California residents have specific legal rights to see, delete, correct, and opt out of the sale or sharing of their personal data, and ClickUp is not permitted to treat them worse for exercising those rights.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are enforceable statutory rights under California law, meaning ClickUp must comply with valid requests and cannot retaliate by degrading service for users who exercise them.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →California users can formally request deletion of their personal data, correction of inaccuracies, and opt out of data sharing with advertising partners by contacting ClickUp, and they are legally protected from retaliation for making these requests.
How other platforms handle this
We may also collect your personal data from other people or companies.
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Monitoring
ClickUp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know about the personal information we collect, use, and disclose, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right to non-discrimination for exercising your privacy rights.— Excerpt from ClickUp's ClickUp Privacy Policy
(1) REGULATORY LANDSCAPE: This provision reflects obligations under CCPA as amended by CPRA, enforced by the California Privacy Protection Agency and California Attorney General. CPRA introduced the right to correct, the right to limit use of sensitive personal information, and expanded opt-out rights to cover sharing for cross-context behavioral advertising in addition to sale. Non-compliance with verified consumer requests within the statutory timeframes creates direct enforcement exposure. (2) GOVERNANCE EXPOSURE: Medium. The policy's acknowledgment of California rights is consistent with CPRA requirements, but the effectiveness of compliance depends on the operational adequacy of the request fulfillment process, response timeframes, and identity verification procedures, none of which are described in the policy text. (3) JURISDICTION FLAGS: These rights apply specifically to California residents and do not extend to users in other US states unless those states have enacted equivalent legislation. Users in Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have similar but not identical rights under their respective frameworks; this policy does not address those jurisdictions explicitly. (4) CONTRACT AND VENDOR IMPLICATIONS: B2B customers whose employees or end users are California residents may need to assess whether their use of ClickUp requires them to facilitate downstream CPRA rights requests, particularly where ClickUp processes data on their behalf as a service provider. (5) COMPLIANCE CONSIDERATIONS: Organizations should verify that ClickUp's consumer request intake and fulfillment process meets CPRA's 45-day response requirement and identity verification standards, and assess whether the opt-out mechanism for sharing is prominently accessible as required.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These are enforceable statutory rights under California law, meaning ClickUp must comply with valid requests and cannot retaliate by degrading service for users who exercise them.
California users can formally request deletion of their personal data, correction of inaccuracies, and opt out of data sharing with advertising partners by contacting ClickUp, and they are legally protected from retaliation for making these requests.
ConductAtlas has identified this type of provision across 17 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.