Privacy Policy

The short version

Quillo stores the minimum needed to work: your email, your brand voice profile, and the drafts you generate. Your content is never used to train AI models, never sold, and never shared for marketing. You can delete everything yourself, instantly, in Settings.

What we collect

• Account: email address and a hashed password (handled by Supabase Auth).
• Brand voice: the industry, audience, tone settings, rules and writing samples you provide.
• Drafts: the topics you enter and the posts Quillo generates (your last 50, so History works).
• Connected social accounts (optional): if you connect a Facebook Page or Instagram account, we store its name, its Meta ID, and the access token Meta issues — encrypted at rest (AES-256), never readable by your browser, and used only to publish the posts you explicitly approve. We also keep a log of what you published through Quillo. We never read your feed, followers or messages, and we never post without your approval.
• Payments: if you go Pro, PayFast processes your payment. We never see or store card details — we keep only the transaction reference, status and amount.

How generation works

When you generate a post, your voice profile and topic are sent to an AI model provider (via OpenRouter) to write the text, over an encrypted connection. Providers under our configuration do not use this content to train their models. We don't send your email or identity with generation requests.

Where it lives

Data is stored in Supabase (PostgreSQL, EU region) with row-level security — your rows are readable by your account only. Transactional email (welcome, receipts) is sent via Resend.

Your POPIA rights

• Access & correction: everything we hold is visible and editable inside the app (Voices, History, Settings).
• Deletion: Settings → “Delete my account” removes your profile, voices, drafts, connected social accounts (including all Meta tokens), publishing history and sign-in immediately. Payment records are retained for financial-record compliance but de-linked from your identity. Connected accounts can also be removed individually — see Data Deletion.
• Objection & complaints: contact us at the address below, or the Information Regulator (inforegulator.org.za).

Contact

Quillo is operated by PrestigeWeb (South Africa). Questions or requests: philippotgieter2001@gmail.com.