Privacy Policy

Last updated: September 24, 2026

1. Introduction

At ClicksTracker.io, operated by Zero Nova Holdings LLC ("Company," "we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our click and conversion tracking service ("Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

We collect several types of information for various purposes to provide and improve our Service:

Account Information

  • Name and email address
  • Company name (if applicable)
  • Billing and payment information
  • Account credentials

Usage Data

  • Log data (IP addresses, browser type, pages visited)
  • Device information
  • Feature usage and interaction data
  • Performance and error data

Tracking Data

  • Click and conversion data you track through our Service
  • Campaign performance metrics
  • Traffic source information
  • Visitor data (IP addresses, device fingerprints, geolocation)

Tracking Data describes visitors to your campaigns, not you. We process it on your behalf and on your instructions to provide the Service (see Section 15 for the controller and processor roles this creates under the GDPR). We do not use Tracking Data to build profiles of individual visitors across customers and we do not sell it.

3. How We Use Your Information

We use the collected information for various purposes:

  • To provide and maintain the Service
  • To process your transactions and manage your account
  • To send you service-related communications
  • To provide customer support
  • To detect, prevent, and address technical issues and security threats
  • To analyze usage patterns and improve the Service
  • To comply with legal obligations

4. Data Retention

We retain different categories of data for different periods:

  • Raw tracking events (individual click and impression records, including visitor IP addresses, user agent strings, derived geolocation, and device characteristics): retained according to your subscription plan's data retention limit, currently between 3 and 90 days depending on plan, then deleted automatically by a daily purge job.
  • Aggregated campaign statistics (counts and totals per campaign, hour, and dimension; these contain no visitor-level identifiers): retained for your plan's reporting window, currently between 30 days and 24 months depending on plan.
  • Account information: retained for as long as your account is active. Upon account termination or request, we delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.
  • Billing records: retained as required by tax and accounting law.
  • Operational logs (server and application logs, which may include IP addresses): retained for up to 90 days, then deleted automatically.
  • Database backups: created automatically each day and retained for approximately 7 days on a rolling basis. Data deleted from the live systems leaves the backup cycle within that window.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers (Sub-processors): With third-party vendors who process data on our behalf to provide the Service (see the list below)
  • Legal Requirements: When required by law, court order, or government request
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Protection: To protect our rights, privacy, safety, or property, and that of our users
  • Consent: With your explicit consent for any other purpose

6. Sub-processors

We rely on the following sub-processors to operate the Service. Each processes only the data needed for its function, under its own data-protection terms:

  • DigitalOcean — cloud hosting and databases (application, tracking, and click/conversion data)
  • BunnyCDN — tracking subdomains, DNS, and SSL/CDN delivery
  • Amazon Web Services (SES) — transactional email delivery
  • Stripe — subscription billing and payment processing
  • Pusher — real-time in-app notifications
  • Google (reCAPTCHA) — bot protection on the sign up and contact forms

We update this list when sub-processors change. If you require a Data Processing Agreement (DPA), contact us using the details below.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication measures
  • Secure data centers with physical security measures
  • Employee training on data protection

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to certain processing of your information
  • Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us through the support channels in the Service.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Maintain your session and preferences
  • Analyze usage patterns
  • Improve security
  • Remember your login information

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of the Service.

10. International Data Transfers

Tracking data and application data are stored on infrastructure located in the European Union (DigitalOcean, Frankfurt, Germany). Click redirection is served from edge locations that may process requests in transit outside the EU (currently a redirect node in Singapore) before the data comes to rest in the EU.

Some of our sub-processors (for example Stripe for billing and Amazon Web Services for transactional email) are located in the United States. Where personal data of EU/EEA residents is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the sub-processor's participation in the EU-U.S. Data Privacy Framework.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Zero Nova Holdings LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA
Phone: +1 (941) 274-6129

15. Additional Information for EU/EEA Users

Controller and processor roles. For Account Information and Usage Data (data about you and your use of the Service), Zero Nova Holdings LLC is the data controller. For Tracking Data (data about visitors to your campaigns, including IP addresses, device characteristics, and derived geolocation), you are the data controller and we act as your data processor: we process that data only to provide the Service and on your documented instructions.

Your responsibilities as controller. Where your campaigns reach EU/EEA visitors, you are responsible for having a legal basis for the tracking, for providing any required notices to those visitors, and for honoring their data subject requests. We will assist with visitor data subject requests that reach us, and our automatic retention limits (Section 4) delete raw visitor-level data on a fixed schedule in any case.

Data Processing Agreement. We offer a Data Processing Agreement incorporating the European Commission's Standard Contractual Clauses that covers our processing of Tracking Data on your behalf, including our sub-processor list (Section 6). Request it through the contact details in Section 14 and we will provide it for signature.

Your rights as a user. If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

  • The right to lodge a complaint with a supervisory authority
  • The right to withdraw consent at any time (where processing is based on consent)

Our legal bases for processing your information include: performance of our contract with you, our legitimate business interests, compliance with legal obligations, and your consent (where applicable).

16. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information is collected, used, shared, or sold
  • The right to delete personal information held by businesses
  • The right to opt-out of the sale of personal information
  • The right to non-discrimination for exercising your CCPA rights

We do not sell personal information as defined under the CCPA.

Last modified: September 24, 2026