Privacy Policy | ClickSpur

Effective date: 15 October 2026 · Last updated: 15 October 2026

1. Introduction

ClickSpur PTY LTD ("ClickSpur", "we", "our", or "us") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, access, use, store, disclose, and protect personal information when you visit clickspur.com.au, use the ClickSpur platform, connect third-party services, or otherwise interact with us.

ClickSpur provides tools that help users manage digital content, connect supported accounts, access analytics, and publish content to supported platforms, including YouTube and Google Business Profile.

By using ClickSpur, you acknowledge that you have read this Privacy Policy. Where consent is required by applicable law, we will obtain it before processing your information.

2. Information We Collect

We collect only the information reasonably necessary to operate, maintain, secure, and improve our services.

2.1 Information You Provide

Depending on how you use ClickSpur, we may collect:

Name and email address.
Account registration and profile information.
Content, text, images, titles, descriptions, links, and other materials you provide or choose to publish.
Preferences, configuration settings, and connected-account selections.
Messages, support requests, and other communications you send to us.

2.2 Account and Technical Information

When you use ClickSpur, we may collect technical information such as:

IP address and approximate location derived from it.
Browser type, device information, and operating system.
Login events, timestamps, and security logs.
Application usage, feature interactions, and error diagnostics.

We use this information to operate the platform, troubleshoot issues, prevent abuse, and maintain security.

2.3 Google Account Information

If you choose to connect your Google account, ClickSpur may access information through Google APIs based on the permissions you authorize.

Depending on the integration, this information may include your Google account identifier, name, email address, profile information, YouTube channel information, video statistics, and Google Business Profile location information.

We do not access Google services or information for which you have not granted the necessary permissions.

3. Google API Services User Data

This section specifically explains how ClickSpur accesses and handles information obtained through Google API Services.

Our access is limited to the permissions requested by ClickSpur and granted by you through Google's OAuth authorization process.

3.1 Google Sign-In

ClickSpur uses Google Sign-In with the following OAuth scopes:

openid
email
profile

These scopes allow ClickSpur to authenticate your identity and obtain the account information made available through Google's authentication service, such as your Google account identifier, name, email address, and profile information.

We use this information to create or identify your ClickSpur account, authenticate you, and maintain your session.

We do not use Google Sign-In information to access unrelated Google services.

3.2 YouTube API Services

If you connect your YouTube account, ClickSpur may request the following OAuth scopes:

youtube.readonly
youtube.upload

The youtube.readonly permission allows ClickSpur to retrieve authorized YouTube channel information and the channel or video statistics required for the analytics features you use.

The youtube.upload permission allows ClickSpur to upload videos, including YouTube Shorts, when you choose to publish content through the platform.

Depending on the functionality used, we may process:

YouTube channel identifiers and channel names.
Video identifiers, titles, and other relevant video metadata.
Channel and video performance statistics returned by the YouTube API.
Titles, descriptions, and content that you submit for publication.
Upload status and publishing history.

We use this information to display analytics, support content management, and perform publishing actions you initiate.

ClickSpur does not publish content without an applicable user-initiated action or other authorization provided through the service.

We access only the YouTube information required for the features enabled in ClickSpur. The precise information retrieved depends on the API requests and functionality implemented.

3.3 Google Business Profile API

If you connect a Google Business Profile, ClickSpur may request the business.manage OAuth scope.

This permission enables supported management operations for Google Business Profile accounts and locations you authorize.

Depending on the features you use, ClickSpur may access:

Business location identifiers and names.
Information needed to identify the location selected for publishing.
Business Profile publishing information and post status.
Content and images you choose to publish.
Records of publishing actions performed through ClickSpur.

We use this information to let you select an authorized business location, prepare posts, publish content at your direction, and display relevant publishing records.

ClickSpur does not use this access to manage unrelated businesses or perform unrelated operations.

3.4 Purposes for Processing Google User Data

ClickSpur uses Google user data for the following purposes, as applicable to the services you authorize:

Authenticating users and maintaining ClickSpur accounts.
Connecting authorized Google accounts to the platform.
Identifying authorized YouTube channels and Google Business Profile locations.
Displaying YouTube analytics and relevant performance statistics.
Uploading user-selected content to YouTube.
Publishing user-approved content to selected Google Business Profile locations.
Maintaining the status and history of publishing actions.
Maintaining the security, reliability, and proper operation of the connected features.

We do not use Google user data for purposes unrelated to the functionality disclosed to you.

3.5 Google User Data We Do Not Collect or Use

ClickSpur does not intentionally access Google user data beyond the permissions and API operations required for its disclosed features.

We do not sell Google user data or use it for targeted advertising.

We do not use Google user data to train generalized artificial intelligence or machine-learning models.

We do not use Google user data for creditworthiness assessments or lending decisions.

We do not use Google user data for purposes prohibited by Google's API Services User Data Policy.

These commitments do not prevent the limited processing necessary to provide the service you request, maintain security, comply with applicable law, or meet other requirements expressly permitted by Google's policies.

4. How We Use Personal Information

We may use personal information to:

Provide, operate, and maintain ClickSpur.
Create and manage user accounts.
Authenticate users and connect supported services.
Provide analytics, content management, and publishing functionality.
Process publishing requests and display their status.
Respond to questions and support requests.
Detect unauthorized access, abuse, fraud, and technical problems.
Maintain system security and service reliability.
Comply with applicable legal obligations.
Improve the service using appropriate, permitted operational information.

We do not use personal information for materially different purposes without providing the required notice and obtaining consent where applicable.

5. Data Storage and Security

We use appropriate technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, and misuse.

Depending on the information and the systems involved, these measures may include:

Encrypted connections when information is transmitted.
Restricted access to production systems and stored information.
Server-side handling of authentication credentials and OAuth tokens.
Access controls and authentication mechanisms.
Monitoring, logging, and procedures for investigating security incidents.

Google OAuth access tokens and refresh tokens are handled as confidential credentials. They are not intended to be exposed through the browser interface.

Where supported by our implementation, OAuth tokens are stored in encrypted, access-controlled server-side storage.

No method of electronic transmission or storage is completely secure. We take reasonable steps to protect information but cannot guarantee absolute security.

6. Data Sharing and Disclosure

We do not sell personal information or Google user data.

We may disclose or permit access to information in the following circumstances:

6.1 Service Providers

We may use third-party service providers to host, store, secure, maintain, and operate ClickSpur.

These providers may process information on our behalf where necessary to deliver their services. Access is limited to the purposes for which the providers are engaged and is subject to appropriate confidentiality and data-protection obligations.

The specific providers involved depend on the services and infrastructure used by ClickSpur.

6.2 Actions You Request

When you ask ClickSpur to publish content or perform an authorized operation through Google APIs, the relevant information is transmitted to Google as necessary to carry out that operation.

For example, publishing a video requires transmitting the applicable video content and metadata to YouTube.

6.3 Legal and Security Requirements

We may disclose information where reasonably necessary to comply with applicable law, respond to valid legal processes, protect rights and safety, investigate suspected abuse, or address security incidents.

6.4 No Sale or Advertising Transfer

We do not sell Google user data or transfer it to third parties for targeted advertising.

We do not disclose Google user data to data brokers for their independent commercial use.

Any other processing or disclosure of Google user data must be consistent with your authorization, this Privacy Policy, applicable law, and Google's API Services User Data Policy.

7. Human Access to Google User Data

Access to Google user data by ClickSpur personnel is restricted to authorized circumstances and subject to appropriate access controls.

Where applicable, human access may occur only when:

You provide affirmative consent for the relevant support or operational purpose.
Access is necessary for security investigations, fraud prevention, or compliance with applicable law.
Access is otherwise expressly permitted under Google's API Services User Data Policy.

We do not permit employees or contractors to access Google user data for unrelated purposes.

We take reasonable steps to ensure that personnel who are permitted to access personal information understand their confidentiality and data-protection responsibilities.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention depends on the type of information and the feature for which it is used.

Account information: Retained while your account remains active and as needed to provide the service.
Google OAuth tokens: Retained while required to maintain an authorized connection, subject to applicable security and deletion procedures.
YouTube analytics and metadata: Retained as needed to provide analytics and related features.
Business Profile location information: Retained as needed to support authorized publishing and account functionality.
Publishing records: Retained as needed to display publishing history, support users, and maintain service records.
Technical and security logs: Retained for the period reasonably necessary for security, troubleshooting, and operational purposes.

Where appropriate, we delete or de-identify information when it is no longer needed.

Specific retention periods may vary depending on the type of information, operational requirements, and legal obligations.

9. Data Deletion and Disconnection

You may disconnect a Google integration from ClickSpur or withdraw authorization through your Google Account settings.

When you disconnect a Google integration, we will stop using the connection for new authorized operations and follow our applicable procedures for deleting the associated OAuth tokens and connected-account data.

Where applicable, token revocation and deletion may occur through separate processes.

Disconnecting an account does not necessarily delete your entire ClickSpur account or every record previously created through the service.

You may request deletion of personal information associated with your ClickSpur account by contacting us at support@clickspur.com.au with the subject line "Data Deletion Request".

Please include enough information for us to identify your account and process the request. Do not send passwords or OAuth tokens.

We will process deletion requests in accordance with applicable law and our retention obligations. Where deletion is required and no lawful exception applies, we will delete the relevant information within the applicable period.

Information that must be retained to meet legal obligations or resolve legitimate security and compliance matters may be retained for the period required or permitted by law.

10. Your Choices and Rights

Depending on your location and applicable law, you may have rights to:

Request access to personal information we hold about you.
Request correction of inaccurate information.
Request deletion of personal information.
Object to or request restrictions on certain processing.
Withdraw consent where processing is based on consent.
Disconnect Google services from ClickSpur.
Lodge a complaint with the relevant privacy regulator.

You can manage ClickSpur's access to your Google account through your Google Account permissions settings.

Withdrawing authorization may prevent some ClickSpur features from functioning.

To exercise applicable privacy rights, contact support@clickspur.com.au.

11. International Data Transfers

Depending on the service providers and infrastructure used, personal information may be processed or stored in countries other than the country in which you reside.

Where international transfers occur, we take steps required by applicable privacy laws to protect personal information.

Further information about the locations and safeguards relevant to a particular service may be requested using the contact details below.

12. Cookies and Similar Technologies

ClickSpur may use cookies or similar technologies necessary to authenticate users, maintain sessions, protect accounts, remember preferences, and support website functionality.

Where analytics or other optional technologies are used, we will provide applicable notices and obtain consent where required by law.

You may be able to manage cookies through your browser settings. Disabling certain cookies may affect the functionality of ClickSpur.

13. Children's Privacy

ClickSpur is not intended for children who are not legally permitted to use the service under applicable law.

We do not knowingly collect personal information from children in circumstances where such collection is prohibited. If you believe a child has provided personal information inappropriately, contact us so that we can review the situation.

14. Third-Party Services

ClickSpur may integrate with third-party services, including Google services, to provide its features.

Your use of those services may also be governed by the relevant third party's terms, privacy policy, and account settings.

Google's privacy information is available at:

https://policies.google.com/privacy

ClickSpur's use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

15. Changes to This Privacy Policy

We may update this Privacy Policy when our services, data practices, legal obligations, or security measures change.

The revised version will be published at:

https://clickspur.com.au/privacy

We will update the "Last updated" date when material changes are made. Where required by applicable law, we will provide additional notice or obtain consent before implementing changes.

16. Contact Us

For questions about this Privacy Policy, Google user data, access requests, or data deletion, contact:

ClickSpur PTY LTD

Website: https://clickspur.com.au

Email: support@clickspur.com.au

Please use the subject line "Privacy Request" or "Data Deletion Request" as appropriate.

17. Google API Services User Data Policy

ClickSpur's access to and use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

We limit access, use, storage, and sharing of Google user data to the purposes disclosed in this Privacy Policy and the functionality authorized by the user, subject to the exceptions expressly permitted by Google's policy.

Google API Services User Data Policy:

https://developers.google.com/terms/api-services-user-data-policy