This Privacy Policy explains how Webytag Technologies LLC handles personal information in ClientCee CRM ("ClientCee") at clientcee.com and app.clientcee.com: what we collect, why, who receives it, how long we keep it, and the choices and rights you have.
Who we are
Webytag Technologies LLC decides how the information about our customers' accounts, billing, website visits and support requests is used, so for that information we are the "controller". Agencies also use ClientCee to keep records about their own clients, leads and staff. For those records the agency decides, and we act on its behalf as a "processor" under the Data Processing Addendum.
Webytag Technologies LLC, 5830 E 2nd St, Ste 7000 #38717, Casper, Wyoming 82609, United States. Email: support@clientcee.com.
What we collect
- Account information: name, email address, password (stored hashed), company details, and billing information you provide when subscribing.
- Workspace data: the business records you create in the CRM, such as leads, clients, projects, tasks, invoices, events, files, and related content. This data belongs to your workspace; we process it only to provide the service.
- Usage data: security logs, browser and device category, referring website, campaign information, and consented activity from our pricing and subscription-checkout journey.
- Authentication activity: successful sign-in time and short-lived account-presence signals used to provide aggregate platform activity counts to authorized Superadmins.
- Payment details: card payments are taken by our payment provider, Stripe. We receive the card brand, the last four digits and the payment status, never the full card number.
- Connected services: messages, posts and contact details that pass through the inboxes and social accounts you choose to connect.
- Support: what you tell us when you email us.
- Your agreement: which version of the Terms of Service you accepted at checkout, when, and the IP address and browser you used.
Google user data
If you choose to connect your Google Calendar, ClientCee requests access to: your Google Calendar (to display your events inside ClientCee and to create, update, or delete events you initiate from ClientCee) and your email address (to show which Google account is connected).
- Calendar data is displayed to you only. Your calendar and events are never shown to other users, other workspaces, or ClientCee staff.
- We store only the OAuth tokens (encrypted at rest) and your connected email address. We do not store copies of your Google Calendar events; they are fetched on demand to render your calendar.
- We do not use Google user data for advertising, do not sell it, and do not transfer it to third parties except as necessary to provide the feature you requested or as required by law.
- You can disconnect at any time from Settings → Calendar Settings, which deletes the stored tokens. You can also revoke ClientCee's access from your Google Account permissions.
ClientCee's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
- To provide ClientCee: run your workspace, sign you in, send the emails you start (such as invoices and reminders) and the service emails we need to send. Basis: our contract with you.
- To bill you: take payments and keep billing records. Basis: our contract, and the law on tax and accounting records.
- To keep ClientCee safe and improve it: prevent fraud and abuse, protect accounts, fix problems and plan improvements. Basis: our legitimate interest in a secure, working service.
- To measure our website and advertising: only with your permission through the cookie choices. Basis: your consent, which you can withdraw at any time.
Analytics, advertising and cookie choices
We separate cookies and similar technologies into necessary, preferences, analytics, and marketing purposes. Necessary processing supports security, fraud prevention, checkout, payment verification, and account creation. It remains available when you choose Accept necessary.
When you choose Accept all, or enable the relevant category in privacy settings, ClientCee may use the following configured services for activity that ends when subscription checkout is completed:
- Google Tag Manager to deliver approved tags and communicate your consent choice.
- Google Analytics 4 to measure referral sources, campaigns, checkout progress, and completed purchases.
- PostHog for manually defined checkout-funnel events. Checkout session replay, form autocapture, and customer-entered form values are not collected.
- Google Ads conversion tracking and Meta Pixel or Conversions API when marketing measurement is enabled.
Analytics and marketing services do not receive passwords, payment-card details, checkout form values, resume tokens, or raw payment-provider responses. The Cookie Policy lists the services switched on today and has a Cookie settings button to change or withdraw your choice. We treat a Global Privacy Control signal from your browser as a choice to turn analytics and marketing off. When this control is turned off by the platform, optional tracking is disabled. Withdrawing consent stops future nonessential collection but does not affect processing already completed.
Records of your cookie choices
We record your submitted cookie choice, the categories that took effect, server date and time, a pseudonymous browser reference, the site and page template, approximate network country where available, and the notice presented. If you are signed in, the record can be linked to your account. We retain changes, withdrawals and browser privacy restrictions to administer your choice and respond to privacy requests or disputes. These records are restricted to authorized Superadmins and are not used for advertising.
Full IP collection for consent records is currently disabled. Historical records may contain a keyed IP hash that cannot be converted back into the original address.
Consent evidence is kept while the associated processing relies on it and for a documented period needed to resolve privacy requests or legal claims. Evidence holds are reviewed and removed when no longer needed. Contact us with your consent receipt or browser details to request access or erasure; we may need to verify your request. Cookie permission is separate from permission to send marketing emails. Withdrawing during a connection failure stops optional activity in that browser, but server-side processing can receive the change only when the save succeeds.
Checkout attribution and abandonment
When analytics consent is active, ClientCee keeps a first-party, minimized checkout record so we can understand where subscription checkout stopped, confirm a purchase, and prevent duplicate conversions. This may include an anonymous checkout identifier, landing path without its query string, referring hostname, allowlisted campaign values, selected plan, billing cycle, currency, value, checkout step, gateway category, and normalized failure category. Customer-entered contact and payment details are not copied into the analytics event record.
A checkout may be classified as abandoned after a period of inactivity. Analytics processing does not continue into the authenticated CRM after a confirmed subscription purchase.
Aggregate account presence
For authenticated workspace owners, employees, and client-portal users, ClientCee uses a short-lived, pseudonymous session-presence record to calculate aggregate "Logged in now" counts. Presence expires after a short inactivity window and is normally removed within 24 hours. Authorized Superadmins see role-level totals only, not names, email addresses, IP addresses, session identifiers, devices, or page activity in these widgets.
Who receives information
We do not sell personal information. We share it only:
- with the service providers that help us run ClientCee, listed on the Sub-processors page;
- with the services you choose to connect, such as Google, Microsoft, Slack or Meta;
- within your own workspace, according to the roles and permissions you set;
- when the law requires it, or to protect the rights and safety of our customers and others;
- with a company that takes over ClientCee, which must keep to this policy.
Where information is stored
ClientCee runs on servers in the United States. If you are in the European Union, the United Kingdom or Switzerland, your information is transferred to the United States. For those transfers we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or on another lawful basis.
How long we keep it
- Workspace data: while the subscription runs and for 30 days after it ends, then it is deleted. Backups roll off within 14 days after that.
- Billing and tax records: as long as the law requires.
- Raw checkout-analytics events: normally up to 90 days. Minimized aggregate reporting may be kept longer for year-over-year business analysis.
- Consent and security records: as explained above, and as needed to prevent abuse and meet legal obligations.
- Connected Google tokens are deleted as soon as you disconnect.
Security
We protect information with encryption in transit (HTTPS), encryption at rest for sensitive credentials and tokens, hashed passwords, emailed sign-in codes and authenticator apps, role-based access controls, separation between workspaces, a firewall, and daily backups. No system is perfectly secure, so please tell us at once if you notice a problem.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to restrict or object to how we use it, and to withdraw consent at any time.
- European Union and United Kingdom: you can also complain to your local data protection authority.
- United States: in states with privacy laws, you can ask to know, delete or correct your information and opt out of its sale or sharing. We do not sell personal information. Marketing measurement runs only with your permission, and stops when you withdraw it in Cookie settings or your browser sends Global Privacy Control.
If your information is in an agency's workspace (for example, you are the agency's client), please contact the agency first. It controls those records, and we help it answer.
To use your rights, email support@clientcee.com. We may need to confirm your identity, and we answer within the time the law sets.
Children
ClientCee is not for anyone under 18, and we do not knowingly collect information about children.
Changes to this policy
When we change this policy, we post the new version here with a new date. If a change is material, we also email workspace owners.
Contact
Webytag Technologies LLC
5830 E 2nd St, Ste 7000 #38717
Casper, Wyoming 82609
United States
support@clientcee.com