Privacy policy

Last updated 28 October 2026

Quiccreach helps creators publish one video to many platforms. This policy explains what we collect to do that, why, and what you can do about it. Quiccreach is an enterprise registered in India as an MSME (Udyam). Quiccreach is responsible for your data under this policy. Questions go to privacy@quiccreach.com.

What we collect

Your account

Your name, email address, timezone and optional handle. Your password is never stored: we keep only a salted Argon2 hash, which cannot be turned back into the password.

What you upload and write

The videos you upload, the captions and schedules you set, and details we read from each video to prepare it: its length, dimensions and format. We also generate a still image from each video to show you as a preview.

Accounts you connect

When you connect a platform, we receive the identifier and display name of that account, the permissions you approved, and the access credentials needed to publish for you. Those credentials are encrypted at rest with AES-256-GCM, are never shown back to you or anyone else, and are erased when you disconnect the account.

Security records

We keep a log of security-relevant actions, such as signing in, connecting an account or deleting a video, including the IP address they came from. This helps us detect misuse and investigate problems.

Ideas

If you turn on Ideas, what you tell us you make, the space and country you choose, and whether you want the morning email. If you allow it, we also read your recent posts back from the accounts you’ve connected that let us (Bluesky, Instagram and YouTube): their words, links and dates, and the count each platform shows for them, such as likes or views. We keep the ideas we write for you, and what each was built from.

Your page

If you make a page, what you put on it: a line about you, what people can book and its price. We show where you post, taken from the accounts you’ve connected. When people sign up or ask to book you there, we keep what they send (see Creator pages), and when you mark a booking as paid, the amount you record.

Waitlist

If you join the waitlist, we keep your email address and, if the link you followed included one, the name of the page that referred you.

Cookies

We use only the cookies needed to keep you signed in safely:

qr_access: proves you are signed in. Expires after 15 minutes.
qr_refresh: renews your sign-in without asking for your password. Expires after 30 days.
qr_csrf: stops other websites from acting as you.

We do not currently use analytics or advertising cookies, or any third-party trackers. If that changes, we will update this policy before we start.

How we use it

To run the service: storing your videos, preparing them and publishing them where you choose.
If you turn on Ideas, to write three short video ideas for you each morning.
If you make a page, to show it, to pass sign-ups and booking requests to you, and to show which posts brought them.
To keep it secure: preventing abuse and protecting your account.
To tell you about your account, and about launch if you joined the waitlist.

We do not sell your data, and we do not use your content to advertise to anyone.

Who we share it with

The platforms you choose. When you publish, we send your video and caption to the accounts you selected, and to no others. Where you post it yourself, as on Reddit, we send nothing.
Service providers who host the application, its database and stored files, and who deliver our emails (invites, password resets, booking requests and, if you ask for it, the morning ideas), acting only on our instructions.
Google, for Ideas. To write your ideas, we send Google’s Gemini API what you make, the space and country you chose, and, if you allowed it, your recent posts’ words and counts. Never your name, email address or account details. We use Gemini’s paid service, under which Google doesn’t use what we send to improve its products, and we ask it not to keep the exchange.
Authorities, when the law requires it.

YouTube and Google

If you connect a YouTube channel, Quiccreach uses YouTube API Services, and you also agree to the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

When you connect a channel, Google gives us its ID, name, handle and picture, and permission to upload videos to it and to read its videos. We use these to upload the videos you schedule, at the time you choose, with the title, description and privacy you set; to show you which channel is connected; and, if you turn on Ideas and allow it, to read your recent videos’ titles, links, dates and view counts, as YouTube reports them, to suggest ideas. We keep the ID and link of each video we upload, so you can open it from your calendar.

We read your channel’s details again at least every 30 days, and drop the link to any video that’s no longer on YouTube. When you disconnect the channel, we revoke our access and delete its details, its videos’ IDs and links, and what Ideas kept from your videos, straight away. If you remove our access in Google’s settings instead, we delete them within 30 days. To have them deleted at any other time, email privacy@quiccreach.com and we’ll do it within 7 days.

You can remove Quiccreach’s access at any time from your Google security settings.

Instagram and Facebook

You connect Instagram or Facebook by signing in with Facebook, where you choose what Quiccreach may use. We work through Meta’s official Instagram API (with Facebook Login) and Pages API, and nothing else, under the Meta Platform Terms and the Meta Developer Policies.

For Instagram we receive your professional account’s identifier and username, and look up the Facebook Page it’s linked to in order to find it. For Facebook we receive the identifier and name of the Page you post to. We use these to publish the videos and captions you choose, when you choose, and to show you which account is connected. If you turn on Ideas and allow it, we also read your recent Instagram posts: their captions, links, dates, and like or comment counts (see Ideas).

We never post anything you didn’t ask us to, never read your messages, never use what we receive from Meta for advertising, and never sell it. You can remove Quiccreach’s access at any time in your Facebook settings, under Business integrations (or Apps and websites). Disconnecting an account in Quiccreach asks Meta to take back the permissions it used, except any your other connected Meta account still needs. To delete what we hold, see data deletion.

Meta’s handling of your data on Instagram and Facebook is described in the Meta Privacy Policy.

If you connect LinkedIn, you sign in on LinkedIn’s own page. We receive your LinkedIn member ID, name and profile picture, and permission to post for you. We use them to post the videos you schedule to your own profile, at the time you choose, with your caption, and to show you which account is connected. We keep the link to each post we make, so you can open it from your calendar. We don’t read your posts, your connections or your messages. We use LinkedIn’s API under the LinkedIn API Terms of Use.

LinkedIn’s sign-in lasts about 60 days; after that we ask you to connect again. When you disconnect LinkedIn, we delete our access. You can also remove Quiccreach in LinkedIn’s settings, under Data privacy, then Permitted services. LinkedIn’s handling of your data is described in the LinkedIn Privacy Policy.

Quiccreach doesn’t connect to your Reddit account. We don’t use Reddit’s API, never see your Reddit login, and receive nothing from Reddit.

If you add Reddit, we keep what you write for each Reddit post (its title and words) and the subreddit you choose. At the time you pick, we give you a way to post it on Reddit yourself. If you paste the link to your post, we keep it to show you where it went. To keep your posting within Reddit’s rules on spam (see Quiccreach and Reddit), we check each post against your other posts in Quiccreach (what they contain, which subreddits they go to, and when), and never against anything on Reddit.

If a subreddit’s moderators ask us to leave it out, we keep the subreddit’s name and how the request reached us (the Reddit account or email address it came from) for as long as it’s left out, to show we honoured it. The request itself stays with our other correspondence.

We would use Reddit’s API only with Reddit’s approval and under its Data API Terms and Developer Terms, and we’ll update this section before we do, saying exactly what we would receive and why. Whatever we receive from Reddit, now or later, we won’t sell or license it; we won’t share it except with the service providers who run Quiccreach for us, acting on our instructions, or where the law requires; we won’t use it to train AI models or for advertising, or to infer sensitive things about you or identify you elsewhere; and we’ll delete it once it’s no longer needed, or when you disconnect Reddit or delete your account.

What happens to a post once it’s on Reddit is up to Reddit: what you post there is public, and Reddit handles it under the Reddit Privacy Policy and the Reddit User Agreement.

Ideas

Ideas are off until you tell us what you make. Each morning we write three short scripts for it, from what worked in your recent posts (if you allowed us to read them) and from what’s most popular on YouTube in your country, read through YouTube’s official API. Nothing is ever posted for you. You can stop reading your posts, change what you make, or turn Ideas off, in Settings at any time, and stop the morning email from any of them in one click.

Creator pages

A creator’s page on Quiccreach (quiccreach.com/their-name) belongs to that creator. If you sign up or ask to book there, we collect what you type (your email address, your name if you give it, your message, and which of their posts brought you, if you say) and keep it for that creator, who sees it and decides how to use it. If you ask for their updates, we record when you agreed. We never email you ourselves, never share what you send with anyone but that creator, and never use it for anything of our own.

These pages set no cookies. We count how many times a page is opened, by day and by where the visit came from: the creator’s post link you followed, or which platform the link was on (from your browser’s referrer, reduced to the platform’s name). That count is all we keep: not your address, not the page you came from, and nothing that recognises you next time. To stop a form being abused, we use your IP address briefly to limit how often it can be sent, and don’t store it. To stop hearing from a creator, or to have what you sent deleted, ask them: they can remove you in Quiccreach. If they don’t, email privacy@quiccreach.com and we will.

How long we keep it

Your account and content: until you delete your account.
Ideas, and what each was built from: 30 days. Trending charts from YouTube: 7 days at most.
Data we receive from platforms: only as long as we need it, and never longer than that platform’s own rules allow.
What visitors send through a creator’s page: until that creator removes it or deletes their account.
Waitlist addresses: until you ask us to remove yours.
After you delete your account, we keep a minimal record that the account existed and what actions it took, with IP addresses and content removed.

Deleting your data

You can delete your account at any time from Settings. That removes your account, your content and your connected accounts, revokes our access to those platforms, and deletes your stored videos. See data deletion for every way to do it.

Your rights

Depending on where you live, including India, the European Union, the United Kingdom and California, you may have the right to access, correct, delete or take a copy of your data, to withdraw consent, to nominate someone to use these rights if you die or can’t, and to complain to a data protection authority (in India, the Data Protection Board of India). Email privacy@quiccreach.com from the address on your account and we will respond.

Where your data is processed

Our server and database are in India. Some of our service providers, such as those that deliver our emails, store our backups and, if you use Ideas, Google, may process data outside India or outside your country. Where the law requires it, we use the safeguards it sets out for those transfers.

Keeping it secure

Traffic is encrypted in transit. Platform credentials are encrypted at rest, passwords are only stored as hashes, and each creator’s data is isolated from every other creator’s at the database level. To report a security issue, email security@quiccreach.com.

Age

Quiccreach is not intended for anyone under 18.

Changes

When this policy changes, we will update the date above, and tell you directly if the change affects how we use your data.