“If applicable law imposes any non-disclaimable duty to protect your personally identifiable information, you agree that intentional misconduct will be the standards used to measure our compliance with that duty.”
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
By setting intentional misconduct as the compliance standard, ClickUp limits liability for data protection failures to those involving intentional wrongdoing, excluding negligence or lesser failures from the scope of breach.
The updated policy replaces a general opt-out framework with explicit enumeration of data protection rights under GDPR and UK law, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, and withdraw consent. The policy now provides specific contact procedures and supervisory authority information (EEA data protection authorities and UK ICO) for lodging complaints. Additionally, the policy discloses SMS/text messaging practices, including opt-in consent requirements, message frequency variability, and data rate implications. You can exercise these rights by contacting support@clickup.com or by mail to the stated address.
View change record →Where a non-disclaimable legal duty to protect your personally identifiable information exists, you accept that only intentional misconduct—not lesser conduct—measures whether ClickUp has breached that duty.
How other platforms handle this
OPENAI'S AFFILIATES, SUPPLIERS, LICENSORS, AND DISTRIBUTORS ARE INTENDED THIRD PARTY BENEFICIARIES OF THIS SECTION.
We may be unable to fulfill certain data requests for legitimate reasons, such as protecting trade secrets, intellectual property, or complying with legal obligations.
Credit Karma makes no guarantees to you on credit improvement or performance.
"If applicable law imposes any non-disclaimable duty to protect your personally identifiable information, you agree that intentional misconduct will be the standards used to measure our compliance with that duty.Excerpt from ClickUp's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
By setting intentional misconduct as the compliance standard, ClickUp limits liability for data protection failures to those involving intentional wrongdoing, excluding negligence or lesser failures from the scope of breach.
Where a non-disclaimable legal duty to protect your personally identifiable information exists, you accept that only intentional misconduct—not lesser conduct—measures whether ClickUp has breached that duty.
ConductAtlas has identified this type of provision across 281 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.