence data — publicly available and licensed

This is important. Please read it carefully.

The traffic, keyword, ranking, backlink, audience, performance, and similar intelligence the Service analyzes and displays is derived from publicly available information and from data licensed from third-party providers. This includes information that websites, brands, and channels make publicly accessible, and aggregated/estimated metrics supplied by our Data Providers. We do not access, scrape, or use private, confidential, password-protected, or otherwise non-public information of the websites or brands analyzed. Much of this data is estimated, aggregated, or modelled, and is provided for analytical purposes (see the Terms of Use, Section 5). Where publicly available information happens to include personal data, we process it only in accordance with applicable law (including the LGPD's provisions on publicly available data), respecting purpose limitation, good faith, and the rights of data subjects, and we honour valid requests to address such data.

3.2 Personal data of our users — which we protect

Separately, we collect and protect the personal data of the people who use Clico — our account holders and visitors. The remainder of this Policy is about that data.

4. Personal data we collect about users

We do not intentionally collect sensitive personal data, and we ask that you do not submit it through the Service.

5. Why we process personal data, and our legal bases

We process personal data for the following purposes, relying on the LGPD legal bases (Art. 7) / GDPR legal bases (Art. 6) indicated:

To provide and operate the Service — performance of a contract.
To process payments and manage subscriptions — performance of a contract / legal obligation.
To secure the Service, prevent abuse, and enforce limits — legitimate interests.
To improve and develop features, and analyze usage — legitimate interests.
To communicate with you (service messages, and, with consent where required, marketing) — legitimate interests / consent.
To comply with legal, tax, and regulatory obligations — legal obligation.
To establish, exercise, or defend legal claims — legitimate interests / regular exercise of rights.

Where we rely on consent, you may withdraw it at any time without affecting prior processing.

6. How we share personal data

We share personal data only as needed and with appropriate safeguards:

Service providers / processors acting on our instructions — for example, cloud hosting and infrastructure, our search/traffic Data Providers, our AI service provider(s), payment processors, email and analytics providers, and customer-support tools.
Within your organization / team, where you use a Team plan with multiple seats.
At your direction, when you connect or share data with third-party platforms or generate reports for your clients.
For legal reasons — to comply with law, lawful requests, or to protect rights, safety, and the integrity of the Service.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal data.

7. International data transfers

We and our providers may process personal data outside your country, including outside Brazil or the EEA. Where we transfer personal data internationally, we use safeguards required by applicable law (for example, adequacy decisions, Standard Contractual Clauses, or other LGPD/GDPR-recognized mechanisms) to protect it.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Policy, to provide the Service, to comply with legal, tax, and accounting obligations, and to resolve disputes and enforce agreements. When data is no longer needed, we delete or anonymize it.

9. Your rights

Subject to applicable law, you have the right to:

confirmation and access to your personal data;
correction of incomplete, inaccurate, or outdated data;
anonymization, blocking, or deletion of unnecessary or excessive data, or data processed unlawfully;
portability of your data to another provider;
deletion of data processed with your consent;
information about with whom we share your data;
information about the consequences of refusing consent;
withdrawal of consent; and
to object to or request review of certain processing, and to lodge a complaint with the competent authority.

To exercise these rights, contact us at info@clico.ai. We will respond within the timeframes required by applicable law. You also have the right to complain to the Brazilian National Data Protection Authority (ANPD) or, for EEA/UK users, your local supervisory authority.

10. Data security

We implement technical and organizational measures appropriate to the risk, such as encryption in transit, access controls, hashing of credentials, segregation of environments, and monitoring. No method of transmission or storage is completely secure; in the event of a security incident affecting personal data, we will act and notify as required by applicable law (including notifying the ANPD and affected data subjects where required).

11. Cookies and similar technologies

We use cookies and similar technologies to operate the Service, remember preferences, secure your session, and analyze usage. You can manage cookies through your browser settings and, where applicable, through our cookie banner/preferences tool.

12. Children

The Service is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

13. Data Protection Officer / Encarregado

Our Data Protection Officer ("Encarregado" under the LGPD) can be reached at info@clico.ai.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact

Privacy questions or rights requests: info@clico.ai or our website form at www.clico.ai.

How We Handle your Information at Clico

Privacy Policy