Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy asserts CCPA and CPRA compliance, states that ClickUp does not sell personal information, and provides California consumers with a request mechanism at support@clickup.com for exercising CCPA rights, including identity verification using account information or government identification.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes ClickUp's stated position under CCPA and CPRA, including the no-sale assertion and the consumer request mechanism. Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition is a separate question from whether it constitutes a sale, and may require further evaluation.
Interpretive note: Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition requires assessment of specific data flows not fully enumerated in the policy.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →Under this provision, California residents may submit CCPA rights requests including access and deletion by emailing support@clickup.com. The agreement asserts that ClickUp does not sell personal information, though sharing with marketing and advertising partners may require separate evaluation under CPRA's sharing definition.
Cross-platform context
See how other platforms handle CCPA Consumer Rights and No-Sale Assertion and similar clauses.
Compare across platforms →Monitoring
ClickUp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"ClickUp complies with the California Consumer Privacy Act (referred to in this Privacy Policy as 'CCPA') as amended by the California Privacy Rights Act ('CPRA') as set forth by the State of California. ClickUp does not sell the personal information we collect. We only share your personal information as described in this Privacy Policy. California consumers may make a request pursuant to their rights under the CCPA by contacting support@clickup.com. Upon receiving a request, we will verify your request using the information associated with the ClickUp Services, including your email address. Government identification may be required.Excerpt from ClickUp's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages CCPA as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. CPRA introduced a definition of sharing for cross-context behavioral advertising that is distinct from selling, and the policy's no-sale assertion does not necessarily address whether advertising partner data flows constitute sharing under CPRA. GOVERNANCE EXPOSURE: Medium. The no-sale assertion is a material disclosure, but CPRA compliance requires assessment of whether advertising and market research partner data flows constitute sharing under CPRA's definition, which may trigger opt-out obligations separate from a sale opt-out. Enterprise compliance teams should assess this independently. JURISDICTION FLAGS: California residents are the primary affected population. The government identification requirement for CCPA request verification should be assessed against CCPA guidance on proportionate identity verification to ensure it does not create a barrier to rights exercise. CONTRACT AND VENDOR IMPLICATIONS: B2B customers with California-based employees or end users should assess whether ClickUp's CCPA compliance posture is consistent with their own CCPA obligations and whether the DPA addresses CCPA service provider requirements, including the prohibition on retaining, using, or disclosing personal information for purposes other than the specified business purpose. COMPLIANCE CONSIDERATIONS: Compliance teams should independently assess whether ClickUp's advertising and market research partner data flows constitute sharing under CPRA and whether opt-out mechanisms are required. Organizations should also assess whether the government identification requirement for CCPA requests is proportionate and compliant with CCPA guidance.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes ClickUp's stated position under CCPA and CPRA, including the no-sale assertion and the consumer request mechanism. Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition is a separate question from whether it constitutes a sale, and may require further evaluation.
Under this provision, California residents may submit CCPA rights requests including access and deletion by emailing support@clickup.com. The agreement asserts that ClickUp does not sell personal information, though sharing with marketing and advertising partners may require separate evaluation under CPRA's sharing definition.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.