This Policy explains how CleverByte Technologies Pvt Ltd ("QuadraPost", "we") collects and processes personal data when you use quadrapost.com and app.quadrapost.com. We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) and other applicable law.
1. Data we collect
- Account data: name, email, password hash or Google account identifier.
- Business data: business name, type, industry, location, brand colours/tone, logo.
- Content you upload: product photographs, brand assets, ad text, offers, dialogue.
- Social publishing data (when you connect social accounts): the identity of connected accounts (platform, page/account name and identifier), the posts you publish through QuadraPost, your chosen captions and schedules, and — to power your analytics — performance metrics of published posts (reach, likes, comments, saves, clicks, views) and of your recent existing posts (imported once to build your performance baseline). We never receive or store your social media passwords; connections use each platform's official authorization, and access tokens are held by our publishing processor (see Section 3).
- Usage and billing data: campaigns created, credits consumed, publishing quota usage, plan, payment status and identifiers from our payment processor (we do not receive or store card/UPI credentials).
- Technical data: IP address, device/browser type, logs, cookies necessary for sign-in and security.
2. How we use data
To provide the Service (including generating your requested content, publishing to accounts you connect, and computing your performance analytics), operate billing and plan quotas, secure and debug the platform, communicate service messages (verification, receipts, account notices), improve the product, and comply with law. We do not sell personal data. We do not use your uploaded product photos to train our own AI models. Your social performance metrics are used only to show you your analytics — never shared with other customers or published.
3. AI processing and processors
Providing the Service requires sending relevant data to third-party processors:
- Anthropic (campaign planning, text and caption generation)
- Google (image generation; Google OAuth sign-in)
- Fal (video generation)
- bundle.social (social publishing and analytics: holds the authorization tokens for your connected social accounts, transmits your posts to the platforms, and retrieves post metrics on our behalf)
- Amazon Web Services, Mumbai region (hosting, storage)
- Razorpay (payments)
- Resend (transactional email)
Each processor receives only what is needed for its function and is bound by its own terms and security practices. Primary data storage is in India (AWS ap-south-1); some processors may process data outside India (bundle.social and the social platforms process publishing data on their own infrastructure).
4. Third-party platform terms
When you connect and publish to Instagram, Facebook, Pinterest, or Google Business Profile, your content on those platforms is also governed by those platforms' own terms and privacy policies. Disconnecting an account in QuadraPost stops future publishing and metric collection for it; posts already published remain on the platform under your control there.
5. Cookies
We use strictly necessary cookies (session/sign-in, security) and, if analytics are enabled on our marketing site, privacy-respecting analytics. We do not run third-party advertising cookies.
6. Retention
Account and business data: while your account is active and for up to 90 days after deletion, unless longer retention is required (e.g., tax and accounting records, retained per law). Uploaded photos and generated outputs: until you delete them or your account is deleted. Social post metrics: rolling snapshots retained while the account is connected; per-post metric collection stops 90 days after a post's publication. Logs: up to 90 days.
7. Your rights
Subject to applicable law you may access, correct, or request deletion of your personal data, withdraw consent, and complain to the relevant authority. Write to support@quadrapost.com. Account deletion can be requested in-app or by email; deletion removes your content and social connections per Section 6.
8. Security
Encryption in transit, encrypted secret storage, tenant isolation at the database layer, least-privilege access, and audit logging of administrative actions. No method is 100% secure; we notify affected users and authorities of breaches as required by law.
9. Children
The Service is for businesses and users 18+.
10. Changes
We will post updates here with a new "Last updated" date; material changes are notified by email or in-app.
Contact: CleverByte Technologies Pvt Ltd, Tayyab Colony, Aligarh, Uttar Pradesh, India, support@quadrapost.com, +91 7410 544 092