Privacy policy

Quickpost ("we", "us", "our") is a social-media publishing service operated by ACKPlus Solutions Private Limited, with its registered office at R.K Iconic, B-216, 150 Feet Ring Road, near Ayodhya Circle, Sheetal Park, Rajkot, Gujarat 360006, India. The website is https://quickpost.ackbiz.com. This Privacy Policy explains what personal information we collect when you use Quickpost (website, mobile app, and API), why, who we share it with, how long we keep it, and your rights. For the purposes of India's Digital Personal Data Protection Act, 2023, ACKPlus Solutions Private Limited is the Data Fiduciary.

• Account information — your email address and name. For password accounts we store only a one-way bcrypt hash of your password, never the password itself. If you sign in with Google, we receive your email address, name, and Google account identifier from Google.
• Connected social accounts — when you connect a social account (for example Facebook Pages, Instagram, Threads, X, LinkedIn, YouTube, Pinterest, or Bluesky), we store the access tokens the platform issues to us, plus the account name, handle, profile picture, and platform account ID it returns. Tokens are encrypted at rest with AES-256-GCM and are never sent to your browser or app.
• Content you create — captions, per-platform text, schedules, and the images or videos you upload.
• AI writing (optional) — if your workspace turns on AI writing, we process the text you ask it to work on: your caption, the short description you type, and your brand's voice settings (about, audience, tone, words to use or avoid, default hashtags). We keep a usage record for each request (date, workspace, which AI provider handled it, and how many credits it used). We do not keep the text you sent or the suggestions you got back, unless you save a suggestion into a post.
• Publishing records — for each post, which platforms it was sent to, whether each succeeded, the link to the published post, and any error the platform returned.
• Billing information — if you buy a paid plan, payments are processed by Razorpay. We do not receive or store your card or bank details; we store your plan, subscription and payment identifiers, amounts, and payment status.
• Technical and security data — server logs (IP address, browser or app details, requested pages, time) and records of security-relevant actions such as account deletion and administrator actions.
• Mobile app data — if you use the Quickpost mobile app, Google Firebase collects app usage events, crash reports, and a device token used to deliver notifications.

• To provide the service: sign you in, store your posts, publish them to the accounts you choose at the time you choose, and show you the result.
• To process payments and manage your plan.
• To keep Quickpost secure: detect and investigate abuse, fraud, and unauthorised access.
• To fix problems and improve the product, using crash reports and aggregated usage information.
• To write, rewrite or shorten captions and suggest hashtags when you use AI writing. Suggestions only appear in your editor; nothing is posted until you choose it and press Schedule or Publish.
• To comply with law and respond to lawful requests.

We do not sell your personal information, use it for advertising, or build advertising profiles. We use data from connected social platforms only to provide the features you use in Quickpost.

• The social platforms you publish to — when you publish, the post content and media are sent to that platform through its official API. That platform's own privacy policy then applies to the content.
• Razorpay — payment processing for paid plans.
• Google — Google Sign-In (if you use it), and Firebase Analytics, Crashlytics, and Cloud Messaging in the mobile app.
• AI providers: Anthropic and OpenAI — only when you use AI writing in a workspace where an Owner or Manager has turned it on. The text described above is sent to Anthropic (Claude), our main AI provider. If Anthropic is unavailable, the same request may be sent to OpenAI (ChatGPT) instead. Both process it under their API terms, which do not allow them to use it to train their models. They may keep it for a limited time for safety and abuse monitoring. We do not send them your password, your connected social accounts' tokens, your payment details, or your uploaded images and videos.
• Authorities — when required by law, court order, or to protect the rights and safety of users or the public.
• A successor business — if Quickpost is merged or sold, subject to this policy.

Quickpost's servers, database, and file storage are operated by us in India.

Quickpost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. If you connect a YouTube channel, we read your channel name and picture and upload the videos you choose to publish; we use this data only to provide that publishing feature, do not use it for advertising, and do not transfer it except as needed to provide the feature, for security, or to comply with law.

Quickpost uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Quickpost's access at any time from your Google account permissions page.

Images and videos you upload are stored on our servers and are reachable by anyone who has their link, because the social platforms fetch them from that link when your post is published. The links are long and random and are not listed publicly, but do not upload anything you would not want to publish.

The website uses one first-party cookie, qp_token, to keep you signed in. It is removed when you sign out. We do not use advertising or third-party tracking cookies. If you use Google Sign-In or pay through Razorpay, those services may set their own cookies under their own policies. The mobile app keeps your sign-in in the device's secure storage (iOS Keychain / Android Keystore).

• Account information, posts, connected accounts, and tokens are kept while your account exists.
• When you delete your account, your account record, posts, publishing records, connected accounts, and their tokens are deleted from our database immediately. Uploaded media files are not yet removed automatically; email contact@ackplus.com and we will delete them within 30 days. See Data deletion.
• Deleting your account does not revoke Quickpost's access inside each social platform; the platform tokens stop being usable once we delete them, and you can also remove Quickpost in each platform's settings.
• Server logs are kept on a rolling, size-limited basis and are overwritten automatically. Security records of account deletion and administrator actions are kept for as long as needed for security and legal purposes, without your account link.
• Payment records for paid plans are kept for as long as Indian tax and accounting law requires.
• AI usage records are kept for 24 months for billing and abuse prevention. Text sent for AI writing is not stored by us after the suggestions are shown.

You can:

• Access and correct your information — see and edit your profile and connected accounts in the dashboard, or email us.
• Get a copy of your data — email contact@ackplus.com and we will send it within 30 days.
• Delete your account and data — from Account settings in the app, or as described on the Data deletion page.
• Withdraw consent — disconnect any social account, or delete your account, at any time. Withdrawal does not affect processing already done.
• Raise a grievance — contact our Grievance Officer (section 14). If you are in India and are not satisfied with our response, you may complain to the Data Protection Board of India.

If you live in the EU/UK or California you may have additional rights under GDPR or CCPA; email us and we will honour valid requests.

We use HTTPS for all connections, store passwords only as bcrypt hashes, and encrypt social-platform tokens with AES-256-GCM. Access to production systems is limited to authorised staff. No system is perfectly secure; if you think your account has been compromised, change your password and email contact@ackplus.com. We will notify affected users and authorities of a personal-data breach as required by law.

Quickpost is a business tool for people aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it.

Quickpost is operated from India and our servers are in India. The social platforms you publish to, Razorpay, Google, and, when you use AI writing, Anthropic and OpenAI may process data in other countries, including the United States, under their own policies.

We may update this policy. For material changes we will notify registered users by email or in the app before the change takes effect. The "Last updated" date above shows the current version.

Privacy questions, data requests, and grievances: Grievance Officer, ACKPlus Solutions Private Limited, R.K Iconic, B-216, 150 Feet Ring Road, near Ayodhya Circle, Sheetal Park, Rajkot, Gujarat 360006, India — contact@ackplus.com. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.