Click Privacy Policy
Last Updated: September 2026
1. Who This Policy Covers
1.1 Customers: WISPs, hotels, cafés, campuses and other businesses that licence Click software or buy Click hardware. Click decides how their account information is used.
1.2 End users: people who connect to a hotspot run by a Customer and pay for internet access. The business operating that network decides what is collected and why, not Click. Click handles that information on the operator's instructions. Requests to correct or delete it should go to the operator in the first instance.
1.3 Website visitors: anyone browsing click.tz or contacting Click.
2. Information We Collect
2.1 From Customers: business name and contact details, team names, job titles, email addresses and phone numbers, admin portal usernames and encrypted passwords, login records, mobile money wallet number, settlement history, licence keys, device serial numbers, support correspondence, and technical data from the router including uptime, firmware version and error logs.
2.2 From end users, on the operator's behalf: MAC address, assigned IP address, connection and disconnection times, session duration, data volume, voucher or package purchased, speed limit applied, mobile money number, payment amount, network used and transaction status. Name, room number, phone number or email are collected only where the operator configures their portal to request them.
2.3 From website visitors: IP address, browser and device type, pages viewed, referring page, and anything submitted through a contact form or messaging channel.
2.4 Click does not receive or store mobile money PINs.
2.5 Click does not log the websites end users visit, the messages they send, or the content of their internet traffic. Only session and payment records necessary to deliver and bill access are kept.
3. How We Use Information
3.1 To create and operate Customer accounts and issue licences.
3.2 To supply, provision and support hardware.
3.3 To process end user payments, calculate fees and execute settlements.
3.4 To detect fraud, voucher abuse and network attacks.
3.5 To provide support and send service, outage and security notices.
3.6 To keep accounting and transaction records.
3.7 To improve the services and develop new features.
3.8 To comply with legal obligations and respond to lawful requests from authorities.
3.9 Marketing messages are sent only to Customers who have opted in, and can be stopped at any time. This does not affect essential service notices.
4. Automated Processing
4.1 Payment approval, session activation, speed and quota enforcement, and fraud flagging are automated. Fraud flags may result in a settlement being held.
4.2 Customers may request human review of any automated decision that significantly affects them.
5. Third-Party Services
We share information only as necessary, with:
- Mobile money providers and payment partners, to collect payments and execute settlements
- Customers, who receive the session and payment records for their own network through the billing dashboard
- Service providers under contract for hosting, email, SMS, support tooling, error monitoring and accounting
- Professional advisers, under duties of confidentiality
- Authorities, where disclosure is required by law, court order or lawful regulatory demand
- A purchaser, in the event Click is sold or merged
Click does not sell personal information.
6. Data Security
6.1 We implement industry-standard security measures including SSL/TLS encryption, encryption of sensitive data at rest, hashed passwords, optional multi-factor authentication, role-based access controls, separation of Customer environments, access logging, signed firmware, and regular tested backups.
6.2 Despite these measures, no electronic transmission or storage is 100% secure.
6.3 Customers are responsible for keeping admin portal credentials confidential and must report suspected compromise immediately.
6.4 Where a security incident affects personal information, Click will notify affected Customers without undue delay, notify affected individuals directly where there is significant risk, and notify authorities where required.
7. Data Retention
| Record | Kept for |
|---|---|
| Customer account and licence records | Duration of the account, then 7 years |
| Financial, invoice and settlement records | 7 years |
| Hotspot session logs | 12 months, or as the operator instructs |
| Payment transaction records | 7 years |
| Portal data collected on an operator's instruction | As instructed, deleted on the operator's request |
| Support correspondence | 3 years after closure |
| Website analytics | Up to 24 months |
| Marketing contacts | Until opt-out, then a suppression record is retained |
Longer periods apply where required by law. At the end of a retention period, information is securely deleted or anonymised.
8. Cookies
8.1 The website uses cookies that are strictly necessary for it to function, and cookies that remember preferences.
8.2 Analytics cookies are used to understand which pages are useful. Non-essential cookies are set only with consent, which can be withdrawn at any time. Cookies can also be blocked or deleted through browser settings.
8.3 Captive portals operated by Customers may set their own cookies, governed by the operator's own policy.
9. Data Location
Click's systems are hosted with reputable cloud infrastructure providers. Where information is stored or processed outside Tanzania, Click ensures the provider maintains appropriate protection and is contractually bound to do so.
10. Your Rights
You have the right to:
- Access the personal data held about you
- Request correction of inaccurate or incomplete data
- Request deletion of data no longer needed (subject to legal requirements)
- Object to use of your data for marketing
- Withdraw consent where it was given
Requests should be sent to hello@click.co.tz. Click may verify identity before responding, and will respond within 30 days. The first request is free.
End users should contact the operator of the network they used before contacting Click.
11. Customer Obligations
11.1 Customers operating a hotspot are responsible for the personal information of people using their network.
11.2 Customers must display their own privacy notice on their captive portal, obtain any consent required before collecting information, configure retention and collection settings appropriately, and notify Click promptly of any data request or incident involving the platform.
12. Children
Click's products are sold to businesses and are not directed at children. Click does not knowingly collect information from anyone under 18 for its own purposes. Where minors connect to a Customer's network, obtaining parental consent where required is the operator's responsibility.
13. Changes to This Policy
Click may update this policy periodically. The current version is published at click.tz. Material changes will be communicated to Customers by email at least 14 days in advance.
Contact: hello@click.co.tz · +255 713 020 203 (phone and WhatsApp) · Dar es Salaam, Tanzania