Privacy Policy

MakClick Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Tech Click ("MakClick", "we", "us", or "the Platform"), based in the Netherlands (Huslystraat, 3066EK, Rotterdam), processes personal data in connection with the MakClick SaaS platform (website and application).

We process personal data in accordance with the General Data Protection Regulation (GDPR / AVG) and other applicable Dutch and European laws. This Policy forms part of our Terms and Conditions; where those Terms refer to a "Privacy Policy", this document applies.

1. Data controller

For personal data processing in the context of MakClick, Tech Click is in principle the data controller.

Where a business owner or accounting firm enters company, customer, invoice, or document data into MakClick, that party may also act as controller for that content. MakClick then processes such data as a processor for the purpose of providing the Service. Exact Online acts as an independent party for data that you or your accountant export or sync to Exact; that processing is governed by Exact’s own terms and privacy policy.

2. What data we collect and store

Depending on your role (business owner, staff, accountant) and use of the Service, we may process among others:

  • Account and identity data: name, email address, password (hashed), language preference, account type (e.g. business or accountant), and related profile settings.
  • Company data: company name, address, Chamber of Commerce / VAT numbers, and other company details you record.
  • Relation data: customer and supplier details entered by you or your accountant (names, addresses, contact details, numbers).
  • Financial and administrative data: invoices, quotes, amounts, VAT data, statuses, and related metadata.
  • Time tracking: hours worked, descriptions/projects, and related time entries you record.
  • Uploaded documents: files (e.g. PDF/images of purchase invoices or attachments) stored on S3-compatible object storage.
  • Exact Online data: OAuth tokens (access/refresh), division/administration identifiers, sync references, connection status, and technical sync metadata needed to export or synchronise.
  • Subscription and payment data: subscription status and, where applicable, payment references via our payment provider (e.g. Stripe customer/subscription IDs). Full card details are processed by the payment provider; MakClick does not store full payment card numbers.
  • Communications: messages you send via contact forms or support channels.
  • Technical and security data: IP address, session data, logs, device/browser information, error and audit logs, as needed for security, abuse prevention, and troubleshooting.

3. How we collect data

  • Registration and account management: data you provide when creating or updating an account.
  • Manual entry: data entered by you or authorised users in the interface (companies, relations, invoices, hours, etc.).
  • File uploads: documents uploaded by you or your accountant.
  • OCR (where used): automated text/data extraction from uploaded documents as a support tool; results may be stored and further edited.
  • Exact Online OAuth: when you or your accountant connect MakClick to Exact Online, we receive authorisation data and technical identifiers via the Exact API.
  • API synchronisation: data exchange with Exact Online for export, sync, or status updates that you initiate or configure.
  • Automatically: technical logs and security data during use of the Service.
  • Third parties (limited): payment or email providers may return status updates needed for the Service to function.

4. Purposes and legal bases

We process personal data for the following purposes:

  • Providing the Service: accounts, companies, invoices, hours, documents, and accounting workflows (performance of contract).
  • Business–accountant collaboration: sharing and processing administrative data within Platform permissions (performance of contract / legitimate interest).
  • Connection and export to Exact Online: OAuth, sync, and transfer of data you choose to send to Exact (performance of contract; consent via the connection action where needed).
  • Subscriptions and payments: billing and subscription management (performance of contract / legal obligation).
  • Support and communication: answering questions and sending service-related messages (legitimate interest / performance of contract).
  • Security, abuse prevention, and integrity: session management, access control, logging, and incident response (legitimate interest / legal obligation).
  • Legal obligations: where we are required to process data (e.g. obligations applicable to us as a service provider).

We do not sell your personal data.

5. Retention and deletion

  • Active accounts: data is retained while your account is active and needed for the Service.
  • End of subscription: under our Terms and Conditions, data is generally retained for 14 days after subscription expiry and then permanently deleted, unless a longer retention obligation applies.
  • Account deletion: you may delete your account via profile settings. Related personal data is then deleted or anonymised, except data we must briefly retain by law or for disputes/administration.
  • Disconnecting Exact: you (or your accountant, within permissions) may disconnect Exact Online. Tokens and active sync links are then terminated; data already exported to Exact remains under Exact.
  • Documents on object storage: uploaded files are deleted or made inaccessible when related records or the account are deleted under our retention policy.
  • Logs: technical logs are kept for a limited period for security and troubleshooting, unless longer retention is needed for an incident or legal claim.

If you request deletion, we handle it within GDPR timeframes, subject to legal exceptions (e.g. statutory retention).

6. Withdrawing consent and requesting deletion

You may exercise your rights or withdraw consent (where consent is the legal basis) by:

  • account/profile settings (including account deletion);
  • disconnecting the Exact connection in the relevant settings;
  • the Platform contact/support form;
  • email to info@makclick.com.

Withdrawing consent does not affect the lawfulness of processing before withdrawal. Stopping the Service or deleting the account may mean certain features are no longer available.

7. Sharing with third parties

We share data only as needed for the Service or as required by law, including with:

  • Exact Online (Exact Group): when you or your accountant activate the connection and export or sync data. Exact processes that data under its own terms and privacy policy.
  • Hosting / VPS provider: for hosting the application and databases.
  • Object storage (S3-compatible): for storing uploaded documents, generally private (not public).
  • Email provider (e.g. Resend or SMTP service): for transactional emails (verification, notifications, support).
  • Payment provider (e.g. Stripe): for subscription payments where you use a paid plan.
  • Accountant / accounting firm: data you share or that is visible under permissions set by you or the firm.

Where required, we use data processing agreements or equivalent safeguards. For transfers outside the EEA, we implement appropriate safeguards (e.g. standard contractual clauses) where applicable.

8. Security

We apply appropriate technical and organisational measures, including among others:

  • HTTPS encryption of traffic;
  • role-based access control (access limited to what the role needs);
  • private storage of documents on object storage;
  • session protection and CSRF protection in the web application;
  • hashed passwords and OAuth tokens used only for the Exact integration.

No system is 100% secure. In the event of a personal data breach posing a risk to individuals, we will notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, where required, the data subjects, in accordance with the GDPR.

9. Your rights (GDPR/AVG)

Where applicable, you have the right to:

  • Access your personal data;
  • Rectification of inaccurate data;
  • Erasure ("right to be forgotten") under legal conditions;
  • Restriction of processing;
  • Objection to processing based on legitimate interests;
  • Data portability where processing is based on consent or contract and is carried out by automated means;
  • Withdrawal of consent where processing is based on consent.

You may lodge a complaint with the Autoriteit Persoonsgegevens (Netherlands). We appreciate if you contact us first at info@makclick.com.

10. Cookies and similar technologies

We use cookies and similar technologies needed for sessions, authentication, security (e.g. CSRF), and language preferences. Functional cookies are necessary for the Platform to work. We do not place non-essential marketing tracking cookies without an appropriate legal basis/consent.

11. Minors

The Service is intended for business use and is not directed at persons under 16. We ask minors not to provide personal data.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is published on the Platform. For material changes, we will inform you where reasonably possible (e.g. via the website or email). Continued use after publication may constitute acceptance of the updated version, to the extent permitted by law.

13. Contact for privacy requests

Controller: Tech Click
Address: Huslystraat, 3066EK, Rotterdam
Privacy email: info@makclick.com
Website: via the contact form on MakClick

For access, correction, deletion, or other GDPR requests, please include your account email and a clear description of your request. We may ask for additional identification to prevent abuse.