2ndClick

Privacy Policy

Last updated: April 6, 2026

1. Introduction

2ndClick ("we," "our," or "us") is a marketing intelligence platform operated by The Second Click, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at 2ndclick.io (the "Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization details.

Marketing Data

When you connect third-party services (Google Ads, Google Analytics, Google Search Console, HubSpot, Salesforce, Pipedrive, Zoho, LinkedIn Ads, Meta Ads, and others), we access and store marketing performance data including:

  • Campaign performance metrics (impressions, clicks, conversions, spend)
  • Keyword and search query data
  • Website traffic and analytics data
  • CRM deal and contact information for attribution analysis
  • Ad account and property identifiers

Website Tracking Data

If you install our tracking snippet on client websites, we collect pageview data, form submissions, referrer information, UTM parameters, and advertising click IDs (GCLID, FBCLID, etc.) for attribution analysis. We use cookies to maintain visitor sessions and enable identity stitching when visitors submit forms.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or payment details on our servers. Stripe's privacy policy governs the handling of payment information.

3. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service, including dashboards, reports, and analytics
  • Generate AI-powered performance summaries, QBR reports, and strategic recommendations
  • Perform multi-model attribution analysis across marketing channels
  • Track account-based marketing engagement and pipeline progression
  • Monitor brand visibility in AI-generated responses
  • Send notification emails (QBR alerts, weekly digests, sync failure alerts)
  • Process subscription payments
  • Improve and optimize the Service

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal or marketing data to third parties. We may share data with:

  • Service Providers: Supabase (database hosting), Vercel (application hosting), Stripe (payments), Resend (email delivery), Anthropic (AI generation)
  • Third-Party APIs: Google, HubSpot, Salesforce, Pipedrive, Zoho, LinkedIn, and Meta — only to read data you have explicitly authorized
  • Legal Requirements: When required by law, subpoena, or legal process

5. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), secure token storage, row-level security policies on our database, and role-based access controls. OAuth tokens are stored encrypted and are only used to sync data from connected services.

6. Data Retention

We retain your data for as long as your account is active. When you disconnect a service or delete your account, associated data is removed from our systems. You may request data deletion at any time by contacting us.

7. Third-Party OAuth Scopes

When you connect third-party services, we request only the minimum scopes necessary:

  • Google Analytics: Read-only access to analytics data (analytics.readonly)
  • Google Search Console: Read-only access to search data (webmasters.readonly)
  • Google Ads: Read-only access to ad campaigns (adwords)
  • CRM Services: Read-only access to deals and contacts
  • LinkedIn/Meta Ads: Read-only access to ad campaign performance

We never modify, delete, or write data back to any connected service. All access is read-only.

8. Cookies

The 2ndClick platform uses essential cookies for authentication and session management. Our tracking snippet (when installed on client websites) uses first-party cookies for visitor identification and session tracking. No advertising or third-party tracking cookies are used.

9. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect any third-party service at any time
  • Export your data
  • Withdraw consent for data processing

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
The Second Click, LLC
Email: al@thesecondclick.com