Privacy Policy
Effective May 27, 2026
Cloziq LLC ("Cloziq," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit cloziq.com, join the waitlist, use the Cloziq AI sales-agent platform, or otherwise interact with us (collectively, the "Service").
We address users worldwide, with specific provisions for individuals in the European Economic Area (EEA), the United Kingdom (UK), and the United States (including California residents) later in this document.
1. Who is Responsible
The controller of personal information collected through the Service is:
Cloziq LLC — Delaware, United States Contact: support@cloziq.com
If you have questions, want to exercise a right, or wish to file a complaint, email support@cloziq.com. We aim to respond within 30 days (sooner for time-sensitive requests).
EU Representative. Pursuant to Article 27 of the GDPR, our designated representative in the European Union is [EU Representative to be designated — contact details will be updated here before the first EEA user is onboarded].
UK Representative. Pursuant to Article 27 of the UK-GDPR, our designated representative in the United Kingdom is [UK Representative to be designated — contact details will be updated here before the first UK user is onboarded].
2. Information We Collect
2.1 Information you give us directly
- Account & waitlist: contact details (such as name, email, Instagram handle, phone number) and background information you provide about your business when joining the waitlist on cloziq.com.
- Account profile, after launch: business name, billing address, payment method tokens, support correspondence.
- Communications: if you email us or open a support ticket, we keep that conversation history.
2.2 Information we collect automatically
- Device & usage: IP address, browser type, device type, pages viewed, referring URL, timestamps, and similar diagnostic data. Used for security, abuse prevention, and basic analytics.
- Cookies and similar technologies: see our Cookie Policy.
- reCAPTCHA risk scores: Google reCAPTCHA v3 returns a risk score on form submissions. We store the score (not the underlying signals) with the corresponding submission for abuse review.
2.3 Information we collect through integrations
When you connect a third-party platform to Cloziq, that platform shares information with us based on the scopes you authorize:
- Meta / Instagram (Graph API): the account profile, message content, sender identity, and conversation metadata that the Service requires to operate on your behalf under the scopes you authorize. We process this data only to run the Service for you.
- Calendly: booked-meeting confirmations, attendee email addresses, scheduled time, and Calendly event URLs — so the agent can confirm and reference appointments.
- Stripe: checkout-link metadata and payment status updates. We do not receive or store full card numbers; payment details are handled by Stripe directly.
2.4 Information from other sources
We may receive limited information about you from publicly available sources or from partners (for example, business directories or referral programs). We will tell you if we collect personal information this way other than incidentally.
2.5 CCPA / CPRA categories of personal information
For California residents and the parallel state-law frameworks, the personal information we collect maps to the following categories (see Cal. Civ. Code § 1798.140):
| CCPA category | We collect? | Sources | Disclosed to |
|---|---|---|---|
| A. Identifiers (name, email, IP, IG handle, account ID) | Yes | You; integrations; automatic | Sub-processors; service providers |
| B. Customer records (billing address, phone) | Yes | You; payment processor | Sub-processors; service providers |
| C. Protected classifications | No | — | — |
| D. Commercial information (subscription, transactions) | Yes | You; payment processor | Sub-processors |
| E. Biometric information | No | — | — |
| F. Internet / network activity (pages viewed, device info) | Yes | Automatic | Analytics sub-processors |
| G. Geolocation (coarse, derived from IP) | Yes | Automatic | Sub-processors |
| H. Sensory data (audio, video, voice) | No | — | — |
| I. Professional / employment information | Limited (role from waitlist) | You | — |
| J. Education information | No | — | — |
| K. Inferences (e.g., lead-quality scoring) | Yes | Generated by the Service | — |
| L. Sensitive personal information | See §8.3 | — | — |
We retain each category for the periods set out in §7. We do not sell or share personal information for cross-context behavioral advertising in any category.
3. How We Use Information
We use personal information to:
- operate, maintain, and improve the Service, including the AI agent's ability to qualify leads and respond to messages;
- communicate with you about your account, security alerts, product updates, and policy changes;
- provide customer support;
- process payments and detect fraud;
- comply with legal obligations, enforce our agreements, and protect the rights, property, or safety of Cloziq, our users, and others;
- conduct analytics on aggregated, de-identified data to improve features, performance, and security;
- if you opt in, send marketing communications about Cloziq features, blog posts, or events. You can opt out anytime via the unsubscribe link in any marketing email or by emailing support@cloziq.com.
We do not use the content of your Instagram conversations to train AI models for any customer other than you. Aggregated, de-identified usage statistics may be used to improve the Service overall.
3.1 Automated decision-making
The Service uses automated processing, including profiling, to decide how the AI agent responds to incoming messages on a Customer's behalf — for example, whether to ask follow-up qualifying questions, suggest a calendar booking, or send a payment link. These decisions are made based on the rules, criteria, and prompts the Customer configures. Customers and the individuals interacting with a Customer's agent can request information about how a specific decision was made, contest a decision, or request human review by contacting support@cloziq.com (or, in the case of individuals who interact with a Cloziq Customer's agent, by contacting the Customer directly).
4. Legal Bases (EEA / UK Users)
If you are in the EEA or the UK, our legal bases for processing personal information are:
| Purpose | Legal basis |
|---|---|
| Provide and operate the Service per your subscription | Performance of a contract (Art. 6(1)(b) GDPR) |
| Send service / security communications | Legitimate interests (Art. 6(1)(f)) — keeping the Service usable |
| Detect fraud and abuse | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails | Your consent (Art. 6(1)(a)), withdrawable anytime |
| Comply with tax, accounting, regulatory obligations | Legal obligation (Art. 6(1)(c)) |
| Set non-essential cookies and analytics | Your consent (Art. 6(1)(a)) — managed through our cookie banner |
5. How We Share Information
We share personal information only in the categories below:
5.1 Sub-processors
We use third-party sub-processors to operate the Service. Each is contractually bound to handle personal information only on our documented instructions and to apply appropriate technical and organizational safeguards.
The categories of sub-processors we use are:
| Category | Purpose | Location |
|---|---|---|
| Cloud hosting & edge compute | Application serving, edge functions, image delivery | United States / global edge |
| Managed database | Operational data storage (account data, configuration, conversation metadata) | United States |
| Global CDN & object storage | Static asset delivery, media storage | Global edge (origin in the EU) |
| Payment processor — Stripe, Inc. | Billing, payment-method tokenization, and recurring charges | United States |
| Calendar booking integration — Calendly LLC | Meeting confirmations and event metadata for the agent | United States |
| Messaging platform — Meta Platforms, Inc. (Instagram Graph API) | Reading and sending Instagram DMs on your behalf | United States (global) |
| Transactional email provider | Account, billing, and security emails | United States |
| Bot-detection — Google LLC (reCAPTCHA) | Abuse prevention on public forms | Global |
| Customer-support platform | Inbound support tickets and conversation history | United States |
| Large-language-model providers | AI inference for the agent's replies | United States |
| Consent management platform | Cookie banner and consent recordkeeping | European Union |
A current, named list of sub-processors — including legal entity, role, and location — is available to subscribed customers under NDA on request to support@cloziq.com. We provide existing customers reasonable advance notice of material sub-processor changes through the channel set out in the Data Processing Addendum.
5.2 Service providers
Beyond the sub-processors listed above, we may share information with professional advisors (lawyers, accountants), auditors, or insurers under confidentiality obligations.
5.3 Legal and protective disclosures
We may disclose information if we believe in good faith it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; to investigate fraud or security issues; or to protect the rights, property, or safety of Cloziq, our users, or others.
5.4 Business transfers
If Cloziq is involved in a merger, acquisition, financing, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections and the notice obligations of this Policy.
5.5 With your consent
We may share information for any other purpose disclosed to you with your consent.
We do not sell personal information as defined by the California Consumer Privacy Act (CCPA / CPRA), and we do not "share" it for cross-context behavioral advertising.
6. International Data Transfers
Cloziq is based in the United States and our primary infrastructure is in the U.S. and EU. If you access the Service from outside those regions, your information will be transferred to, processed, and stored in those locations.
For transfers of personal data from the EEA, UK, or Switzerland to a country not deemed adequate by the European Commission (or UK ICO), we rely on the European Commission Standard Contractual Clauses (SCCs, Module 2) and, where applicable, the UK International Data Transfer Addendum. Our Data Processing Addendum incorporates these by reference.
7. Data Retention
We keep personal information only as long as needed for the purposes described in this Policy:
| Data | Retention |
|---|---|
| Waitlist sign-ups | Until you ask us to delete, or 24 months after launch if you have not converted to an account |
| Active account data | Duration of the subscription |
| Account data after termination | Deleted within 30 days, except backup snapshots which roll out of rotation within 90 days |
| Billing records (invoices, payment receipts) | 7 years after the transaction, for tax and accounting purposes |
| Instagram message content processed by the agent | Retained while needed to operate the Service for the Customer and then deleted in accordance with our documented retention schedule. Aggregated, de-identified metadata may be retained longer for product improvement. Customers can request the current schedule from support@cloziq.com. |
| Support correspondence | 3 years after the last interaction |
| Cookies and analytics | per the Cookie Policy |
You can request earlier deletion under Section 8.
8. Your Rights
8.1 Everyone
You can email support@cloziq.com at any time to:
- access the personal information we hold about you,
- correct or update it,
- delete it (subject to our legal obligations to keep certain records),
- export it in a portable format,
- restrict or object to certain processing.
We will verify your identity before fulfilling a request (usually by confirming control of the email address on the account) and respond within 30 days.
8.2 EEA / UK residents
In addition to the rights above, you have the right under GDPR / UK-GDPR to:
- withdraw consent at any time where processing is based on consent,
- object to processing based on our legitimate interests,
- lodge a complaint with your supervisory authority. In the UK, that is the Information Commissioner's Office. In the EEA, contact your local data protection authority.
8.3 California residents (CCPA / CPRA)
Cloziq does not sell or share personal information for cross-context behavioral advertising. California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, limit the use of sensitive personal information (see below), and not be discriminated against for exercising these rights.
Sensitive personal information. We do not deliberately collect Sensitive Personal Information (SPI) about you. The Service may incidentally process SPI contained in Instagram message content routed through the Service when individuals interacting with a Customer's agent voluntarily share it (for example, a message describing the sender's health condition). Cloziq does not use any such incidentally received SPI to infer characteristics about an individual within the meaning of Cal. Civ. Code § 1798.121.
We honor "Global Privacy Control" (GPC) signals for users in California.
California "Shine the Light" law. California residents may request information about Cloziq's disclosure of personal information to third parties for those third parties' own direct-marketing purposes. Cloziq does not disclose personal information to third parties for those third parties' own direct-marketing purposes.
8.4 Other U.S. state residents
Residents of states with comprehensive consumer-privacy laws (including, as of the effective date of this Policy, California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Florida, Iowa, Indiana, Tennessee, Montana, and Delaware) have substantially similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising and the sale of personal information where applicable. Cloziq does not sell personal information or use it for targeted advertising. To exercise any of these rights, email support@cloziq.com.
8.5 Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how to interpret DNT signals, and Cloziq does not currently respond to DNT signals. We do honor Global Privacy Control (GPC) signals for California residents as described in §8.3.
9. Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, least-privilege access controls, audit logging, and ongoing vulnerability monitoring. No system is perfectly secure; if we learn of a personal-data breach involving your information, we will notify you and applicable regulators without undue delay as required by law.
10. Children
Cloziq's Service is intended for businesses and is not directed to children under 18. Cloziq does not knowingly collect personal information directly from anyone under 18, and does not knowingly collect personal information from any child under 13 within the meaning of the U.S. Children's Online Privacy Protection Act (COPPA). Individuals interacting with a Customer's AI agent on Instagram are subject to Meta's own age policies; Customers are responsible for configuring their agent in a manner appropriate for the audience they reach. If you believe a child under 13 has provided personal information to the Service, contact support@cloziq.com and we will delete it.
11. Cookies
For details on the cookies and similar technologies we use, see our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" and "Last Updated" date at the top reflect the current version. Previous versions remain accessible at the archive URL shown on this page. If a change materially affects how we handle your personal information, we will notify you in advance through the Service or by email.
13. Contact
For privacy questions, requests, or complaints: support@cloziq.com Cloziq LLC — Delaware, United States