Privacy Policy
Effective October 29, 2026
Cloziq LLC ("Cloziq," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit cloziq.com and its subdomains, use the Cloziq web app at app.cloziq.com, use the Cloziq mobile apps for iOS and Android, connect an integration, or otherwise interact with us (collectively, the "Service").
Cloziq is an inbox for businesses that sell through social media. It brings Instagram and Facebook conversations into one place and offers AI features that help sort conversations, draft and send replies, and follow up with leads.
We address users worldwide, with specific provisions for individuals in the European Economic Area (EEA), the United Kingdom (UK), and the United States (including California residents) later in this document.
1. Who is Responsible
Cloziq plays two different roles, depending on whose information it is.
- Cloziq as controller. For information about our account holders, their team members, and visitors to our websites and apps, Cloziq LLC (Delaware, United States) is the controller. Contact: support@cloziq.com.
- Cloziq as processor. When a business that uses Cloziq (a "Customer") connects its Instagram or Facebook accounts, Cloziq processes the messages, comments, and profile information of the people who interact with that business on the Customer's behalf and on its instructions. The Customer is the controller of that information, and its own privacy policy applies. Our Data Processing Addendum governs that processing.
If you messaged a business that uses Cloziq. Please send requests about your messages (access, correction, deletion, or questions about how the business uses AI) to that business directly. If you contact us, we will forward your request to the business and help it respond.
If you have questions, want to exercise a right, or wish to file a complaint, email support@cloziq.com. We aim to respond within 30 days (sooner for time-sensitive requests).
2. Information We Collect
2.1 Information you give us directly
- Account information: name, email address, phone number (we check that it is a mobile number), sign-in codes or credentials, and, if you choose, sign-in through Google or Apple.
- Workspace and team information: your business name, the team members you invite, their roles, and workspace settings.
- Business and offer information: descriptions of your business and offers, prices, FAQs, images, files you upload, and website addresses you ask us to import.
- Contacts, tags, and notes: the labels, notes, reminders, saved replies, and other information you add about the people you talk to.
- Billing information: billing name, email, and address. Paid plans are sold by our Merchant of Record (see Section 5.2); we do not receive or store full card numbers.
- Forms on our websites: contact details (such as name, email, Instagram handle, and phone number) and background about your business when you submit an inquiry, application, or similar form.
- Communications: emails, support chats, and bug reports you send us, including any screenshots you attach.
2.2 Information we receive when you connect an account
When you connect a third-party account, that platform shares information with us based on the permissions you authorize:
- Instagram (professional accounts) and Facebook Pages, through Meta's platform APIs: direct messages and their attachments (such as photos, videos, voice notes, shared posts, and story replies), comments on your content, the public profile information of the people who message or comment (such as name, username, profile photo, and follower count), your own posts, stories, and insights, and, where you grant it, performance insights for your ads. We use this information to show your inbox, send the replies and comments you or your AI features send, and run the features you turn on.
- Calendly: booking confirmations, attendee names and email addresses, scheduled times, and event links.
- Stripe (Stripe Connect): if you connect your own Stripe account to send checkout links, we receive checkout and payment status for your sales. Card details are handled by Stripe.
- Slack, webhooks, and AI assistants you authorize: connection details and the settings you choose for sending notifications or lead information to them.
2.3 Information we collect automatically
- Device and usage information: IP address, browser and device type, operating system, app version, pages and screens viewed, features used, referring URL, timestamps, and similar diagnostic data.
- Analytics and session recordings: we use product analytics to understand how people use our websites and apps. On our marketing websites and during account setup in the web app, we may record sessions (clicks, scrolls, and page changes) to find usability problems.
- Error reports: when something breaks, we collect technical details about the error and, for some errors, a short replay of the screen leading up to it.
- Advertising and measurement identifiers: see Section 6.
- Mobile device information: push notification tokens, device identifiers, and, only if you allow it, your device's advertising identifier. See Section 7.
- Cookies and similar technologies: see our Cookie Policy.
- reCAPTCHA risk scores: Google reCAPTCHA v3 returns a risk score on website form submissions. We store the score (not the underlying signals) with the submission for abuse review.
2.4 Information from other sources
- Public profile information. On plans that include lead research, we look up publicly available profile information (such as public bio, posts, and profile photos) about people who message a Customer, to help the Customer prioritize conversations. We do this as the Customer's processor.
- Phone number checks. When you add a phone number to your account, we may check the type of number with a telecommunications data provider to prevent fraud.
- Referral partners. If you arrive through a partner's referral link, we receive information that lets us credit that partner (see Section 6.3).
2.5 CCPA / CPRA categories of personal information
For California residents and the parallel state-law frameworks, the personal information we collect maps to the following categories (see Cal. Civ. Code § 1798.140):
| CCPA category | We collect? | Sources | Disclosed to |
|---|---|---|---|
| A. Identifiers (name, email, phone, IP address, social media handle, account and device IDs, advertising ID) | Yes | You; connected platforms; automatic | Sub-processors; service providers; advertising partners (Section 6) |
| B. Customer records (billing address, phone) | Yes | You; Merchant of Record | Sub-processors; service providers |
| C. Protected classifications | No | ||
| D. Commercial information (plan, purchases, transactions) | Yes | You; Merchant of Record; connected payment accounts | Sub-processors; advertising partners (purchase events) |
| E. Biometric information | No | ||
| F. Internet / network activity (pages viewed, app usage, device info) | Yes | Automatic | Analytics sub-processors; advertising partners (Section 6) |
| G. Geolocation (coarse, derived from IP) | Yes | Automatic | Sub-processors |
| H. Audio, electronic, visual, or similar information | Yes, limited to photos, videos, and voice notes sent in conversations, and profile photos | Connected platforms; you | Sub-processors |
| I. Professional / employment information | Limited (business name and role you provide) | You | Sub-processors |
| J. Education information | No | ||
| K. Inferences (for example, conversation labels and lead-fit scores) | Yes | Generated by the Service | Sub-processors |
| L. Sensitive personal information | See Section 10.3 |
We retain each category for the periods set out in Section 9. We do not sell personal information for money. We "share" certain identifiers and internet activity with advertising partners for ad measurement, as described in Section 6.
3. How We Use Information
We use personal information to:
- provide, operate, and maintain the Service, including your inbox, notifications, team features, integrations, and AI features;
- verify accounts, check that connected accounts meet our eligibility requirements, and prevent fraud, spam, and abuse;
- communicate with you about your account, security, billing, product updates, and policy changes;
- if you add a phone number and agree, send you text messages about your account and, where you agreed, occasional offers. Reply STOP to any message to opt out;
- provide customer support;
- process payments through our Merchant of Record;
- measure and improve our own advertising (Section 6);
- comply with legal obligations, enforce our agreements, and protect the rights, property, or safety of Cloziq, our users, and others;
- analyze account, usage, and diagnostic data to improve the Service;
- if you opt in, send marketing communications about Cloziq. You can opt out anytime via the unsubscribe link in any marketing email or by emailing support@cloziq.com.
3.1 Automated decision-making
The Service uses automated processing, including profiling, to:
- sort and label conversations in a Customer's inbox;
- decide how an AI assistant responds to messages on a Customer's behalf (for example, whether to ask a follow-up question, suggest a booking, or send a payment link), based on the rules and information the Customer configures;
- score how well a lead fits a Customer's offer; and
- check whether a connected account meets our eligibility requirements before it can be used on certain plans.
Customers can request information about how a decision was made, contest it, or request human review by contacting support@cloziq.com. Individuals who interact with a Customer should contact that Customer directly.
4. How We Use AI
Many Cloziq features use artificial intelligence. Some run on AI models that Cloziq controls. Others use third-party AI model providers that process personal information on our behalf. Section 4.1 explains which is which.
4.1 What we process and why
- Inbox sorting and labels (processed by Cloziq): the content of your conversations and a description of your business, to sort and label conversations (for example, to flag interested leads or automated messages). This feature runs on AI models that Cloziq controls, operated by Cloziq or by hosting providers that process the data only on our instructions and may not use it for any other purpose, including training.
The following features use third-party AI model providers:
- Suggested replies, automatic replies, and follow-ups: your conversations, the contact's details, and the business and offer information you provide, to draft replies or send them on your behalf.
- Summaries and lead details: your conversations, to summarize them and to pick out details a contact shares, such as an email address or phone number.
- Lead research and fit scoring: a contact's public profile information, including profile photos, post images, and captions, together with your offer information, to estimate how well the contact fits your offer and help you prioritize conversations.
- Setup from your website or files: the web pages and documents you submit, to draft your business and offer information.
4.2 Your agreement
By using any of the features listed in Section 4.1, you agree that the data described for that feature is processed by AI to produce that feature's result: by Cloziq's own AI models for inbox sorting and labels, and by third-party AI model providers for the other features listed. Inbox sorting runs automatically when your connected accounts receive messages. If you do not want your conversations processed by AI, do not connect a messaging account, or contact support@cloziq.com to discuss your options.
If you are a Customer, you are responsible for giving the people you talk to any notice about your use of AI that applicable law requires (see our Terms of Service).
4.3 How AI providers may use it
Our AI model providers, and the hosting providers that run the models Cloziq controls, process this data only to provide their services to us. We do not allow them to use your content to train their own models. Our service providers may keep requests and results for a limited time for security, abuse monitoring, quality, and troubleshooting.
4.4 Accuracy
AI-generated content can be inaccurate. Customers can review and edit replies, turn automatic sending on or off, and adjust their configuration at any time.
5. How We Share Information
We share personal information only in the categories below.
5.1 Sub-processors
We use third-party sub-processors to operate the Service. Each is contractually bound to handle personal information only on our documented instructions and to apply appropriate technical and organizational safeguards.
The categories of sub-processors we use are:
| Category | Purpose | Location |
|---|---|---|
| Cloud hosting, edge compute, and background processing | Serving our websites, web app, and APIs; processing messages and scheduled tasks; running Cloziq's own AI models | United States / global edge |
| Managed database | Storing account data, configuration, contacts, and conversations | United States |
| File storage and content delivery | Storing uploaded files and media from conversations; delivering website assets | United States / global edge |
| Authentication | Sign-in, sessions, and bot protection | United States |
| Merchant of Record: Dodo Payments | Selling Cloziq subscriptions and credits, payment processing, tax, and invoicing | See Dodo Payments' privacy policy |
| Messaging platform: Meta Platforms, Inc. (Instagram and Facebook) | Reading and sending messages and comments on your behalf; ad insights you authorize | United States (global) |
| Calendar booking: Calendly LLC | Booking confirmations and event details | United States |
| Payments for your sales: Stripe, Inc. (Stripe Connect) | Checkout links on the Stripe account you connect | United States |
| AI model providers | Generating replies, summaries, lead details, and other AI features (Section 4) | United States |
| AI monitoring | Monitoring the quality, safety, and cost of AI features | United States |
| Public profile lookup | Lead research using publicly available profile information | United States |
| Website import and phone checks | Reading web pages you ask us to import; checking phone number type | United States |
| Email delivery | Account, billing, and product emails; emails sent to your contacts on your behalf | United States |
| Push notifications: Apple (APNs), Google (Firebase Cloud Messaging), and our push delivery provider | Mobile and browser notifications | Global |
| Product analytics | Usage analytics and session recordings | United States |
| Error monitoring and logging | Diagnosing errors and keeping the Service reliable | United States |
| Customer support | Support chat and ticket history | United States |
| Internal notifications | Alerting our team about new accounts, sales, and issues | United States |
| Advertising and measurement: Meta Platforms, Inc.; Tenjin, Inc. | Measuring our own ads (Section 6) | United States (global) |
| Affiliate tracking | Crediting referral partners | United States |
| Bot detection: Google LLC (reCAPTCHA) | Abuse prevention on website forms | Global |
A current, named list of sub-processors, including legal entity, role, and location, is available to Customers on request to support@cloziq.com. We give existing Customers at least 30 days' advance notice of new sub-processors through the channel set out in the Data Processing Addendum.
5.2 Merchant of Record
Paid Cloziq plans and credits are sold by Dodo Payments, which acts as our Merchant of Record. Dodo Payments is the seller on your receipt, processes your payment, and handles sales tax and invoicing. It receives your billing details and handles them under its own privacy policy as well as its agreement with us.
5.3 At your direction
We share information when you or your team tell us to, including:
- sending messages, comments, and replies through Instagram or Facebook;
- emails to your contacts, such as booking reminders or purchase delivery emails, sent on your behalf;
- Meta Conversions API for your ads: if you turn it on, we send events about conversations that started from your ads (such as a lead, booking, or purchase, with the platform's identifier for that person) to your own Meta ad account;
- Slack, webhooks, and other integrations you connect;
- AI assistants you authorize (for example, through our MCP connector), which can then read and act on your workspace data under your account;
- team members in your workspace, according to the roles and visibility settings you choose.
5.4 Service providers
Beyond the sub-processors listed above, we may share information with professional advisors (lawyers, accountants), auditors, or insurers under confidentiality obligations.
5.5 Legal and protective disclosures
We may disclose information if we believe in good faith it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; to investigate fraud or security issues; or to protect the rights, property, or safety of Cloziq, our users, or others.
5.6 Business transfers
If Cloziq is involved in a merger, acquisition, financing, or sale of all or substantially all of its assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections and the notice obligations of this Policy.
5.7 With your consent
We may share information for any other purpose disclosed to you with your consent.
6. Advertising and Measurement
We advertise Cloziq on Meta (Facebook and Instagram) and other networks, and we measure which ads lead to sign-ups and purchases.
6.1 Meta Pixel and Conversions API
Our websites and web app use the Meta Pixel, which sets cookies and sends Meta information about your visit and actions such as signing up. With advanced matching, contact details you enter in our forms (such as email or phone) are hashed in your browser before being sent. We also send certain events directly from our servers through Meta's Conversions API (such as sign-up, trial start, and purchase), together with hashed contact details, IP address, browser information, and Meta cookie identifiers. Meta uses this information to measure and improve our ads and as described in Meta's Privacy Policy.
6.2 Tenjin in our mobile apps
Our mobile apps use Tenjin, a mobile measurement provider, to measure which ads lead to app installs and sign-ups. Tenjin receives install and in-app events (such as sign-up), device information, and your device's advertising identifier where available, and may pass attribution data to the ad networks we use, including Meta.
We also send sign-up, trial, and purchase events from the mobile apps to Meta through its Conversions API, together with hashed contact details. On iOS, we do this only if you allow tracking.
- On iOS, the app asks for permission through Apple's App Tracking Transparency prompt. Your advertising identifier is used only if you allow tracking. You can change this anytime in Settings > Privacy & Security > Tracking.
- On Android, you can delete or reset your advertising identifier in your device settings (Settings > Privacy > Ads).
6.3 Referral partners
If you arrive on our website through a partner's referral link, our affiliate tracking provider sets a referral cookie and may record the email address you enter in a form, so that the partner is credited if you later subscribe. This happens only for visitors who arrive through a referral link.
6.4 Your choices
You can opt out of this advertising use by: using the device settings above; adjusting your Meta ad preferences; blocking cookies in your browser (see our Cookie Policy); or emailing support@cloziq.com with the subject "Do Not Share My Personal Information." We will act on emailed requests as applicable law requires and confirm what we have done.
7. Mobile Apps
7.1 Permissions
Our iOS and Android apps ask for device permissions only when you use a feature that needs them:
- Camera and photos: to take or choose photos and videos to send in a conversation or to upload.
- Microphone: to record voice notes.
- Files: to attach documents.
- Notifications: to alert you about new messages and activity.
- Tracking (iOS): see Section 6.2.
You can turn any permission off in your device settings. The apps do not access your device contacts or location.
7.2 Notifications
Push notifications are delivered through Apple Push Notification service (iOS), Google Firebase Cloud Messaging (Android), and our push delivery provider. Notifications can include a preview of the message and the sender's name and photo. You can hide previews in the app's notification settings or in your device settings.
7.3 Data on your device
To make the apps fast, they keep a copy of recent conversations in an encrypted database on your device, and cache images on the device. Both are removed when you sign out.
7.4 Purchases
The mobile apps do not sell subscriptions. Paid plans are purchased on our website through our Merchant of Record.
8. Deleting Your Account and Data
You can delete your Cloziq account at any time:
- In the mobile app: go to Settings > Account > Delete Account.
- In the web app: go to Settings > Profile and choose Delete account.
- By email: send a request from your account email address to support@cloziq.com.
Before deleting, you must cancel any active subscription or trial so you are not charged again, and if you own a workspace with other members, transfer ownership or remove them. Where these steps must be completed on the web, the app will tell you.
When you delete your account, we remove your personal information from your profile and delete your sign-in identity. If you are the only owner of your workspace, we also delete the workspace, including its contacts, conversations, connected channels, and files. We disconnect your connected Instagram, Facebook, and Stripe accounts. This data is deleted from our production systems when you delete your account and from backups within 90 days. Copies held by our service providers (for example, analytics, email, support, and monitoring records) are deleted on their own retention schedules. We keep records we must keep by law (such as billing records) and the records described in Section 9 that help prevent abuse of free plans and trials.
You can also remove Cloziq from your Instagram or Facebook settings. When Meta notifies us that you have done so, we disconnect the account, delete its access tokens, and delete the profile information Meta provided about that account. Conversations and contacts remain in the workspace until the workspace owner deletes them or deletes the account.
9. Data Retention
We keep personal information only as long as needed for the purposes described in this Policy:
| Data | Retention |
|---|---|
| Website form submissions (inquiries and applications) | Until you ask us to delete them, or 24 months after your last interaction with us if you do not create an account |
| Active account data | For as long as your account is open |
| Account data after you delete your account | Deleted from production systems at deletion; backup snapshots roll out of rotation within 90 days |
| Account data after we terminate an account | Kept for 30 days so you can request an export, then deleted within a reasonable period, unless needed to resolve disputes, prevent abuse, or meet legal obligations |
| Records of connected accounts used on free plans or trials (account identifier, username, and basic public account information) | Kept after account deletion to prevent abuse of free plans and trials |
| Billing records (invoices, receipts) | 7 years after the transaction, for tax and accounting purposes |
| Conversation content and contact information | For as long as the Customer keeps it in their workspace, or until the related channel, contact, or account is deleted. |
| Support correspondence | 3 years after the last interaction |
| Cookies and analytics | Per the Cookie Policy |
You can request earlier deletion under Section 10.
10. Your Rights
10.1 Everyone
You can email support@cloziq.com at any time to:
- access the personal information we hold about you,
- correct or update it,
- delete it (subject to our legal obligations to keep certain records),
- export it in a portable format,
- restrict or object to certain processing.
We will verify your identity before fulfilling a request (usually by confirming control of the email address on the account) and respond within 30 days. If you messaged a business that uses Cloziq, see Section 1.
10.2 EEA / UK residents
In addition to the rights above, you have the right under GDPR / UK-GDPR to:
- withdraw consent at any time where processing is based on consent,
- object to processing based on our legitimate interests,
- lodge a complaint with your supervisory authority. In the UK, that is the Information Commissioner's Office. In the EEA, contact your local data protection authority.
Our legal bases for processing are:
| Purpose | Legal basis |
|---|---|
| Provide and operate the Service, including AI features you use | Performance of a contract (Art. 6(1)(b) GDPR) |
| Send service and security communications | Legitimate interests (Art. 6(1)(f)): keeping the Service usable and secure |
| Detect fraud and abuse; check account eligibility | Legitimate interests (Art. 6(1)(f)) |
| Improve the Service using account, usage, and diagnostic data | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails and marketing text messages | Your consent (Art. 6(1)(a)), withdrawable anytime |
| Advertising measurement, non-essential cookies, and analytics | Your consent (Art. 6(1)(a)) where required by law; otherwise legitimate interests (Art. 6(1)(f)) in measuring and improving our marketing and the Service |
| Comply with tax, accounting, and regulatory obligations | Legal obligation (Art. 6(1)(c)) |
10.3 California residents (CCPA / CPRA)
California residents have the right to know what personal information we collect, request deletion, correct inaccurate information, opt out of the "sale" or "sharing" of personal information, limit the use of sensitive personal information, and not be discriminated against for exercising these rights.
Sale and sharing. We do not sell personal information for money. In the 12 months before the date of this Policy, we "shared" identifiers, commercial information (purchase events), and internet or app activity with advertising partners for cross-context behavioral advertising, as described in Section 6. To opt out, follow Section 6.4. We do not knowingly sell or share the personal information of consumers under 16.
Sensitive personal information. We do not deliberately collect sensitive personal information. The Service may incidentally process it when people include it in conversations with a Customer (for example, a message describing a health condition). We do not use any such information to infer characteristics about an individual within the meaning of Cal. Civ. Code § 1798.121.
California "Shine the Light" law. Cloziq does not disclose personal information to third parties for those third parties' own direct-marketing purposes.
10.4 Other U.S. state residents
Residents of states with comprehensive consumer-privacy laws have substantially similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising and the sale of personal information. To opt out of targeted advertising, follow Section 6.4. To exercise any other right, email support@cloziq.com. If we deny your request, you may appeal by replying to our decision.
10.5 Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how to interpret DNT signals, and Cloziq does not currently respond to them.
11. International Data Transfers
Cloziq is based in the United States and our primary infrastructure is in the United States. If you access the Service from outside the United States, your information will be transferred to, processed, and stored in the United States and in other locations where our sub-processors operate.
For transfers of personal data from the EEA, UK, or Switzerland to a country not deemed adequate, we rely on the European Commission Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum. Our Data Processing Addendum incorporates these by reference.
12. Security
We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, encryption of stored integration credentials, least-privilege access controls, audit logging of administrative actions, and ongoing vulnerability monitoring. No system is perfectly secure. If we learn of a personal-data breach involving your information, we will notify you and applicable regulators without undue delay as required by law.
13. Children
The Service is intended for businesses and is not directed to children under 18. Cloziq does not knowingly collect personal information directly from anyone under 18, and does not knowingly collect personal information from any child under 13 within the meaning of the U.S. Children's Online Privacy Protection Act (COPPA). People who message a Customer on Instagram or Facebook are subject to Meta's own age policies, and Customers must not use the Service to communicate with people they know or should know are minors. If you believe a child has provided personal information to the Service, contact support@cloziq.com and we will delete it.
14. Cookies
For details on the cookies and similar technologies we use, see our Cookie Policy.
15. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" and "Last Updated" date at the top reflect the current version. Previous versions remain accessible on this page. If a change materially affects how we handle your personal information, we will notify you in advance through the Service or by email.
16. Contact
For privacy questions, requests, or complaints: support@cloziq.com Cloziq LLC, Delaware, United States