Privacy Policy

ClickReport is operated by ZTB CORPORATION INC., an Ontario corporation. ZTB CORPORATION INC. is responsible for the personal information processing described in this Privacy Policy unless otherwise stated.

We collect information that you provide directly (for example, name, email address, phone number, billing address, and limited payment details processed via our payment provider) and information collected automatically when you use our websites and services (for example, IP address, device and browser information, referring URLs, pages viewed, actions taken, date and time, cookie identifiers, affiliate referral codes, and affiliate click identifiers).

We use information to provide and improve the ClickReport service, authenticate users, process payments, secure our services, monitor and analyze usage, attribute affiliate referrals, prevent affiliate fraud, pay commissions, send transactional communications and service alerts, comply with legal obligations, and protect our rights and users. We do not sell your personal information.

We engage trusted service providers (for example, payment processors, hosting, analytics, and customer support tools) who process information on our behalf under contracts that require confidentiality and appropriate security.

We may disclose information if required by law, in response to valid requests by public authorities, or to protect ClickReport, our users, or the public from harm, fraud, or misuse.

When you connect Google Ads, ClickReport accesses customer IDs and names; enabled or paused campaign details; positive campaign location targets; keyword and ad-group details; click-view records matching GCLIDs ClickReport already observed; campaign IP-exclusion criteria; and, when you explicitly synchronize reporting evidence, campaign-level clicks, impressions, cost, invalid-click count and rate, conversions and conversion value, plus keyword-level clicks, impressions, cost, conversions and conversion value.

ClickReport uses Google API data only to provide customer-facing click-fraud analysis, source-labelled reporting, campaign context, and user-approved Google Ads IP exclusions. Google Ads aggregate performance remains separate from individual ClickReport-tracked clicks and ClickReport risk classifications. ClickReport does not sell Google API data, use it to serve advertising, or apply Google Ads changes without the connected user's explicit action. We disclose Google API data only to service providers that process it on our behalf to operate ClickReport, when the user directs us to do so, or when disclosure is legally required.

Google OAuth refresh tokens are encrypted at rest and retained only while the connection is active. Disconnecting Google Ads from ClickReport deletes the saved connection and encrypted refresh token, removes connection-linked ClickReport exclusion and activity records, and stops future synchronization.

Imported Google Ads click-match and campaign context associated with tracked ClickReport visits may remain after disconnect. Detached accessible-customer, campaign, IP-exclusion, campaign-risk, keyword-risk, campaign-performance, campaign-targeting, keyword-performance, evidence-collection, click-import, and automatic-job records may also remain subject to our retention practices and applicable legal and security requirements. These retained records are no longer linked to an active Google Ads token and are historical snapshots, not fresh proof of current Google Ads state.

Disconnecting does not revoke the Google Account grant or remove IP exclusions that already exist in Google Ads. Remove controlled exclusions first, then revoke access separately through your Google Account if desired. You can also submit a privacy request for deletion subject to identity and scope verification and applicable legal and security retention requirements.

ClickReport's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use cookies and similar technologies to keep you signed in, remember preferences, preserve affiliate referral credit, measure traffic, and improve our services. When you enable analytics, ClickReport may keep bounded first-touch context (landing path, referring host, UTM campaign fields, and the signup button selected) in browser session storage and attach it to email-signup events; this does not create another acquisition cookie or send the context to a third-party analytics service.

Pending email-signup rows are removed by a daily cleanup after their one-hour confirmation link expires, while consumed rows have a one-day defensive retention backstop. Anonymous signup-start attribution events are removed after 90 days; attribution joined to a confirmed account follows the normal account-data retention period.

Affiliate attribution uses a signed first-party cookie with the referral code and click identifier for up to 90 days by default so we can apply referral credit, measure affiliate performance, prevent fraud, and pay commissions. Affiliates receive aggregate or anonymized performance reporting only, not customer emails. Session cookies and session storage expire or clear with the browser session; persistent cookies remain until they expire or are cleared. You can control cookies in your browser settings.

We implement administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure; we cannot guarantee absolute security. If you have security concerns, contact us at security@clickreport.com.

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Where possible, we anonymize or aggregate data.

You can access, correct, or delete certain account information by contacting us at support@clickreport.com. Depending on your location, you may have additional rights (for example, to object to or restrict processing, or to request portability). We will honor applicable rights requests subject to verification and legal limits. You may opt out of non-essential communications at any time.

Privacy requests may include affiliate attribution data associated with your account, subject to legal, billing, fraud-prevention, and accounting retention requirements.

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards (such as contractual protections) for cross-border transfers.

ClickReport is not directed to children under 13 (or the age defined by applicable law). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us to remove it.

If ClickReport is involved in a merger, acquisition, reorganization, or sale of assets, information may be transferred as part of the transaction, subject to this Privacy Policy.

We may update this Privacy Policy from time to time. We will post the updated version with a revised Effective Date. Material changes will be communicated through the service or by email when appropriate.