Privacy Policy

Data Fiduciary: Quillmo, New Delhi, India.

This policy explains what personal data we collect, why, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data We Collect

Account data

Name (if provided), email address, and password (stored hashed by our auth provider).

Usage data

The topics or URLs you submit, content we generate for you, and generation counts.

Payment data

Processed by our payment provider. We store a customer and subscription identifier only — not your full card details.

Technical data

IP address, device and browser information, and standard server logs.

2. Why We Use It

• To provide and operate the Service.
• To process payments and manage subscriptions.
• To send transactional emails (receipts, account notices).
• To prevent abuse and enforce limits (rate limiting).
• To comply with legal obligations.

3. Legal Basis / Consent

We process your personal data on the basis of your consent (given at signup) and for the legitimate purposes of providing a service you requested. You may withdraw consent at any time by emailing support@quillmo.com or deleting your account. Withdrawing consent will not affect processing already carried out and may result in loss of access to the Service.

4. Third Parties We Share Data With

We share the minimum data necessary with: Supabase (authentication and database storage, India-accessible region), Google Gemini API (AI content generation — receives your input text), Lemon Squeezy (payment processing as merchant of record), Resend (transactional email delivery), Upstash (Redis-based rate limiting, stores user ID and request counts only), Vercel (application hosting and aggregated performance analytics; Vercel Analytics does not receive personal data), and PostHog (product analytics — page views, feature usage events, and anonymised session data; collected only after you grant analytics consent; data stored in the United States — PostHog Cloud, US region).

We do not sell your personal data. We do not use your data to train our own AI models.

5. Data Retention

We keep your data for as long as your account is active and as needed to provide the Service. On account deletion, we delete or anonymise your personal data within 30 days, except where retention is required by law (e.g., tax and invoice records).

6. Your Rights (DPDP Act)

You have the right to access a summary of your personal data, correct or update inaccurate data, request erasure of your data, withdraw consent, and seek grievance redressal. To exercise these rights, contact support@quillmo.com. We will respond within the timeframe required by applicable law.

7. Data Security

We use reasonable technical and organisational measures including encryption in transit (HTTPS), access controls, and hashed passwords. No method is 100% secure.

8. Data Breach

In the event of a personal-data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act and its Rules.

9. Children

The Service is not directed to anyone under 18 and we do not knowingly collect their data.

10. Changes

We will post changes here and notify you of material changes by email.

11. AI Processing Disclosure

When you generate content, your input text is sent to Google’s Gemini API to produce the output. This means Google processes the text you submit as part of delivering our service. We do not use your content to train Quillmo’s own models. For Google’s current data-use position, see ai.google.dev.

12. Third Parties We Work With

We share the minimum data necessary with: Supabase (authentication and database), Google Gemini API (AI generation), Lemon Squeezy (payments), Resend (email), Upstash (rate limiting), Vercel (hosting), and PostHog (product analytics — page views, feature usage events, and anonymised session data; consent-gated, only fires after analytics consent is granted; data stored in the United States — PostHog Cloud, US region). We do not sell your data or use it to train our AI models.

13. International Data Transfers

PostHog stores analytics data in the United States. This data is only collected with your explicit consent.

14. Contact / Data Queries

Grievance Officer: Neetu Verma
support@quillmo.com · Quillmo · New Delhi, India