quorlasocial/dashboard/server/legal/privacy.html

<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Privacy Policy · Quorla</title>
<link rel="stylesheet" href="/legal/legal.css">
</head>
<body>
<main>
  <p class="brand">Quorla</p>
  <h1>Privacy Policy</h1>
  <p class="meta">Effective 20 October 2026 · Operated by Metatroncube Software Solutions, Waterloo, Ontario, Canada</p>

  <p>Quorla is a social media management service used by marketing agencies to plan, approve and publish content for the businesses they work with, and to see how that content performs. This policy explains what information Quorla handles, why, and the choices you have.</p>

  <h2>Who this covers</h2>
  <ul>
    <li><b>Agency users</b>: people who sign in to Quorla (agency owners, managers, designers, editors).</li>
    <li><b>Connected account owners</b>: businesses and creators whose social media accounts an agency connects to Quorla with the owner's permission.</li>
  </ul>

  <h2>Information we collect</h2>
  <ul>
    <li><b>Account details</b>: name, work email and role of agency users. Passwords are stored only as one-way hashes.</li>
    <li><b>Content</b>: images, videos, captions, plans and reports that agency users upload or create.</li>
    <li><b>Connected platform data</b>: when an account is connected, Quorla receives access tokens and the data each platform allows for the permissions granted, such as the account's ID, name, username, profile picture, follower count, posts, post insights and comments.</li>
    <li><b>Technical logs</b>: sign-in times, actions such as approvals and publishing results, and errors, used to run and secure the service.</li>
  </ul>

  <h2>Data from connected platforms</h2>
  <p>Quorla only uses platform data to provide the features the account owner and their agency use, and only within each platform's terms:</p>
  <ul>
    <li><b>TikTok</b> (Login Kit, Content Posting API): basic profile information (open ID, display name, username, avatar) and follower counts to show which account is connected; and permission to upload and publish videos and photo posts that a person has reviewed and approved in Quorla. Quorla does not post anything without that approval and does not add watermarks or promotional branding to content.</li>
    <li><b>Meta</b> (Facebook, Instagram, Threads): Page and account details, insights, posts and comments for reporting and replies, and publishing of approved posts.</li>
    <li><b>Google</b> (YouTube, Google Business Profile): channel and business location details, and uploading or posting approved content. Quorla's use and transfer of information received from Google APIs adheres to the <a href="https://developers.google.com/terms/api-services-user-data-policy">Google API Services User Data Policy</a>, including the Limited Use requirements.</li>
    <li><b>LinkedIn, Pinterest and Reddit</b>: profile, Page or board details needed to post, and publishing of approved content.</li>
  </ul>
  <p>We never sell platform data, never use it for advertising, and never use it to train AI models.</p>

  <h2>How we use information</h2>
  <ul>
    <li>To run Quorla: sign-in, content library, scheduling, approvals, publishing and reports.</li>
    <li>To produce AI-assisted drafts (content plans, captions, reports). Relevant content and performance data are processed by our AI provider, Anthropic, under terms that do not allow it to train models on that data.</li>
    <li>To keep the service secure and to fix problems.</li>
  </ul>

  <h2>Sharing</h2>
  <p>Information is shared only with the agency that controls the account in Quorla, with the social platforms when you publish to them, with service providers that host or process data for us (hosting, AI processing, email), or when the law requires it. Each provider may use the data only to provide its service to us.</p>

  <h2>Security and storage</h2>
  <p>Quorla is served over HTTPS. Platform access tokens and app keys are encrypted at rest. Access is limited to the agency's signed-in users, and only admins can connect accounts or approve posts.</p>

  <h2>Retention and deletion</h2>
  <ul>
    <li>Disconnecting an account in Quorla deletes its stored access tokens immediately. You can also remove Quorla's access in the platform's own settings (for example TikTok: Settings and privacy → Security → Manage app permissions).</li>
    <li>Content and reports are kept while the agency uses Quorla, then deleted within 90 days after the agency's account closes, unless the law requires us to keep them longer.</li>
    <li>To ask for a copy or deletion of your information, email us at the address below. We respond within 30 days.</li>
  </ul>

  <h2>Your rights</h2>
  <p>Depending on where you live (for example under Canada's PIPEDA or the EU/UK GDPR), you may have the right to access, correct, delete or move your information, and to object to some processing. Contact us to use these rights.</p>

  <h2>Children</h2>
  <p>Quorla is a business tool and is not intended for anyone under 18.</p>

  <h2>Changes</h2>
  <p>We will post changes on this page and update the date at the top. For significant changes we will notify agency admins.</p>

  <h2>Contact</h2>
  <p>Metatroncube Software Solutions, Waterloo, Ontario, Canada<br>Email: <a href="mailto:support@quorlasocial.com">support@quorlasocial.com</a></p>
  <p class="links"><a href="/terms">Terms of Service</a></p>
</main>
</body>
</html>