Privacy Policy
Last updated November 13, 2026
Quilco (quilco.app) is run by Tezi LLC ("we", "us"). This policy explains what we collect when you use Quilco, how we use it, and the choices you have.
What we collect
- Account details: your name, email, phone and time zone.
- Business details: what you tell us about your business, such as its name, services, prices, location, hours and competitors.
- Content you upload: photos, videos, captions, website text and reviews you add.
- Leads: contact details and messages from your customers that you add or that come in through accounts you connect.
- Connected accounts: when you connect Facebook, Instagram or a Google service (Google Business Profile, Search Console, Google Analytics, YouTube or Google Ads), we receive the access you grant and the data needed to post, run ads, show results and collect leads for you. The Google data we use, and how, is listed in full under "Google user data" below.
- Payments: handled by Stripe. We never see or store your full card number.
- Usage: basic logs such as pages visited, errors and the date and time of requests, used to keep Quilco working and secure.
How we use it
- To provide Quilco: create and publish your ads, posts and website, check your Google SEO, and organize your leads.
- To run AI features. Quilco uses Anthropic's Claude to write and analyze content. The information needed for each task is sent to Anthropic to process it. Anthropic does not use it to train its models.
- To bill you, provide support, and send account and service messages.
- To keep Quilco secure and prevent abuse.
We do not sell your personal information or your customers' information, and we do not use it for advertising other businesses.
Google user data
This section explains exactly how Quilco accesses, uses, stores and shares data from your Google account ("Google user data"). Quilco only asks for Google access when you choose to connect a Google service, and each service asks only for the permissions listed here. You see and approve them on Google's own consent screen.
What we access, and why
- Your Google account's name, email address and profile picture (sign-in permissions
openid,email,profile): to show which Google account is connected. - Google Business Profile (
business.manage): we read your business locations (name, address, phone, hours, categories, website and description), your customer reviews and your profile's performance numbers (views, searches, calls, direction requests and website clicks). We use them to show your results in Quilco, check your listing for SEO, draft replies to reviews and publish Google updates (posts). Quilco only publishes a review reply or a post when you write it or approve it, or when you turn on automatic replies or posts for your profile in Quilco. - Google Search Console (
webmasters) and Site Verification (siteverification): we read the list of your sites and their search performance (the searches people used to find you, clicks, impressions, average position and top pages) to show your SEO results and suggest improvements. For the website Quilco builds for you, we verify that you own it and add it to your Search Console so Google can find it. We don't remove sites or change other settings. - Google Analytics (
analytics.readonly,analytics.edit): we read your accounts and properties and your website traffic reports (visitors, sessions, traffic sources and top pages) to show your website results. The edit permission is used only to create a web data stream for the website Quilco builds for you, so its visits are measured. We don't delete properties or change your other settings. - YouTube (
youtube.upload,youtube.readonly): we upload the videos (Shorts) you create in Quilco and choose to post to your channel, with the title and description you approve. We read your channel's name and statistics and your recent videos' statistics (views, likes and comment counts) to show how your posts are doing. We don't delete or edit your existing videos. - Google Ads (
adwords): we list the ad accounts you can access, create the campaigns, ad groups, ads and budgets you set up and approve in Quilco, pause, resume or change them when you ask, and read their results (spend, impressions, clicks, conversions and cost per result) to show your results. You pay Google directly for ad spend; Quilco never sees your Google Ads billing details. - Gmail (
gmail.readonly,gmail.send), only if you connect your Gmail in Quilco: we read the new emails that arrive in your inbox after you connect it (sender, subject, body and the headers that show whether it's a newsletter or an automatic email) to find real inquiries from customers and turn them into leads in your Quilco account. We skip promotions, social, updates and forum emails and emails you sent. We send replies to those inquiries from your Gmail, in the same conversation, only when you've turned on automatic replies or tapped send in Quilco. We don't delete, label, move or change your emails, and we don't read your older email.
Quilco does not request access to Google Drive, Calendar or Contacts. If that ever changes, we will update this policy and ask for your permission first.
How we use it
- Only to provide and improve the Quilco features you can see and use: showing your results, building and publishing your content and ads, and the SEO and listing advice shown to you.
- To produce that advice and content, the relevant part of your Google user data (for example your search queries or review text) may be sent to Anthropic, our AI provider, to process your request. Anthropic processes it only to return the answer to Quilco and does not use it to train its models.
- We do not use Google user data to develop, improve or train generalized or non-personalized AI or machine learning models.
- Your Google user data is never combined with other customers' data or used to make content, advice or ads for anyone else.
- We do not use Google user data for advertising, including retargeting, personalized or interest-based ads, and we do not use it to decide creditworthiness or for lending.
How we store and protect it
- Your Google access tokens are encrypted (AES-256) before they are stored and can only be read by Quilco's servers.
- The Google data we keep (your latest results, reviews and listing details, and the Gmail inquiries that became leads, with the replies sent) is stored in our database (Supabase), encrypted in transit and at rest, and only your Quilco account can see it.
- Quilco staff do not read your Google user data, except when you ask us for help with it and agree to us viewing it, when it's needed for security (such as investigating abuse), or when the law requires it.
Who we share it with
We do not sell Google user data or transfer it to advertising platforms, data brokers or information resellers. It is only shared:
- With the service providers that run Quilco for you (Supabase for storage, Vercel for hosting and Anthropic for AI processing), only to provide your Quilco features.
- Back to Google itself when you publish or change something (a post, a review reply, a video or an ad).
- If you are an agency, with the client portal users you invite and choose to share results with.
- When the law requires it, to protect against fraud or abuse, or as part of a merger or sale of Quilco, and then only with your explicit consent beforehand.
How long we keep it, and how to delete it
- We keep Google user data only while the Google service is connected and only as long as needed to show your current results. Your numbers are refreshed from Google and replace the older copy each time.
- When you disconnect a Google service in Quilco (the menu, then Profile, then Connections), we immediately delete its access keys and the Google data we stored for it. When you disconnect your last Google service, we also revoke Quilco's access at Google.
- You can also remove Quilco's access at any time from your Google account at myaccount.google.com/permissions.
- If you close your Quilco account, or email support@quilco.app asking us to, we delete all your Google user data within 30 days.
Limited Use
Quilco's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data from Meta
Data from Facebook and Instagram is used only to provide the features you turned on, is not sold, and is not used to train AI models. You can disconnect it at any time in Quilco (the menu, then Profile, then Connections) and through Facebook's own settings.
Who we share it with
Only the service providers that help us run Quilco, under contracts that protect your data:
- Supabase (database and file storage), Cloudflare (backup copies of the photos and videos you upload), Vercel (hosting), Stripe (payments), Anthropic (AI), Resend (sending emails for you, and receiving the email you forward to your Quilco email address), Twilio (texting through a number Quilco provides).
- The texting service you connect with your own account (your own Twilio, Blooio, Sendblue, Linq or LoopMessage), to send and receive your business's texts.
- The platforms you connect, when you ask us to post or run ads there.
- Authorities, if the law requires it.
How long we keep it
We keep your data while your account is open. If you close your account, we delete your data within 30 days, except records we must keep for tax or legal reasons. Backup copies of photos and videos you delete are kept for up to 30 days so mistakes can be undone, then removed.
Your choices and rights
- See and edit your details anytime in the app.
- Download your leads as a spreadsheet from the Leads tab.
- Clear the assistant's memory in Settings.
- Ask us for a copy of your data or to delete your account and data by emailing support@quilco.app. We reply within 30 days.
Depending on where you live (for example California or the EU), you may have extra rights. Contact us to use them.
Deleting data from Facebook or Instagram
To remove data Quilco received from Facebook or Instagram, disconnect Quilco in your Facebook settings under Apps and Websites, and email support@quilco.app asking us to delete it. We confirm once it's done.
Security
Data is encrypted in transit and at rest. Each customer can only reach their own data, and access tokens for connected accounts are kept where only our servers can read them.
Children
Quilco is for businesses and is not meant for anyone under 18.
Changes
If we make important changes, we'll tell you by email or in the app before they take effect.
Contact
Tezi LLC, Oregon, USA · support@quilco.app