ClickUp is a work management platform, reviewed for ClickUp Brain privacy, AI provider retention limits, sharing, retention, and workspace controls.
75
Good
75
Good
ClickUp is relatively strong on AI limits, but ClickUp Brain, integrations, and workspace exposure still need deliberate control.
ClickUp is strongest where admins can govern AI permissions, roles, exports, and connected tools from one workspace surface.
Its weakest area is the surrounding tracking and integration layer, especially once task history and workspace context move into other services.
90
Excellent
ClickUp says ClickUp AI is not trained on workspace data.
ClickUp says AI partners are prohibited from using workspace data for training their models.
ClickUp says only the necessary information is sent when AI features need to share data with partners.
75
Good
55
Weak
75
Good
80
Good
1. AI Use
ClickUp says ClickUp AI is not trained on workspace data.
2. AI Use
ClickUp says AI partners are prohibited from using workspace data for training their models.
3. AI Use
ClickUp says only the necessary information is sent when AI features need to share data with partners.
4. AI Use
ClickUp permissions extend to AI features so Brain cannot reveal items a user cannot already access.
5. AI Use
ClickUp Brain can still process workspace context across tasks, docs, chats, and connected sources.
Founded
Unknown
Founder
Unknown
Parent Company
ClickUp
Lifecycle
Active
Category
Productivity & Collaboration
CEO
Unknown
Security Team
In house
Date Added
04-22-2026
Once you delete a chat, you cannot recover it. Deleting a chat removes it both from your visible chat history and the system after the retention window.
ClickUp permissions extend to AI features so Brain cannot reveal items a user cannot already access.
ClickUp Brain can still process workspace context across tasks, docs, chats, and connected sources.
75
Good
ClickUp says AI partners are contractually prevented from training on workspace data.
ClickUp says it does not sell personal data.
Google API data shared through ClickUp is said to follow Google's limited-use requirements.
ClickUp says information will not be disclosed outside ClickUp except as described in its privacy policy, cookie policy, DPA, or as authorized by the user.
AI features may still use multiple external model providers and connected apps.
Affiliates, outside contractors, legal disclosures, and business transfers still widen the disclosure surface.
55
Weak
ClickUp uses cookies and third-party advertising and analytics partners to recognize users across services and devices.
ClickUp collects product usage, website analytics, and other interaction data for service operation and improvement.
ClickUp says it does not sell personal data.
Users can opt out of direct marketing communications and some profiling-related processing by contacting ClickUp.
Workspace roles and permissions constrain what ClickUp Brain can access inside the product.
75
Good
ClickUp says LLM partners have zero data-retention agreements for workspace data.
ClickUp says it retains personal data only as long as reasonably required to provide the service unless law permits or requires longer retention.
Customers retain ownership of their data even when it is processed through an LLM.
ClickUp documents privacy-rights and some opt-out paths for handling personal data.
Meeting notes, tasks, automations, and other workspace records still follow workspace retention and admin practices.
Legal requirements and broader service operation can still extend how long some data is kept.
80
Good
Admins can manage AI access and workspace permissions.
Permissions extend to ClickUp Brain so users cannot pull private items they cannot already access.
ClickUp documents privacy-rights requests and opt-out paths for some marketing and profiling uses.
Connected-app choices and workspace roles still let teams limit some exposure before AI features are widely enabled.
Controls are workspace- and admin-led, and feature availability varies by plan and role.
Some privacy actions still require contacting ClickUp rather than being fully self-serve in-product.
