Privacy Policy

InstaBlick, LLC, a Delaware limited liability company (“InstaBlick,” “we,” “us,” or “our”), supplies ClausePass27001 and operates this website. This notice supplements the public InstaBlick privacy policy for the ClausePass27001 marketplace.

Information we collect

Account information such as name, email address, verification state, sign-in provider, sessions and security metadata.
Newsletter-subscription details, including email address, consent wording and version, signup source, timestamps, current subscription state and provider-sync records.
Preview-request details, including name, email address, optional company, download and email-delivery records, and any separate permission you choose to give for ISO 27001 tips and product updates.
Checkout details you provide, including first and last name, optional business name, email address, and confirmation that you are 18 or older. Records from earlier checkouts may also include date of birth and postal address.
Purchase metadata supplied by the selected payment provider, including customer name and email, product, price, tax, discount, order status and receipt link. We do not receive full payment-card details.
Product-access records, including entitled releases, queued ZIP-generation status, one-time grant status and hashed claim tokens, download metadata, and the delivery status of purchase and release emails.
Contact details and messages submitted through the contact form.
Consultant application and client-license details, including business names, role, professional links, application narrative and internal review records.
Technical information needed to secure the service, such as IP address, browser information, timestamps and rate-limit records.

How we use information

We save valid newsletter, preview, contact, consultant-application and checkout submissions before attempting provider delivery, file delivery, email notification or payment-page creation. This lets us complete a request or recover it automatically if a delivery provider is temporarily unavailable. We also use personal information to authenticate accounts, connect matching purchases, maintain purchase and entitlement history, deliver protected files, notify eligible Agentic purchasers when a new version is available, operate consultant verification, prevent misuse, answer support requests, meet legal duties and improve service reliability. We use a newsletter email address to send practical NIS2 and ISO 27001 guidance and occasional relevant ClausePass27001 product updates only after the required subscription permission is selected. Preview-request details are used for ISO 27001 tips and product updates only when you select that form’s separate optional permission.

Service providers

Information may be processed by providers acting for us or as independent parties, including Vercel for hosting, Neon for database infrastructure, Plausible for production-website analytics, Resend for email-contact management and delivery, and the payment provider or Merchant of Record identified at checkout.

The selected payment provider handles checkout, payment, receipt, refund and chargeback information and, where offered, tax calculation under its own privacy notice and buyer terms, which are presented or linked during checkout.

Cookies and sessions

We use essential authentication and security cookies required to keep accounts signed in and protect requests. On the public production website, we use Plausible Analytics to understand aggregate traffic and page usage. Plausible is enabled only on https://www.clausepass27001.com; QA, preview and local environments do not initialize Plausible or request its analytics script. Plausible states that it does not use cookies or persistent identifiers and does not collect personal data that identifies visitors. See the Plausible data policy. No third-party advertising pixels are enabled by this application.

Retention and disclosures

Preview links expire after seven days. Preview delivery requests without optional marketing permission, failed or unconverted checkout requests, and contact-form delivery records are removed after 90 days. Newsletter and preview-marketing details covered by active permission are retained until that permission is withdrawn. After withdrawal, we retain only the consent and suppression records reasonably needed to honour the choice, demonstrate permission and meet legal requirements. Related correspondence for an open support case, consultant applications, account and entitlement records, and completed order, buyer and transaction records are retained under the applicable operational, verification, tax, accounting, fraud-prevention, dispute-resolution and legal requirements. Personalized download ZIPs are deleted by a daily cleanup process after they are used, revoked or expire. We may disclose information to service providers, professional advisers, authorities where legally required, and a successor in a corporate transaction.

International processing

InstaBlick is based in the United States. We and our providers may process information in the United States and other countries with different data-protection laws. Applicable transfer safeguards are used where required.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection, and to complain to a data-protection authority. Every newsletter includes an unsubscribe link that lets you withdraw that permission or change the relevant email preference. You may withdraw optional preview-marketing permission through the contact form. Some transaction and limited consent or suppression records cannot be deleted immediately where retention is legally required.

Contact

Privacy requests may be submitted through the contact form or mailed to:

InstaBlick, LLC
1014 Broadway, #2019
Santa Monica, California 90401
United States