ClickUp shares your personal data with outside companies for purposes including marketing and analytics, and in some cases those third parties may use your data for their own marketing.
This analysis describes what ClickUp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Sharing data with third parties for their own marketing purposes goes beyond typical service-provider sharing and means your data may be used in ways you did not directly anticipate when signing up for ClickUp.
Interpretive note: The phrase 'subject to your choices' implies an opt-out mechanism exists but the policy does not specify whether this applies to all users or only California residents, creating ambiguity about the scope of this protection.
The updated policy now explicitly recognizes eight distinct data subject rights, including rights to access, correct, delete, restrict processing, receive data in portable format, object to processing, withdraw consent, and lodge complaints with regulators. Previously, ClickUp described privacy controls through general opt-out options and data access procedures without formal legal framing. The revised language aligns with GDPR and similar data protection frameworks, providing clearer legal reference points for how users may exercise control over their personal data. You can exercise these rights by contacting ClickUp's support team.
View change record →Your personal data, including behavioral and account information, may be disclosed to advertising and analytics partners who use it for their own purposes, which under CPRA may constitute a 'share' of personal information even if not a traditional sale.
How other platforms handle this
In the event you receive Oura-branded advertising sent to you by one of our third-party partners, please review the third-party's privacy policy for more information, and contact them with regard to any opt-out requests.
Where you have provided your consent, we may share your personal information with selected third parties for their commercial or marketing use in conjunction with your relationship with FanDuel...
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
"We may share your information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your personal information with third parties for their own marketing purposes, subject to your choices.Excerpt from ClickUp's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages CPRA's definition of 'sharing' personal information for cross-context behavioral advertising, which triggers opt-out rights regardless of whether monetary consideration is exchanged.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Sharing data with third parties for their own marketing purposes goes beyond typical service-provider sharing and means your data may be used in ways you did not directly anticipate when signing up for ClickUp.
Your personal data, including behavioral and account information, may be disclosed to advertising and analytics partners who use it for their own purposes, which under CPRA may constitute a 'share' of personal information even if not a traditional sale.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by ClickUp.