The policy asserts CCPA and CPRA compliance, states that ClickUp does not sell personal information, and provides California consumers with a request mechanism at support@clickup.com for exercising CCPA rights, including identity verification using account information or government identification.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes ClickUp's stated position under CCPA and CPRA, including the no-sale assertion and the consumer request mechanism. Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition is a separate question from whether it constitutes a sale, and may require further evaluation.
Interpretive note: Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition requires assessment of specific data flows not fully enumerated in the policy.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →Under this provision, California residents may submit CCPA rights requests including access and deletion by emailing support@clickup.com. The agreement asserts that ClickUp does not sell personal information, though sharing with marketing and advertising partners may require separate evaluation under CPRA's sharing definition.
Cross-platform context
See how other platforms handle CCPA Consumer Rights and No-Sale Assertion and similar clauses.
Compare across platforms →"ClickUp complies with the California Consumer Privacy Act (referred to in this Privacy Policy as 'CCPA') as amended by the California Privacy Rights Act ('CPRA') as set forth by the State of California. ClickUp does not sell the personal information we collect. We only share your personal information as described in this Privacy Policy. California consumers may make a request pursuant to their rights under the CCPA by contacting support@clickup.com. Upon receiving a request, we will verify your request using the information associated with the ClickUp Services, including your email address. Government identification may be required.Excerpt from ClickUp's Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages CCPA as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes ClickUp's stated position under CCPA and CPRA, including the no-sale assertion and the consumer request mechanism. Whether data shared with advertising and market research partners constitutes sharing under CPRA's cross-context behavioral advertising definition is a separate question from whether it constitutes a sale, and may require further evaluation.
Under this provision, California residents may submit CCPA rights requests including access and deletion by emailing support@clickup.com. The agreement asserts that ClickUp does not sell personal information, though sharing with marketing and advertising partners may require separate evaluation under CPRA's sharing definition.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.