Privacy Policy

Last updated: December 10, 2025

1. Information We Collect

We collect information you provide directly to us when you:

  • Create an account (email, name, password)
  • Use our API services (content submitted for analysis)
  • Contact customer support
  • Subscribe to our newsletter or marketing communications

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process API requests and analyze content for brand compliance
  • Send you technical notices, updates, and support messages
  • Monitor and analyze usage patterns to improve our service
  • Detect and prevent fraud, abuse, and security incidents

3. Data Security

We implement industry-standard security measures to protect your data:

  • All data is encrypted in transit using TLS 1.3
  • API keys are hashed using SHA-256
  • Database encryption at rest
  • Regular security audits and penetration testing

4. Content Processing

Content you submit to our API for analysis is:

  • Processed temporarily to perform brand compliance checks
  • Not stored permanently unless required for service delivery
  • Not used to train our models without explicit consent
  • Not shared with third parties

5. Third-Party Services

We use the following third-party services:

  • Cloudflare: Hosting, CDN, and security (Workers, D1, R2, Vectorize)
  • Stripe: Payment processing
  • OAuth Providers: GitHub and Google for authentication

These services have their own privacy policies governing their use of your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You can request deletion of your data at any time by contacting us at privacy@quillstone.dev.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data
  • Opt-out of marketing communications

8. GDPR Compliance

For users in the European Union, we comply with GDPR requirements including:

  • Lawful basis for processing (consent, contract, legitimate interest)
  • Data minimization and purpose limitation
  • Right to be forgotten
  • Data portability

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@quillstone.dev