Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that significant changes to data use or disclosure will be communicated by email, while non-significant changes may be posted without direct notification, with continued platform use constituting acceptance of non-significant changes.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision distinguishes between significant and non-significant policy changes, reserving email notification for significant changes while treating continued use as acceptance of non-significant changes. The characterization of whether a change is significant or non-significant is determined by ClickUp under the terms as written.
Interpretive note: The distinction between significant and non-significant policy changes is determined by ClickUp, and whether this distinction satisfies GDPR notification and consent requirements depends on regulatory interpretation and jurisdiction.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →Under this provision, users will receive email notification of policy changes that result in significant additional uses or disclosures of personally identifiable information. Non-significant changes may be made by posting to the website, with continued use of the service constituting acceptance of those changes.
Cross-platform context
See how other platforms handle Policy Change Notification and Deemed Acceptance and similar clauses.
Compare across platforms →Monitoring
ClickUp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may revise this Privacy Policy from time to time. We will not make changes that result in significant additional uses or disclosures of your personally identifiable information without notifying you of such changes via email. We may also make non-significant changes to this Privacy Policy that generally will not significantly affect our use of your personally identifiable information, for which an email is not required. We encourage you to check this page periodically for any changes. If any non-significant changes to this Privacy Policy are unacceptable to you, you must immediately contact us and, stop using the ClickUp Service until the issue is resolved. Your continued use of the ClickUp Service following the posting of non-significant changes to this Privacy Policy constitutes your acceptance of those changes.Excerpt from ClickUp's Privacy Policy
REGULATORY LANDSCAPE: This provision engages GDPR requirements regarding notification of material changes to privacy policies and the adequacy of consent obtained through continued use. GDPR generally requires that users be informed of changes affecting their data rights and that consent be freely given, specific, informed, and unambiguous. Deemed acceptance through continued use may not satisfy GDPR consent requirements for material changes, even those characterized as non-significant by the company. GOVERNANCE EXPOSURE: Medium. The distinction between significant and non-significant changes is determined by ClickUp, which creates potential for regulatory scrutiny if changes that affect user data rights are characterized as non-significant and implemented without direct notification. Enterprise customers should monitor policy updates and assess whether their DPA terms require notification of all policy changes. JURISDICTION FLAGS: EEA and UK users face the most significant exposure, as GDPR imposes requirements on consent to data processing changes that may not be satisfied by continued use deemed acceptance. California residents are protected by CCPA rights that persist regardless of policy changes. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers should assess whether their Data Protection Addendum or service agreements require direct notification of all privacy policy changes, including those characterized as non-significant, and whether deemed acceptance through continued use is consistent with their internal data governance requirements. COMPLIANCE CONSIDERATIONS: Compliance teams should implement a process for monitoring ClickUp policy updates and assessing whether any changes, including those characterized as non-significant, affect data processing practices relevant to their regulatory obligations. Organizations should not rely solely on ClickUp's email notification obligation for significant changes as the basis for policy change awareness.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision distinguishes between significant and non-significant policy changes, reserving email notification for significant changes while treating continued use as acceptance of non-significant changes. The characterization of whether a change is significant or non-significant is determined by ClickUp under the terms as written.
Under this provision, users will receive email notification of policy changes that result in significant additional uses or disclosures of personally identifiable information. Non-significant changes may be made by posting to the website, with continued use of the service constituting acceptance of those changes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.