Privacy Policy
Last updated 5 August 2026
This policy explains what Mohammed Maheer trading as QuillClose (“QuillClose”) collects when you use our service, why, and what control you have over it. Mohammed Maheer trading as QuillClose is the data controller for that information.
You can change or withdraw analytics consent at any time.
1.What we collect
Account data. Your email address. We use email sign-in links, so we never collect or store a password.
Content you create. The project notes you submit and the proposals generated from them, including client name, scope, budget and timeline as you enter them.
Billing data. For paid plans, PayU collects and stores your payment details. We never see or store full card or UPI credentials. We keep the PayU payment reference, plan, access status and expiry date.
Usage data. Standard server logs (IP address, browser user agent, timestamps, pages requested) and, for shared proposals, a count of how many times the page was opened. If you allow analytics, Google Analytics also processes page visits, device information and approximate location data so we can improve the product.
Support data. Questions entered into QuillGuide are used to provide product guidance during the current session and are not added to your account history. If you deliberately submit a human support request, we store its category, subject, message, your verified account email, status and private handling notes so we can respond and maintain a support history.
Early-access data. When you join a paid-plan waitlist, we store the selected plan, your verified account email, profession, country and, only if you opt in, your WhatsApp number and consent.
Advertising data. Public guides, templates and proposal-generator pages may use Google AdSense to show contextual advertising to eligible visitors in India. Advertising is not used on sales, account or client-proposal pages. We do not sell proposal or account content to advertisers.
Cookies and local storage. A necessary session cookie keeps you signed in. Google Analytics storage is disabled unless you choose “Allow analytics”; advertising storage remains disabled. We remember your choice locally so we do not ask on every visit.
2.Why we use it, and our legal basis
- To provide the service — creating your account, generating and storing proposals, serving shared links. Basis: performance of a contract.
- To take payment — processing paid access and preventing payment fraud. Basis: contract and legal obligation.
- To keep the service secure and working — logging, debugging, rate limiting and abuse prevention. Basis: legitimate interests.
- To contact you about the service — sign-in links, billing notices, material changes. Basis: contract.
- To notify you about early access — email updates requested through the waitlist and optional WhatsApp updates where separately selected. Basis: consent, which you can withdraw.
- To answer support requests — providing product guidance, investigating account issues and recording resolution. Basis: contract and legitimate interests.
- To understand product usage — consent-based Google Analytics measurement. Basis: consent, which you can withhold or withdraw.
We do not send marketing email without your consent, and we do not sell your personal data or share it with advertisers.
3.Proposal creation and support
QuillGuide provides product guidance during the current session. A support request is added to your account history only when you choose the human-support option and submit the separate form.
When you choose proposal generation or an open-ended rewrite, the relevant project details are processed only to create the output you requested. The services involved and their purposes are listed in the sub-processor table below.
Do not enter sensitive personal data that is not needed for the proposal.
4.Who we share it with
We use the following sub-processors. Each is bound by contract to protect your data and use it only on our instructions.
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, authentication and file storage | Email address, account record, proposal content |
| Hostinger | VPS application hosting and content delivery | Request logs, IP address |
| DeepSeek API | User-requested proposal generation and open-ended rewriting | Project details submitted for that generation or rewrite |
| Google Analytics | Consent-based website and product usage measurement | Page visits, device and approximate location data after consent |
| Google AdSense | Contextual advertising on public marketing and template pages | Page, device and network information used to deliver and protect ads |
| PayU (when paid plans open) | Payment processing and payment confirmation | Email, billing details, payment card or UPI data (held by PayU) |
We may also disclose data where legally required, or to establish or defend legal claims. If we are ever involved in a merger or acquisition, we will notify you before your data becomes subject to a different privacy policy.
5.International transfers
Some sub-processors are located in the United States. Where data leaves the UK or EEA, transfers are made under appropriate safeguards — typically the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.
6.How long we keep it
- Account and proposals — until you delete them, or until you close your account.
- After account deletion — removed from live systems immediately and purged from encrypted backups within 30 days.
- Billing records — retained for up to 7 years, as tax law requires.
- Server logs — typically 30 days.
- Human support requests — retained with your account for support history and deleted from live systems when your account is deleted. You may request earlier deletion after an issue is resolved, subject to records we must keep by law.
- Early-access requests — until the selected plan is activated, the preview closes, or you ask us to remove the request.
- Google Analytics data — retained according to the analytics property settings and only collected after consent.
7.Your rights
Depending on where you live, you have the right to access a copy of your data, correct it, delete it, restrict or object to processing, port it elsewhere, and withdraw consent where processing relies on it. If you are in California, you also have the right not to be discriminated against for exercising these rights — and note that we do not sell or share personal information as those terms are defined by the CCPA.
You can exercise most of these directly in the app: edit or delete any proposal, and delete your account. For anything else, email mohdmaahir786@gmail.com and we will respond within 30 days.
If you are in the UK or EEA and are unhappy with our response, you may complain to your local supervisory authority.
8.Security
Data is encrypted in transit (TLS) and at rest. Database access is enforced by row-level security so one account cannot read another’s data. Payment card and UPI details are handled entirely by PayU and never reach our servers.
No system is perfectly secure. If a breach affects your personal data and poses a risk to you, we will notify you and the relevant regulator without undue delay, and in any case within 72 hours of becoming aware.
9.Children
The service is not intended for anyone under 18 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10.Changes
We will update this policy as the service evolves. Material changes will be notified by email or in the app before they take effect, and the date at the top of this page will change.
11.Contact
Mohammed Maheer trading as QuillClose
Malpe City Centre Complex, Malpe, Karnataka 576108, India
mohdmaahir786@gmail.com