Privacy Policy

Quickpost ("we", "us", "our") is a cross-platform social-media publishing service operated by ACKPlus Private Limited, with its registered office at R.K Iconic, B-216, 150 Feet Ring Road, near Ayodhya Circle, Sheetal Park, Rajkot, Gujarat 360006, India. The website lives at https://quickpost.ackbiz.com. This Privacy Policy explains what personal information we collect when you use Quickpost, why we collect it, who we share it with, and the rights you have over it.

We collect the following categories of information when you create an account and use Quickpost:

• Account information — email address, display name, and (for password-based accounts) a one-way bcrypt hash of your password. We never store your password in plaintext.
• Authentication tokens — when you connect a social account (X, LinkedIn, Facebook, Instagram, Threads, TikTok, YouTube, Pinterest, Bluesky), we store the OAuth access and refresh tokens issued by that platform. Tokens are encrypted at rest with AES-256-GCM using a server-side encryption key and are never returned to client browsers.
• Content you create — captions, scheduled posts, per-platform overrides, and media files you upload. Media is stored in S3-compatible object storage; the public URL is shared with the destination social platforms at publish time so they can fetch and render your post.
• Connected-account metadata — your display name, handle, avatar, and platform user-id on each connected social network, as returned by that network when you authorise the connection.
• Delivery records — for each post we publish on your behalf, we record which platforms succeeded, the published-post URL, and any failure reason returned by the platform.
• Operational logs — IP address, user-agent, and timestamps for sign-in, sign-up, and administrative actions. Kept for security investigation and abuse response.

• To operate the service: authenticate you, store your posts, publish them on your behalf to the platforms you've connected, and show you delivery status.
• To communicate with you: account-related emails such as password resets, security notifications, and (where applicable) billing notices.
• To improve Quickpost: aggregate, de-identified usage metrics (e.g. number of active accounts, average posts per user). We do not sell your data or build advertising profiles.
• To comply with legal obligations and respond to lawful requests.

Quickpost is, by design, a router from you to the social platforms you choose. The minimum data needed to publish your content is shared with the destinations you select:

• Connected social platforms— when you tell Quickpost to publish a post to X / LinkedIn / Meta / TikTok / YouTube / Pinterest / Bluesky, the post content (text, media URLs, schedule) is sent to that platform via its public API. Each platform's own privacy policy then governs the data on their side.
• Sub-processors — we use third-party infrastructure to run Quickpost: object storage for media (S3-compatible), email delivery for transactional emails, and analytics for crash reporting and uptime monitoring. These vendors process data only on our instructions.
• Google Sign-In (optional)— if you sign in with Google, Google's verified identity token tells us your email and display name. No other Google data is read.

We do not sell your personal information. We do not share it with advertisers.

We use a single first-party cookie, qp_token, to store your authentication JWT after sign-in. The cookie is SameSite=Laxand is cleared when you sign out or delete your account. We do not use third-party tracking cookies. The mobile app stores the same token in the platform's secure storage (iOS Keychain / Android Keystore).

• Account, posts, and connected-account records are kept for as long as your account is active.
• When you delete your account at /dashboard/account/delete, your user record and all associated posts, connected accounts, and media references are hard-deleted from our database immediately.
• Encrypted OAuth tokens for already-connected platforms are cleared at the same time. We do not actively revoke tokens at the platform side — those expire naturally according to each platform's policy. You may revoke them manually in each platform's app settings.
• Administrative audit-log entries that reference the deleted user are kept (with the user-ID set to null) for security and compliance purposes for up to two years.
• Operational logs (IP, user-agent) are retained for 90 days then purged.

Depending on where you live (GDPR/EU, DPDP/India, CCPA/ California, etc.), you have one or more of the following rights:

• Access — view the data we have about you. You can see your profile + connected accounts + posts in the dashboard directly.
• Portability — request a JSON export of your data. Email contact@ackplus.comand we'll send it within 30 days.
• Correction — update your name + email in Account settings. Email contact@ackplus.com for anything else.
• Deletion — delete your account yourself from /dashboard/account/delete, or email contact@ackplus.com.
• Objection / restriction — contact contact@ackplus.comand we'll honour valid requests.

We protect your information with industry-standard safeguards: HTTPS-only connections, bcrypt password hashing, AES-256-GCM encryption of platform OAuth tokens, principle-of-least- privilege database access, and audit logging on all administrative actions. No system is perfectly secure; if you suspect your account has been compromised, change your password and email contact@ackplus.com immediately.

Quickpost is not directed to children under 13 (or the equivalent minimum digital-consent age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

Quickpost is operated from Rajkot, Gujarat, India. By using the service you consent to your information being transferred to and processed in India, as well as in the regions where our sub-processors are located (typically the US and EU). Where required, we use standard contractual clauses or equivalent safeguards.

We may update this Privacy Policy from time to time. Material changes will be announced via the in-product banner and (for registered users) by email. The "Last updated" date at the top of this page always reflects the current version.

Privacy questions, GDPR/DPDP/CCPA requests, security reports: contact@ackplus.com.