This page outlines what personal data is collected on our website, how it is stored, whether it is transferred to third-parties, and how to request deletion of this data.
Support and Contact Forms
When you submit a request through any of the contact or support forms on our website we ask for your name and email address in order to be able to respond to your request. This information, along with your public IP address, is stored as a form entry in our database. The request and your information is also forwarded to our support ticketing helpdesk, powered by HelpScout (privacy policy).
Third Party Widgets
We make use of certain third-party widgets on our website in order to enhance the experience, namely; YouTube video embeds and social media widgets/buttons.
These widgets may collect your IP address, your web browser User Agent, store and retrieve cookies on your browser, embed additional tracking, and monitor your interaction with the widget, including correlating your social media account with whatever action you take within the widget, if you are logged in to that network. For more information about how this data may be used, please see the associated data privacy policy below:
- YouTube: https://support.google.com/youtube/answer/7671399?p=privacy_guidelines
- Facebook: https://www.facebook.com/about/privacy/update
- Twitter: https://twitter.com/en/privacy#update
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
Third Party Resources
Our website makes use of several third-party resources for both functional and performance reasons. Requests to load these resources may make your IP address visible to the associated resource, who may use it in accordance with their data privacy policy. The third party resources are listed below:
Stripe
Stripe is a payment processor which allows you to securely and conveniently checkout while purchasing a product on our website. We utilize their scripts to integrate the payment process into our website. Stripe’s privacy policy can be found here: https://stripe.com/us/privacy
Gravatar
Gravatar is used to display avatar images of people whose product reviews are displayed on our website. Privacy policy: https://automattic.com/privacy/
CloudFlare
Cloudflare is a content delivery network (CDN) and cloud security platform that provides website optimization, security, and performance services. It acts as a mediator between a website’s server and its visitors, improving the speed and reliability of the website while also protecting it from online threats. Privacy Policy: https://www.cloudflare.com/en-gb/privacypolicy/
Analytics
In order to provide you with both a better website experience and to help improve our products, we use analytics tools to collect basic usage data from our website visitors. We use Google Analytics to collect general browsing information and data such as an IP address and location. The Google Analytics privacy policy can be found at the following link: https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20130906.html. When available, we also track the page history of visitors on our website to allow us to better understand how our website is being used. These tools may use cookies to help track website usage.
Our Plugins
For GDPR information related to our plugins, please refer to this page.
Purchasing a Product
When you purchase a subscription on our website we collect personal data associated with the purchase and transaction, such as your name, email address, IP address, and billing address (if paying by credit card). We do not store your credit card information. This is processed by Stripe, who store the information securely on their encrypted servers (privacy policy). The information listed above is sent to Stripe, who process the transaction and store the information securely.
When purchasing a product from us we will send transactional email related to your purchase, or attempted purchase. Example of these emails are: purchase confirmation receipt, account login information, checkout recovery email, license renewal reminder emails.
When logging into your account on our website, a cookie is set in your browser to allow you to remain logged into your account.
Affiliates Program
If you sign up for our Affiliates Program, then we will also store the following information which you provide during sign up: name, email address, website URL, and payment email.
Requesting Deletion of your Data
You can request deletion of your data at any time by contacting us here.
Connect and Authorization Sites
In order to authorize the use of necessary apps and upgrade your plugins, various sub-domains of click-social.com are used and either/or links or HTTP requests are made to these sites in order for the application to function.
- app.clicksocial.com - Access application dashboard with API support for the WordPress plugin
- connect.clicksocial.com – Authorize 3rd party APIs to publish posts on your behalf to your connected social accounts.
- connect-redirect.clicksocial.com – Authorize 3rd party APIs to publish posts on your behalf to your connected social accounts.
- review.clicksocial.com – Request data from review provider’s APIs for use in clicksocial.com
- cdn.clicksocial.com - Temporary store assets necessary for application dashboard functionality (e.g. profile images)
Meta Platform Data
If you utilize our Instagram and Facebook integrations the plugin will ask you to authorize with Instagram or Facebook in our settings panel.
During this process, our application may request some or all of the following permissions:
instagram_graph_user_profile: this permission is used to retrieve the name of the Instagram account. As our Smash Balloon Instagram Feeds plugin allows you to connect multiple Instagram accounts, we use this permission to retrieve the name of each Instagram account that was authorized so that we can show you a list of the Instagram accounts authorized in our settings panel with their name, making it easy for you to identify which accounts you have authorized, and making it easy to reauthorize or deauthorize specific Instagram accounts. It’s required in combination with other permissions.
instagram_graph_user_media: We use this permission to retrieve the content from your Instagram account to show in your feeds.
pages_show_list: this permission is used to retrieve the name of the Instagram account. As our Smash Balloon Instagram Feeds plugin allows you to connect multiple Instagram accounts, we use this permission to retrieve the name of each Instagram account that was authorized so that we can show you a list of the Instagram accounts authorized in our settings panel with their name, making it easy for you to identify which accounts you have authorized, and making it easy to reauthorize or deauthorize specific Instagram accounts. It’s required in combination with other permissions.
instagram_basic: this permission allows us to show information about the Instagram account you use to connect to our plugin so that it can be displayed in the header above the feed and be used to identify which account was connected.
instagram_manage_comments: this permission is used to show comments for your posts in the pop-up Lightbox.
instagram_manage_insights: this permission allows us to show information about your Instagram and Facebook accounts such as the name, bio, and avatar associated with each connected page.
pages_read_engagement: this permission allows us to see data related to the number of followers, read content of the page, and other metrics. We show this data in various ways as social proof that your posts are engaging.
oembed_read: this permission allows us to support WordPress’ ability to turn links to Facebook and Instagram posts into rich iframes.
business_management: this permission is used to retrieve the name of the Instagram account. As our Smash Balloon Instagram Feeds plugin allows you to connect multiple Instagram accounts, we use this permission to retrieve the name of each Instagram account that was authorized so that we can show you a list of the Instagram accounts authorized in our settings panel with their name, making it easy for you to identify which accounts you have authorized, and making it easy to reauthorize or deauthorize specific Instagram accounts. It’s required in combination with other permissions.
As our Instagram Feed and Custom Facebook Feed plugins are self-hosted, your account names and related data are solely stored on your website and transmitted directly to/from Meta’s APIs. Our team does not have access to this information, nor does it transfer through any servers we control.
You can promptly and permanently delete all Platform Data at any time by deleting your connected account from within our application or by reaching out to the support team.
