Draft review. This version is not in effect. Before publication, Ampliftai Inc. must verify the enabled provider register, data regions, transfer safeguards, cookie configuration, retention schedule and rights request runbook.
1. Scope and controller
This Privacy Policy explains how Ampliftai Inc. collects, uses, stores and shares personal information when you use Clico, visit tryclico.com, manage an account or subscription, or contact support.
Ampliftai Inc. is the controller of personal information used for its own purposes. Clico is one product available through the Chrome Extension, Desktop for Mac and Web Agent. These clients use different storage and processing paths, which are described below.
This Policy is a privacy notice. It does not treat continued use as consent where another legal basis or a specific choice is required.
2. Information we handle
Account and identity information
This includes your name, email address, authentication and session identifiers, account status, security information and legacy account mappings used to preserve access during migration from the former Invoko name.
Prompts, content and task information
This includes prompts, messages, selected text, page content, URLs, files, screenshots, audio, transcripts, app or screen context, task instructions, generated output, tool inputs and results, and connected service data that you provide or authorize Clico to use.
Subscription and transaction information
This includes plan, entitlement, credit usage, billing status, customer and subscription identifiers, invoices, transaction status and tax information. Payment processors handle complete payment card details. Ampliftai Inc. receives limited billing and transaction information needed to manage the subscription.
Device, product and diagnostic information
This may include browser or app version, operating system, device and session identifiers, language, coarse app context, feature events, task stage and result, usage metering, network and security logs, crash information, performance measurements and sanitized diagnostic details.
Website, attribution and communications
This may include pages viewed, referring page, campaign or signup attribution, cookie and local storage identifiers, consent choices, marketing preferences, support messages and feedback.
Approximate location
If you enable the Desktop weather feature and grant macOS permission, Clico may process approximate latitude and longitude and a resolved place name to provide weather information.
3. Chrome Extension
The Extension has broad browser permissions so it can work on supported websites and inside page frames. Permission to access a site does not mean that all content from that site is sent to Clico.
When you open or invoke a context aware Clico workflow, the Extension may read selected text, editable field content, the page URL and title, headings, tables, messages, document text and other visible page content needed for the request. Some workflows can use substantially more than the selected text or a short excerpt.
Prompts, responses, action type, page metadata and saved actions may be stored in Extension specific cloud records associated with your account. Recent conversations and history may also be cached in browser local storage. Extension history is separate from Web Agent history.
Deleting an available Extension chat removes it from active use and redacts its primary stored prompt and response. Limited security, audit or backup records may remain where justified.
4. Desktop for Mac
Desktop task history is primarily stored on your Mac. Local history may include prompts, result previews, generated artifacts, task status and local file references. Local history does not mean every task is processed offline.
When you request a task, Clico may send the prompt and relevant file, screen, app, transcript, search or tool context to Clico infrastructure and the providers needed to complete the task.
Screen and accessibility context
With macOS permission, Desktop may capture a screen image or read available accessibility text for a task. A submit screenshot may be written temporarily to the Mac and passed to a model or agent path. Current completion, failure and startup cleanup paths remove temporary submit screenshots, but this Policy does not promise that all screen derived text or task artifacts follow the same schedule.
Voice and recordings
With permission, Desktop may process microphone audio, system audio and transcripts. Audio chunks may be stored temporarily on the Mac while a recording or transcription task is processed and may be sent to a configured speech provider. Transcripts, summaries and timeline text can have a different lifecycle from temporary audio.
Diagnostics and analytics
When configured, core diagnostics may send sanitized crash, error, hang, release, device and performance information needed to maintain reliability. Optional diagnostics can add sanitized breadcrumbs, traces and task outcome signals. A temporary support session can send additional sanitized timing and status details. Raw prompts, screenshots, transcripts, files and request bodies are excluded from support diagnostics by default unless you separately attach material to a support request.
Desktop may also send authenticated product events such as feature, lifecycle, onboarding and task outcome events. The publication review must confirm the production defaults and controls for optional diagnostics and analytics.
5. Web Agent
Web Agent stores conversations, messages, task run status, model or provider metadata, errors, timestamps and agent events in cloud systems associated with your account so work can continue and be reviewed.
If you attach a file or ask Web Agent to create one, file metadata, relevant content or excerpts and generated workspace files may be processed in a cloud agent workspace. The publication review must confirm the retention and cleanup schedule for attachments and generated workspace files.
If you connect an account, Clico or its connection provider processes the authorization, account identifiers, requested tool inputs and returned data. OAuth secrets are handled through server side brokers rather than placed in the browser or model prompt.
Web Agent history is separate from Extension history. A user facing Web Agent delete control and a coordinated account wide deletion workflow are not currently verified. Until those controls are available, send a deletion request to hey@tryclico.com.
6. Purposes and legal bases
Provide Clico and perform the contract
We use information to authenticate you, carry out requested tasks, provide history and files, meter usage, administer subscriptions, provide support and communicate service or billing information.
Legitimate interests
We use limited information to secure accounts, prevent fraud and abuse, maintain reliability, diagnose errors, understand feature performance and improve Clico. We consider the nature of the information, the expected benefit and the effect on your rights before relying on legitimate interests.
Consent and user choice
We rely on consent where required for optional device permissions, nonessential cookies, certain analytics or marketing communications. You can withdraw consent without affecting processing that occurred before withdrawal.
Legal obligations and claims
We may process information to comply with law, respond to valid legal requests, maintain required transaction records, protect rights and safety, and establish, exercise or defend legal claims.
7. Providers and disclosures
Ampliftai Inc. uses service providers to operate Clico. The audited architecture includes the following provider categories:
- Account and database services for authentication, sessions, account records and cloud product data.
- Infrastructure and security services for hosting, network delivery, cloud agent execution, monitoring and protection.
- Payment services for checkout, subscriptions, invoices, taxes and billing support.
- AI model and routing services for prompts, relevant context, files, images and generated output.
- Speech, search and extraction services when a task requires transcription, web search, fetching or document processing.
- Connected account services for authorization and user requested operations involving third party apps.
- Analytics, diagnostics, attribution and communications services for product events, reliability, referrals, support and service emails.
- Location and weather services when you enable the Desktop weather feature.
Before this draft becomes effective, the production provider register must identify which supported providers are actually enabled, their purposes, data regions, retention terms and relevant subprocessors.
We may also disclose information when you direct us to connect a service, when required by valid legal process, to protect users or Clico, or as part of a merger, financing, acquisition or sale of assets subject to appropriate safeguards.
Ampliftai Inc. does not sell personal information for money. Before publication, we must verify whether any production analytics or attribution configuration constitutes “sharing,” targeted advertising or a sale under an applicable US state law and provide the required choice if it does.
8. Retention and deletion
We retain information only for as long as reasonably needed for the purposes described in this Policy, including providing Clico, maintaining security, resolving disputes and meeting legal obligations. Different records and clients have different lifecycles.
- Chrome Extension: cloud conversations and saved actions remain until removed through an available control or a verified request process. Recent records may also remain in browser storage until cleared, signed out or uninstalled, depending on the control used.
- Desktop for Mac: primary task history remains locally until you use an available deletion or purge control. Temporary submit screenshots and recording audio use cleanup paths, while transcripts, summaries, generated files, task directories and specialized caches may follow different schedules.
- Web Agent: cloud conversations, messages, run events and workspace material remain while needed to provide the service. A final automatic retention schedule and self service deletion control are not yet verified.
- Account, security and migration records: may remain while needed to authenticate the account, preserve legacy access, investigate abuse, maintain ledger integrity or document a rights request.
- Billing and legal records: may be retained when required for tax, accounting, fraud prevention, dispute or legal obligations.
Deleting an account, uninstalling one client or deleting one client’s history does not automatically remove information held by the other clients, payment providers, connected services or local devices.
The publication release requires a record by record retention schedule and a coordinated request runbook. Backups may retain limited information for a restricted period before deletion or isolation.
9. Your choices and requests
You can choose what task content to provide, revoke Chrome or macOS permissions, clear browser storage, use available history controls, disconnect connected services, change diagnostic or cookie settings where offered, unsubscribe from marketing and stop using or uninstall a client.
A disconnected provider may still show Clico as authorized until you also revoke access in that provider’s settings. Local Desktop information remains under the controls available on your Mac and may require separate local deletion.
To request access, correction, export, deletion, restriction or another privacy right, email hey@tryclico.com. We may verify your identity and account before acting. Until a coordinated automated workflow exists, requests are handled manually across the relevant Clico systems and providers.
10. EEA and United Kingdom rights
If the GDPR or UK GDPR applies, you may have the right to access, correct, erase, restrict or receive a portable copy of personal information, object to processing based on legitimate interests, and withdraw consent where processing relies on consent.
You may lodge a complaint with the data protection authority where you live or work or where you believe a violation occurred. You may also contact us first at hey@tryclico.com.
These rights can be limited by law. For example, we may retain information needed to comply with a legal obligation, protect other people’s rights or establish a legal claim.
11. United States state privacy rights
Depending on your state, you may have the right to know or access personal information, correct inaccurate information, request deletion, obtain a portable copy, opt out of sale, sharing or targeted advertising, limit certain uses of sensitive personal information, and appeal a denied request.
We will not discriminate against you for exercising an applicable privacy right. An authorized agent may submit a request where state law permits, but we may require proof of authority and may verify the request directly with you.
Send a request or appeal to hey@tryclico.com. The final publication review must confirm the state specific request methods, response periods, appeal process and any required opt out signal handling.
13. Security
We use measures intended to protect personal information, including access controls, encrypted network transport, authentication, provider review, data minimization and security monitoring. No system can guarantee absolute security.
You are responsible for protecting your credentials and devices. Report suspected unauthorized account access or a Clico security issue to hey@tryclico.com.
14. International transfers
Ampliftai Inc. and its providers may process personal information in the United States and other countries that may have different data protection laws from your country.
Where required, Ampliftai Inc. will rely on an approved transfer mechanism such as an adequacy decision or contractual safeguards. Before publication, Ampliftai Inc. must verify the mechanism that applies to each enabled provider and make any required copy or information available.
15. Children
Clico is not intended for anyone under 16, and people under 16 may not create or use an account. If you believe a person under 16 has provided personal information to Clico, contact hey@tryclico.com. We will investigate and take appropriate deletion steps where required.
16. Changes to this Policy
We may update this Policy to reflect changes to Clico, law or our data practices. For a material change, we will give at least 30 days notice through the email associated with your account or within Clico before the change takes effect.
For a nonmaterial correction or clarification, we may update the Policy when we update the displayed revision date.
17. Contact
Ampliftai Inc. is the controller responsible for this Policy. Privacy questions, rights requests and appeals may be sent to hey@tryclico.com.
Before publication, Ampliftai Inc. must determine whether an EEA or United Kingdom representative or an additional public contact address is legally required and add it here if applicable.