Privacy Policy

Quicklook Content is operated by Quicklook LLC (“we”, “us”). We are the controller of the personal data described here. Reach us through our contact form.

• Account details. Your email address and the mobile number we SMS-verify and link to that same account through Firebase Authentication. Passwords are handled by Firebase and are never visible to us.
• Workspace details. Your workspace name, the roles you assign, and the email addresses of teammates you invite.
• Your brand’s public website. When you add a domain, we read its publicly accessible pages and structured data to build a product catalog and learn how your brand writes. We read only what any visitor or search engine could read.
• Connected social accounts. The account names, identifiers, and post metrics for networks you connect. The authorization tokens are held by our publishing provider, not by us, and you can revoke them at any time from the network itself.
• Billing details. Stripe collects your card, billing address, phone number, and any tax identifier directly. We receive and store only your Stripe customer and subscription identifiers, your plan, and its status. We never see or store card numbers.
• Content you generate. The images, videos, and post copy produced for you, and the records of where they were published.
• Technical data. IP address, coarse browser and device characteristics, and server logs — used for security, abuse prevention, and diagnosing faults.

• To provide the service — generating and publishing your content, maintaining your workspace, and supporting you. This is necessary to perform our contract with you.
• To take payment — billing, invoicing, and managing your subscription. Also contractual necessity.
• To prevent abuse — stopping repeated free trials and fraudulent signups. We rely on our legitimate interest in not having the service taken without payment; every trial costs us real money to serve.
• To keep the service secure and working — logging, monitoring, and debugging. Legitimate interest.

We do not sell your personal data, and we do not use it to train our own models.

These providers process data on our behalf under contract. They are the complete set of third parties that touch customer data.

We also disclose data where the law requires it, and to a successor if the business is sold — in which case this policy travels with it.

Your product photographs, brand website content, and prompts are sent to the Google Gemini API to produce images, video, and copy. Content generated for you is yours. On networks whose policies cover realistic AI-generated media, posts carry that network’s AI disclosure label by default; you can change this in workspace settings.

Our free trial includes 1 video + 5 images, which cost us real money to produce. To stop the same person taking it repeatedly, we record that a trial was used against a set of identifiers.

• Only irreversible hashes are stored. Each identifier — the fingerprint Stripe assigns your card, your email address, the SMS-verified phone number linked to your Firebase account, a first-party browser identifier, and your IP address — is combined with a secret salt and hashed. The stored values cannot be turned back into your email, your phone number, or your card details, by us or by anyone who obtained a copy of the database. We query those hashes when you create a workspace, not only at checkout.
• These records outlive your account. Deleting your workspace removes your data, but it does not restore eligibility for another free trial. A record that disappeared along with the account would not prevent anything. This is the one category we deliberately retain, and we retain it indefinitely.
• They are never used for marketing, profiling, advertising, or any purpose other than deciding whether a free trial has already been taken.

You can always subscribe to a paid plan regardless of these records.

• Account, workspace, and generated content — for as long as your account exists, then deleted within 30 days of your request.
• Billing records — for as long as tax and accounting law requires, typically seven years.
• Server logs — a rolling window of no more than 90 days.
• Fraud-prevention hashes — indefinitely, as described in section 6.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing based on legitimate interest, and to complain to your data protection authority. Send the request through our contact form — choose “Privacy or data request” — and we will respond within 30 days. You do not need an account to use it.

You can also delete everything yourself, immediately, from Settings → Delete workspace inside the app. That cancels your subscription and removes your account, brands, catalogs, connected accounts, and every generated asset, without waiting on us.

A deletion request removes your account, workspace, brands, and generated content. It does not remove the fraud-prevention hashes in section 6, which contain no readable personal data and which we retain on the basis of our legitimate interest in preventing repeated free trials.

Data is encrypted in transit and at rest. Access to production systems is restricted and authenticated. Card details never touch our servers. No system is perfectly secure, and we do not claim otherwise.

Quicklook Content is a business tool and is not directed at anyone under 18. We do not knowingly collect their data.

We will update the effective date above when this policy changes, and will tell you by email before any change that materially reduces your rights.