This Privacy Policy describes how ClikFlow collects, uses, stores and protects personal data of platform users, in accordance with the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018) and other applicable regulations.
ClikFlow is a process mining platform that enables organisations to discover, analyse, and optimise their business processes from event log data.
We collect only the data necessary to deliver our services. The table below describes each category, its purpose, and the corresponding legal basis (LGPD, art. 7):
| Category | Data | Purpose | Legal basis |
|---|---|---|---|
| Account data | Name, email address, password (hashed) | Account creation and management; authentication | Contract performance (art. 7, V) |
| Usage data | IP address, browser type, pages visited, access timestamps | Security, error diagnostics, service improvement | Legitimate interest (art. 7, IX) |
| Uploaded files | CSV/XES event logs submitted by the customer | Processing the log for process analysis | Contract performance (art. 7, V) |
| Billing data | Invoicing information (processed by our payment gateway) | Subscription and billing management | Contract performance (art. 7, V) |
| Analytics cookies | Anonymised session identifiers | Traffic analysis and UX improvement | Consent (art. 7, I) |
Important: Event logs uploaded by customers may contain personal data belonging to third parties (e.g. employees, end customers). In those cases the customer is the Controller and ClikFlow acts as the Processor — see our Data Processing Agreement (DPA) for the contractual details.
ClikFlow does not sell personal data. We share data only in the following circumstances:
| Recipient | Data | Purpose | Safeguards |
|---|---|---|---|
| Cloud hosting provider | Data stored on the platform | Infrastructure and availability | Data protection clauses in contract |
| Payment gateway | Billing information | Payment processing | PCI-DSS compliant; we never store card data |
| Analytics tool | Anonymised browsing data | Usage analysis (consent only) | Pseudonymisation; opt-out available |
| Competent authorities | As required by legal order | Compliance with legal obligations | LGPD art. 7, II |
| Data type | Retention period |
|---|---|
| Active account data | For as long as the account remains active |
| Closed account data | 30 days after closure, then permanently deleted |
| Uploaded event log files | 2 hours in memory after analysis; saved investigations are kept until manually deleted |
| Access logs (system logs) | 6 months (Brazilian Internet Act requirement) |
| Billing records | 5 years (statutory fiscal obligation) |
Under LGPD art. 18, you have the following rights regarding your personal data:
To exercise your rights, visit our Data Subject Rights Portal or email privacy@clikflow.com. We will respond within 15 calendar days.
Data may occasionally be processed on servers located outside Brazil. In such cases we guarantee equivalent protection to the LGPD through:
We implement appropriate technical and organisational measures to protect personal data, including:
See our Information Security Policy for full details.
We use essential cookies for platform functionality and, with your consent, analytics and functional cookies. You can manage your preferences at any time via the cookie banner or by reading our Cookie Policy.
The ClikFlow platform is intended exclusively for users aged 18 or over and for authorised representatives of legal entities. We do not knowingly collect data from minors.
This policy may be updated periodically. For material changes, we will notify users by email or via an in-platform notice at least 15 days in advance. The latest version is always available on this page.
For questions, requests, or complaints related to personal data, please contact:
You may also file a complaint directly with the Autoridade Nacional de Proteção de Dados (ANPD).