Privacy Policy
Last updated: 11 June 2026
Quetzal is an AI social media automation service in early access. This policy explains what data we collect, why we collect it, and the choices you have. The short version: we collect only what the service needs to work, we never sell your data, and a person answers when you write to us.
What we collect
Account data. Your email address, name and authentication details when you create an account.
Connected social accounts. When you connect Instagram, Facebook, LinkedIn, TikTok, X or YouTube, the platforms grant us OAuth access tokens. These tokens are stored encrypted in a dedicated secrets vault — never in plaintext — and are used exclusively to publish the content you approve and to read the performance of your own posts.
Content and performance metrics. The briefs you write, the drafts Quetzal generates, the assets you upload, and the engagement metrics of your published posts (collected at 1, 6, 24 and 72 hours after publishing).
How we use it
We use your data to provide the service: generating drafts in your brand voice, scheduling and publishing the posts you approve, and measuring how they perform. Your own consented performance metrics are also used to improve your own results — that is the product. External platform data is used as context at drafting time only and is never trained into model weights.
What we never do
We do not sell your data. We do not share your content or metrics with advertisers. We do not publish anything without your explicit approval.
Processors
We rely on a small set of processors to run the service: cloud hosting and database infrastructure, and AI model providers that process your briefs and drafts to generate content. Each processor receives only the data needed for its function and is bound by its own data-processing agreement.
Your rights (GDPR)
You can request access to the personal data we hold about you, ask for it to be rectified, or have it deleted entirely. Email msquetzal1@gmail.com and we will respond within 30 days. Disconnecting a social account revokes our access tokens for it immediately.
Retention
We keep your data for as long as your account is active. When you delete your workspace or account, your posts, connections, assets and analytics are removed. Encrypted tokens for disconnected accounts are deleted at disconnection time.
Cookies
Strictly necessary cookies keep the product working and are always on: a session cookie that keeps you signed in, plus q-lang (your language preference) and q-theme (light or dark mode). These don’t require consent.
Analytics cookies are optional and off by default — we load them only if you opt in through the cookie banner. We currently use no analytics or advertising cookies at all. Your choice is stored in a q-consent cookie; change it anytime via “Cookie settings” in the footer.
Contact
Questions about this policy: msquetzal1@gmail.com.