ClickUp replaced its previous privacy rights section with a structured enumeration of data subject rights aligned with GDPR and similar data protection frameworks. The prior policy listed general opt-out mechanisms and data access procedures; the updated policy explicitly states eight distinct rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint filing. This change makes individual rights more formally defined and legally referenced rather than operationally described.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
→ Review the eight explicitly listed rights in the updated policy to understand available data controls
→ Contact ClickUp support at support@clickup.com to exercise specific rights such as data access, correction, deletion, or portability
→ For EU residents, consider reviewing the right to lodge a complaint with a supervisory authority if data rights are not fulfilled
Replaced informal opt-out procedures with eight formally named GDPR-aligned rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint filing.
Prior language stating opt-out may render platform features ineffective is absent from updated rights framework, creating ambiguity about practical consequences of exercising new rights.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
ClickUp replaced informal privacy controls with formally structured GDPR-aligned data subject rights. This change engages GDPR Article 12-22 frameworks and signals regulatory alignment with EEA data protection law. Organizations that include ClickUp in their vendor …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-002627.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.