Your data belongs to you. This policy explains exactly how ClickUp handles your personal information.
In short: We collect only what is necessary to provide and improve ClickUp. We never sell your personal data to third parties. You have full control over your information and can request access, correction, or deletion at any time.
Effective Date: February 1, 2026 | Last Updated: February 1, 2026
ClickUp is a productivity platform that helps teams and individuals organize work through task management, project tracking, document collaboration, and workflow automation. When we refer to "ClickUp," "we," "us," or "our" in this policy, we mean the entity responsible for processing your personal data. When we say "you" or "your," we mean any individual who uses ClickUp's website, desktop application, mobile application, browser extensions, or any other services we provide.
When you create a ClickUp account or download the ClickUp desktop application, we collect the information needed to set up and maintain your account. This typically includes your full name, email address, and a password you create. If you register using a third-party authentication service such as Google, we receive your name and email address from that provider but never your password. If you upgrade to a paid plan, we collect billing information including your company name, billing address, and payment method details. Payment card numbers are processed and stored exclusively by our PCI-DSS compliant payment processor — ClickUp never stores full card numbers on our servers.
ClickUp stores all content you create within the platform, including tasks, subtasks, checklists, documents, comments, chat messages, whiteboard content, file attachments, custom fields, time tracking entries, and any other project-related data you input. This data belongs to you and your organization. We process it solely to provide the ClickUp service — to store it, display it, enable search and filtering, power integrations, and deliver the features you use. We do not access, analyze, or use your workspace content for advertising, marketing profiling, or training machine learning models without your explicit consent.
When you interact with ClickUp, we automatically collect certain technical information to maintain service quality, diagnose issues, and improve the user experience. This includes your device type, operating system, and version (e.g., Windows 11, macOS Sonoma, Android 14), browser type and version, screen resolution and viewport dimensions, IP address and approximate geographic location derived from it, pages and features you visit or use within ClickUp, timestamps and duration of your sessions, referral URLs (the page that linked you to ClickUp), and performance metrics such as page load times and error rates. We collect this data using standard web technologies including server logs and first-party analytics. Our use of cookies is detailed in our separate Cookie Policy.
When you contact our support team, participate in surveys, provide feedback, or communicate with us through any channel, we retain those communications and any personal information included in them. This allows us to respond to your inquiries, maintain support history for context in future interactions, and improve our products based on user feedback.
ClickUp uses your personal information for the following clearly defined purposes. We always ensure that our processing has a valid legal basis under applicable data protection laws.
Providing the Service: We use your account information and content data to operate ClickUp — to authenticate you, store and display your work, enable collaboration features, process payments, and deliver the product functionality you expect. This processing is necessary to perform our contract with you.
Improving the Product: We analyze aggregated and anonymized usage patterns to understand which features are most valuable, identify areas that need improvement, optimize performance, and plan our product roadmap. Individual user data is never used for this purpose without aggregation or anonymization.
Security and Fraud Prevention: We use technical information to protect the security and integrity of our platform, detect and prevent unauthorized access, identify suspicious activity patterns, and enforce our terms of service. This processing is necessary for our legitimate interest in keeping ClickUp safe for all users.
Communications: We use your contact information to send you essential service communications (account verification, password resets, security alerts, billing notifications), and with your consent, product updates, feature announcements, and educational content. You can opt out of non-essential communications at any time through your notification preferences or by clicking the unsubscribe link in any email.
Legal Compliance: We may process your information when necessary to comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
We never sell your personal data. This is an absolute commitment. We share your information only in the following limited circumstances:
Service Providers: We engage trusted third-party companies to help us operate ClickUp. These include cloud infrastructure providers (AWS), payment processors (Stripe), email delivery services, customer support tools, and analytics providers. All service providers are contractually bound to process your data only on our behalf and in accordance with our instructions. They undergo security assessments before engagement and are subject to regular review.
Your Workspace Administrators: If you use ClickUp as part of an organization's workspace, the workspace administrator may have access to certain information about your account and activity within that workspace, as defined by their subscription plan and configuration settings.
With Your Consent: We may share your information with third parties when you explicitly direct us to, such as when you enable an integration with another service (e.g., connecting ClickUp to Slack, Google Drive, or GitHub).
Legal Requirements: We may disclose your information if required by law, subpoena, court order, or government regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.
Business Transfers: If ClickUp is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal data.
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Account information is retained for the duration of your active account plus a reasonable period afterward to handle any post-termination inquiries or disputes. Workspace content data is retained until deleted by you or your workspace administrator, or until account termination, after which it is permanently erased within 90 days. Usage and technical data is retained in identifiable form for no more than 24 months, after which it is aggregated or anonymized. Billing records are retained as required by applicable tax and accounting regulations, typically 7 years. When data is no longer needed, it is securely deleted using industry-standard data destruction methods that prevent recovery.
Depending on your location and applicable laws, you may have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you. We will provide it in a structured, commonly used, and machine-readable format.
Right to Rectification: You can correct inaccurate or incomplete personal data. Many corrections can be made directly through your ClickUp account settings.
Right to Erasure: You can request deletion of your personal data, subject to certain exceptions (e.g., data we are legally required to retain). Deleting your account will initiate permanent erasure of your data.
Right to Data Portability: You can request your data in a portable format to transfer to another service.
Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
Right to Object: You can object to processing based on legitimate interests, including profiling and direct marketing.
Right to Withdraw Consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, you can use the controls available in your ClickUp account settings or contact our data protection team. We respond to all valid requests within 30 days. We will never discriminate against you for exercising your privacy rights.
ClickUp operates globally, and your data may be processed in countries other than your country of residence. When we transfer personal data internationally, we ensure appropriate safeguards are in place. For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions where applicable, and supplementary technical and organizational measures as recommended by the European Data Protection Board. EU customers on Enterprise plans can request that their data be stored exclusively in EU-based data centers.
ClickUp is designed for professional and organizational use and is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take immediate steps to delete that information. If you believe a child may have provided us with personal data, please contact us immediately.
We implement comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include AES-256 encryption for data at rest, TLS 1.2+ encryption for data in transit, multi-factor authentication, role-based access controls, regular security audits and penetration testing, and continuous monitoring. For complete details on our security practices, please see our Security Policy page.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by email and/or by posting a prominent notice on our website at least 30 days before the changes take effect. We encourage you to review this policy periodically. Your continued use of ClickUp after the effective date of a revised policy constitutes your acceptance of the changes.
If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact our Data Protection team. We are committed to resolving any concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.