Privacy Policy — Click2Call

Last updated: March 2026

1. Who we are

Click2Call ("we", "our", "the Service") provides a browser extension that detects phone numbers on web pages and enables one-click calling through a linked mobile device. Our service is available at click2call.cc and our API endpoint is https://api.click2call.cc.

2. How the extension works

The extension operates in two phases:

Account linking (one-time): The user enters their corporate email address in the extension popup. The extension sends this email to https://api.click2call.cc/agent/extension-token to verify authorization. If the email belongs to an active Click2Call subscription, the extension receives and locally stores a session token and tenant information.
Call triggering (on demand): Once linked, the extension detects phone numbers on any webpage and displays call and WhatsApp buttons next to them. When the user clicks the Call button, the phone number and their agent email are sent via HTTPS POST to https://api.click2call.cc/make-call, which routes the call to the user's linked Android device.

3. What data is collected and stored

All data is stored locally on the user's device using chrome.storage.local. The following values are saved after successful account linking:

agentEmail — the corporate email entered by the user.
tenantId / tenantName — the organization identifier returned by the server upon authentication.
sessionToken — an authentication token issued by the Click2Call server to authorize call requests.
workerUrl — always set to https://api.click2call.cc (fixed value, not user-configurable).
displayMode — user preference for button display style (fixed inline or hover panel). Stored locally only.
isValidated — a boolean flag indicating whether the account is linked.

We do not collect: browsing history, page content, location data, financial information, or any data for advertising or analytics purposes.

Phone numbers are processed entirely client-side within the browser. A number is transmitted to our server only when the user explicitly clicks the Call button.

4. What data is transmitted and where

Two HTTPS requests are made to api.click2call.cc:

During account linking: the user's email address is sent to /agent/extension-token to verify subscription status.
When Call is clicked: the detected phone number and the user's agent email are sent to /make-call to trigger the outbound call on the linked device.

No data is transmitted to any third-party analytics, advertising, or tracking service. No page content or browsing history is ever transmitted.

5. Browser permissions used

storage — saves account credentials and display preferences locally on the user's device using chrome.storage.local.
activeTab — allows the extension to interact with the currently active browser tab.
tabs — used exclusively to reload the current active tab after the user changes display mode (fixed/hover) or links/unlinks their account. The extension does not read tab URLs, titles, history, or any tab content.
Access to all websites (<all_urls>) — required because phone numbers can appear on any website the user visits. The extension scans page content client-side to detect and annotate phone numbers. No page content is transmitted to any server.

6. Data retention

All locally stored data is removed when the user clicks "Desvincular Dispositivo" (unlink) in the extension popup, which calls chrome.storage.local.clear(). Data is also removed when the extension is uninstalled or when the user clears browser data. We do not retain user data on our servers beyond what is required to process each individual call request.

7. Data sharing

We do not sell, rent, or share personal data with any third party. The only external transmission is between the user's browser and api.click2call.cc, which is the Click2Call service backend operated by us.

8. Payments

This extension does not process any payments. No financial data passes through the extension at any point. Click2Call subscriptions are managed separately at click2call.cc.

9. Children's privacy

Click2Call is a business productivity tool intended for adult professionals. We do not knowingly collect data from individuals under 13 years of age.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the extension after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, contact us at: [email protected]

For users in Mexico: A full privacy notice in Spanish, compliant with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and including your ARCO rights, is available at click2call.cc.