Privacy#

Effective 2026-08-21. This page describes what Click Guide does with data, in plain English. It is written to be honest, not to be exhaustively legal -- Code Infinity (Pty) Ltd is completing a formal privacy notice with counsel; in the meantime this is what the software actually does, and what appears in the operating logs.

If anything below conflicts with the formal notice when it lands, the formal notice governs. This page is factually accurate on the day it is written; the terms are drafted alongside it.

Who this is about#

Two audiences share this page:

Customers -- the organizations who install Click Guide on their own product and pay us (or use the free tier).
End users -- the people using our customers' products who see the Click Guide launcher, ask its assistant a question, or run through a guide.

We collect very different information from each. The rest of this page names which is which.

What Click Guide collects from customers#

Account identity. The email address you sign in with, the organization name you chose, and the role each teammate holds. No password (we use passwordless email links; see Install).
Application configuration. The applications you create, the API keys you mint (fingerprinted; the plaintext key is shown once at issue and never stored recoverably), the origins you allow those keys to serve, your branding theme, and any MCP tokens you mint for editor integration.
Your content. The documentation you upload for the assistant to answer from, and the guides you record. Both are scoped to your organization by tenant-isolated storage; no other customer's account can retrieve them.
Audit log. Every write action on your tenant is recorded with the member's email, the action name, and a UTC timestamp. Kept while your organization exists; deleted with the organization on request.

We store this in MongoDB in the primary region (currently Cape Town, South Africa). Nightly snapshots are retained for 30 days.

What Click Guide collects from end users#

The launcher on a customer's page collects, over the network:

The publishable API key naming which tenant to serve.
The origin the browser sends -- checked against the key's allowlist.
The question text entered into the assistant, at the moment it is asked. Sent to our retrieval endpoint, processed against the tenant's own documentation, discarded. Not stored, not indexed, not associated with any identifier.
Aggregate counters. For each request, we increment a per-day, per-kind counter (config session, answer, guide started). Numbers only -- no question text, no URLs, no user identifier.

The launcher does not:

Collect the end user's identity, IP, User-Agent, or any device fingerprint.
Set cookies. Its state lives in sessionStorage scoped to your customer page's origin, and clears with the tab.
Load resources from any host other than cdn.clickguide.co.za (JS) and its proxied runtime endpoint on the same host.

When Click Guide sends data to a third party#

The optional generative answer layer sends the top retrieved passages plus the end user's question to Google's Gemini API when GOOGLE_API_KEY is configured on our servers. Google acts as a processor under our contract; the passages are the ones you uploaded, and the returned text is quoted from them under strict prompt discipline that refuses when the passages do not cover the question. When the key is not configured, the answer is a framed quote of the top passage and no data leaves our infrastructure.

Payment processing (when live) will use PayFast; card details never touch our servers.

Nothing else is shared. In particular, we do not sell, rent, or barter customer or end-user data, ever.

Deletion#

A source deleted from the console removes the source row and every chunk derived from it -- immediately, and on every replica.
A flow deleted removes both the draft and every published version.
An application deleted cascades to its flows, keys, sources, chunks, usage counters, and builder tokens.
An organization deletion is not self-serve today. Email privacy@clickguide.co.za and we delete every row associated with the organization id within seven business days, including from the nightly snapshot rotation.

Contact#

Data-protection requests, deletion, or corrections: privacy@clickguide.co.za.

Data controller: Code Infinity (Pty) Ltd, South Africa.