Privacy Policy

Last updated: July 20, 2026

At ClientsDock, operated by KAAI TECH LLC ("Company," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address

  Used for account authentication and important notifications

• Display name

  Used to personalize your experience

• Password

  Encrypted and stored securely

Portal Content

We store content you upload to your client portals, including:

• Files and documents

  Stored securely in Firebase Storage

• Messages and updates

  Communications within portals

• Custom branding

  Logos, colors, and portal customizations

Usage Data

We automatically collect certain information about your use of our service:

• Portal access logs

  When and how your portals are accessed

• Device information

  Browser type, operating system, IP address

• Performance data

  How you interact with our service

Public profile data

If you enable a public profile, we also store the information you choose to display (for example bio, expertise, images, and social links).

Client portal visitor data

When your clients access a portal (without creating a ClientsDock account), we may process:

• Email address

  When magic-link or email verification is enabled for a portal

• IP address and device data

  Access logs, downloads, and security monitoring

• Comments and approvals

  Feedback your clients submit on portal content

You are responsible for providing appropriate notice to your clients about how their data is processed when you share a portal link.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service

  Core functionality and security

• Send notifications

  Portal activity alerts and important updates

• Improve our service

  Analytics to enhance user experience

• Customer support

  Respond to your inquiries and provide assistance

• Security and fraud prevention

  Protect against unauthorized access

• Public profiles

  Display optional public profile information you provide

3. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• Service providers

  Trusted vendors that help us operate ClientsDock (see Subprocessors below)

• Legal requirements

  When required by law or to protect our rights

• Business transfers

  In case of merger, acquisition, or sale of assets

Subprocessors

• Google Firebase / Google Cloud

  Authentication, database, file storage, cloud functions

• Vercel

  Web application hosting and CDN

• Stripe

  Subscription billing and payment processing

• Amazon Web Services (SES)

  Transactional email delivery

• Cloudflare

  DNS, SSL, and edge security for custom domains

• Sentry

  Error monitoring when enabled

• Google reCAPTCHA

  Bot protection on authentication flows

• OpenAI

  Optional AI-assisted scope features when enabled on your plan

4. Data Security

We implement appropriate security measures to protect your information:

• Encryption

  Data encrypted in transit and at rest

• Access controls

  Limited access to authorized personnel only

• Regular security audits

  Continuous monitoring and updates

• Secure infrastructure

  Google Cloud Platform security standards

5. Your Rights and Choices

You have the following rights regarding your data:

• Access

  Request a copy of your personal data

• Correction

  Update or correct inaccurate information

• Deletion

  Request deletion of your account and data

• Data portability

  Export your data in a portable format

• Notification preferences

  Control email notifications in settings

Public profile controls

You can control whether your profile is public and update or remove profile fields in settings.

California privacy rights (CCPA/CPRA)

If you are a California resident, you may have the right to know what personal information we collect, request deletion or correction, and opt out of certain sharing. We do not sell personal information for monetary consideration. To exercise your rights, contact privacy@clientsdock.com.

European Economic Area / UK (GDPR)

Where GDPR applies, we process personal data based on contract performance, legitimate interests in securing and improving the service, legal obligations, and consent where required (for example, optional marketing or non-essential cookies). You may lodge a complaint with your local supervisory authority.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active accounts

  Data retained while your account is active

• Deleted accounts

  Most data deleted within 30 days

• Legal requirements

  Some data may be retained longer for compliance

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: