63 Total
27 High severity
33 Medium severity
3 Low severity

Key Facts

What does ClickUp's Privacy Policy provide California users?
ClickUp's Privacy Policy provides California users to whom the CCPA applies with information on how to request access to and deletion of their personal information.
What laws govern all aspects of the ClickUp Service?
ClickUp establishes that all aspects of the ClickUp Service are governed by the internal laws of the United States and the State of California, regardless of the user's location.
Does ClickUp sell any data?
ClickUp does not sell any data, including personal data.
When may ClickUp transfer user information to a third party?
ClickUp reserves the right to transfer user information to a third party in the event of a sale, merger, or other transfer of all or substantially all of ClickUp's assets, provided that the third party agrees to adhere to the terms of the Privacy Policy.
What will ClickUp's use and transfer of information received from Google APIs adhere to?
ClickUp's use and transfer of information received from Google APIs will adhere to Google's API Services User Data Policy, including the Limited Use Requirements.
What standard is used to measure ClickUp's compliance with a non-disclaimable duty to protect personally identifiable information?
ClickUp establishes that, where applicable law imposes a non-disclaimable duty to protect personally identifiable information, intentional misconduct will be the standard used to measure ClickUp's compliance with that duty.
Does ClickUp collect personally identifiable information from persons it actually knows are under the age of 16?
ClickUp does not collect personally identifiable information from any person it actually knows is under the age of 16.
Will ClickUp transfer a team's project and task data to third parties?
ClickUp will never transfer a team's project and task data to third parties, except as otherwise provided in the Data Protection Addendum.
What right do users maintain to consent to data processing?
ClickUp establishes that users maintain the right to withdraw their consent to data processing at any time.
How will ClickUp notify users of changes that result in significant additional uses or disclosures of personally identifiable information?
ClickUp will not make changes that result in significant additional uses or disclosures of personally identifiable information without notifying users of such changes via email.
Stay ahead of the changes
Track ClickUp and get the diff the day its terms change.
Summary

ClickUp's Privacy Policy explains how ClickUp handles your personal data: it will not sell your data, and your team's project and task data will not be shared with third parties except as a separate Data Protection Addendum allows. You can withdraw your consent to data processing at any time, and ClickUp must email you before making significant new uses of your personal information. All aspects of the service are governed by California and United States law, regardless of where you are located.

Analysis

ClickUp's Privacy Policy establishes the terms under which ClickUp collects, uses, shares, and retains user personal data, including through cookies and third-party tracking technologies. It sets a categorical prohibition on selling any data, including personal data, and commits that team project and task data will never be transferred to third parties except as permitted by the Data Protection Addendum. The policy grants users the right to withdraw consent to data processing at any time and, for users to whom the CCPA applies, provides mechanisms to request access to or deletion of personal information. Corporate transactions such as sales, mergers, or asset transfers may result in user information transferring to a third party, provided that party agrees to adhere to the Privacy Policy, and cross-border transfers of personal data to the United States and other jurisdictions are expressly contemplated. ClickUp commits to email notification before implementing policy changes that would result in significant additional uses or disclosures of personally identifiable information, and limits its liability for data protection failures to those involving intentional misconduct where applicable law imposes a non-disclaimable duty.

What this means for you

This policy means your personal data may be stored and processed in the United States and other countries, tracked via cookies and third-party technologies, and transferred to a new owner if ClickUp is acquired — though any acquirer must honor the Privacy Policy terms. ClickUp will not sell your data and will not share your team's project and task data with third parties outside what the Data Protection Addendum permits. If you are a California user to whom the CCPA applies, the policy tells you how to request access to or deletion of your personal information; separately, all users may withdraw consent to data processing at any time.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

2 versions captured · Last updated: June 2026

June 2, 2026

medium
What changed ClickUp replaced its previous privacy rights section with a structured enumeration of data subject rights aligned with GDPR and similar data protection frameworks. The prior policy listed general opt-out mechanisms and data access procedures; the updated policy explicitly states eight distinct rights including access, rectification, erasure, restriction, portability, objection, consent withdrawal, and complaint filing. This change makes individual rights more formally defined and legally referenced rather than operationally described.
Why this matters The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

63 provisions
12 featured
14 clause types
27 high severity
Restricted or Prohibited Content/Industries 2 2 high
Acceptable Use Restrictions 1
Stay ahead of the changes

Monitoring

ClickUp has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle California Law Governs Regardless of User Location and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured June 2, 2026 21:14 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000710
Version ID CA-V-003360
SHA-256 d0a3316c1395c5cd27442a27c2b913ec53535cfe305f3467569da1615d276702
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans