Privacy Policy

Effective date: 27 August 2026 · Last updated: 27 August 2026

This summary is for orientation only. The sections below are what govern.

1. Who we are

Zlick Labs Inc. (“Zlick”, “we”, “us”) operates the website at zlick.co and the Zlick application at app.zlick.co. Our registered address is 2248 Broadway #2129, New York, NY 10024, United States. For anything in this policy, write to support@zlick.co.

Where the EU or UK GDPR applies, Zlick is the controller of the account and website data described in Sections 3.1 and 3.3. For the trial data and documents a customer uploads, the customer organisation is the controller and Zlick acts as a processor, handling that data on the customer’s documented instructions under our customer agreement.

2. Scope

This policy covers zlick.co, app.zlick.co, and our related emails, forms, and events. It does not cover third-party websites we link to — including ClinicalTrials.gov, Zoom, and calendar providers — which operate under their own privacy policies.

3. Information we collect

3.1 Information you give us

Your name, work email address, company, job function, and the content of your message when you register for an account, request a demo, use the contact form, or sign up for a webinar. If you become a customer, we also hold billing and administrative contact details.

3.2 Content you submit (“Your Content”)

Trial identifiers such as NCT IDs, protocols and other documents you upload, trial and site parameters, financial assumptions, saved scenarios, and the ratings and feedback you give our recommendations. Your Content is intended to be trial-level and operational data — see Section 8.

3.3 Information collected automatically

IP address, browser and device type, pages and screens viewed, referring page, timestamps, and in-application actions, collected through server logs, cookies, and analytics.

We do not ask for and do not want special-category data, government identifiers, or patient-identifiable information.

4. Cookies and analytics

We use first-party cookies and equivalent browser storage to keep you signed in, remember your preferences, keep the service secure, and remember that you have dismissed a notice. These are necessary for the service to work as intended.

We use a single analytics provider to measure traffic to the website and application. It is configured to measure patterns, not people: we do not send names, email addresses, or any of Your Content to it; IP anonymisation is enabled; advertising features, cross-device tracking, and remarketing are switched off. Analytics cookies are set on our own domain, but analytics is a third-party service and the measurement data is processed by that provider on our behalf.

We use no advertising cookies and work with no advertising partners.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will break parts of the service.

5. How we use information, and our legal basis

6. AI and machine learning

Zlick is an AI-powered forecasting platform, so we want to be exact about this.

• We do not use Your Content to train foundation or general-purpose AI models — neither our own nor anyone else’s.
• Where we use third-party AI providers to process a request, they act as our service providers under contracts that prohibit them from using Your Content to train their models.
• Zlick is nonetheless designed to get better over time. It learns from how the service is used — the ratings you give recommendations, whether you implement them, and aggregated, de-identified patterns across trials — so that forecasts and recommendations improve for everyone. This learning operates on operational signals and aggregate patterns, not on identifiable personal data.
• Your Content is never exposed to another customer, and the outputs generated for you are not reproduced in another customer’s account.
• Zlick’s forecasts are decision support for trial teams. We do not use automated decision-making that produces legal or similarly significant effects concerning individuals.

7. How we share information

We do not sell, rent, or trade personal data. We do not share it for advertising, and we do not work with data brokers or advertising partners. We do not share Your Content with other customers.

We share limited data with a small number of vetted service providers, in these categories only:

• cloud hosting and infrastructure
• content delivery, and security and abuse prevention
• product and website analytics
• form handling, and transactional and marketing email delivery
• AI and machine-learning infrastructure used to process requests
• webinar and calendar services
• billing and accounting

Each provider acts on our documented instructions, is bound by confidentiality and data-protection terms, and may not use the data for its own purposes. A current list of our sub-processors is available on request from support@zlick.co.

We may also disclose information where we are required to comply with applicable law or valid legal process — in which case we will notify the affected customer unless we are legally prohibited from doing so — where necessary to protect the rights, property, or safety of Zlick, our customers, or the public, and in connection with a merger, acquisition, or sale of assets, in which case we will give notice and the data will remain subject to this policy.

8. Trial data, not patient data

Zlick is built for trial-level, site-level, and aggregate data. Do not upload data that identifies individual patients, including protected health information as defined by HIPAA, or other special-category data. Zlick does not act as a HIPAA business associate in respect of the service described here. If you believe patient-identifiable data has been submitted to Zlick, contact support@zlick.co and we will help you remove it.

9. Your content is yours

You retain all rights in Your Content. We store and process it only to deliver the service to you, to provide support, and to keep the service secure and reliable. Your Content is private to your account and to the users your organisation authorises. Other customers cannot see or access your work unless you choose to share it with them.

10. Retention and deletion

• Your Content — kept while your account is active and until you delete it or ask us to delete it.
• Account and contact data — kept for the life of the account, and for a limited period afterwards where we need it for legal, tax, or audit purposes.
• Analytics and log data — kept for 14 months, then deleted or aggregated.
• Marketing contacts — kept until you unsubscribe.

You can ask us at any time to permanently delete your data by writing to support@zlick.co. We will verify the request and delete the data from live systems within 30 days. Residual copies may persist in encrypted backups for up to 30 days, after which they are overwritten in the normal backup cycle. We may keep a minimal record of the request itself so that we can show it was honoured.

11. Security

We protect data with encryption in transit and at rest, role-based access controls on a least-privilege basis, multi-factor authentication for administrative access, activity logging, and review of the providers we use. No system is completely secure, but we work to keep the risk low and to respond quickly. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

12. International transfers

Zlick is based in the United States, and our service providers may process data in the United States and other countries. Where personal data is transferred out of the EEA, the UK, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses together with the UK Addendum, or another valid transfer mechanism, and we apply additional safeguards where needed. A copy of the relevant terms is available from support@zlick.co.

13. Your rights

If you are in the EEA, the UK, or Switzerland, you have the right to access your personal data; to have it corrected or erased; to restrict or object to how we process it, including processing based on legitimate interests and any direct marketing; to receive it in a portable format; and to withdraw consent at any time without affecting processing already carried out. You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner’s Office.

If you are in California, Colorado, Connecticut, Virginia, or another US state with a comprehensive privacy law, you have the right to know what personal information we hold and to obtain a copy; to have it corrected or deleted; to opt out of its sale, sharing, targeted advertising, and profiling; and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act and comparable state laws, and we do not process personal information for targeted advertising or for profiling with legal effects. Authorised agents may submit requests on your behalf with proof of authorisation.

To exercise any of these rights — including simply asking to see the data we hold about you — write to support@zlick.co. We will verify your identity and respond within the timeframe the law requires, generally 30 days under the GDPR and 45 days under US state laws. There is no charge unless a request is manifestly unfounded or excessive.

If you use Zlick through your employer’s account, we may refer your request to that organisation as the controller of the data, and we will assist them in answering it.

14. Children

Zlick is a business service and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact support@zlick.co and we will delete it.

15. Marketing communications

We send service messages — security notices, billing, and changes to the service — to account holders as part of delivering the service; these cannot be opted out of while your account is open. Marketing emails, including webinar invitations and product updates, carry an unsubscribe link in every message, and you can also unsubscribe by writing to support@zlick.co.

16. Changes to this policy

We may update this policy as the service develops or the law changes. We will post the updated version here with a new effective date. If the changes are material, we will give account holders notice by email or in the application at least 30 days before they take effect.

17. Contact us

Privacy and data requests: support@zlick.co
General enquiries: hello@zlick.co · (347) 861-2616