Equalpixels (“we,” “us,” or “our”) operates the Quevix website and application (the “Service”). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
Equalpixels is the controller of the personal data described here. Where an agency or business uses Quevix to manage its clients’ social accounts, that customer decides what content and accounts to put into the Service, and we process that content on its behalf. Questions about anything in this policy can go to [email protected].
1. Information we collect
1.1 Information you give us
- Account details: your name, email address, password (stored only as a secure hash), timezone and preferences.
- Workspace and team details: workspace and brand names, the email addresses of people you invite, and their roles.
- Your content: posts, captions, images, videos, templates, brand kits, comments, approval notes and the files in your media library.
- AI inputs: the prompts you write, links you ask us to turn into posts, and the content you ask the AI to work on.
- Billing details: your plan, billing country, invoices and, where you give it, a business name and tax ID. We do not store or collect your payment card details.
- Support messages: what you send us by email.
1.2 Information from social platforms
When you connect X (Twitter), Facebook Pages, Instagram (through Meta), LinkedIn or TikTok, the platform shares data with us under the permissions you approve. This includes:
- OAuth access and refresh tokens, which we store encrypted;
- the account or page ID, username, display name and profile picture, and for business accounts the names of the pages or company pages you choose;
- the IDs and links of posts we publish for you;
- post statistics (likes, comments, shares, impressions, reach, clicks and video views) and follower counts.
We only request the permissions needed for the features you use. We do not read your private messages and we do not collect data about your followers as individuals.
1.3 Usage data
We may also collect information on how the Service is accessed and used (“Usage Data”). This Usage Data may include information such as your IP address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, and error and diagnostic data. See our Cookie policy for the cookies we use.
2. How we use data and our lawful bases
Under the GDPR and similar laws we need a lawful basis for each use of personal data. The table below sets out what we use, why, on which basis, and how long we keep it.
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Account details | Create and secure your account, sign you in, send service emails | Contract | Life of the account, then deleted within 30 days |
| Workspace, team and invitation data | Run workspaces, roles, invitations and approval workflows | Contract; legitimate interests (for invitees) | Life of the workspace; unused invitations removed when they expire or are revoked |
| Social tokens and profile data | Publish, comment and delete on your instruction; refresh access | Contract | Until you permanently delete the account in Quevix (tokens are then revoked and erased) or close your account |
| Post statistics and follower counts | Show analytics and reports | Contract | Life of the account |
| Your content and media | Store, render, schedule and publish your posts | Contract | Until you delete it or close your account |
| AI inputs and outputs | Generate captions, images, brand kits and post ideas; count AI credits | Contract | Kept with your content while you keep it; credit usage records for the life of the account |
| Billing records | Take payment, issue invoices, meet tax and accounting rules | Contract; legal obligation | As long as tax and accounting law requires, even after the account is closed |
| Support messages | Answer questions and fix problems | Legitimate interests | Up to 24 months after the conversation ends |
| Usage data and logs | Keep the Service secure, prevent abuse, fix bugs, plan capacity | Legitimate interests | Typically up to 90 days, longer only while investigating an incident |
Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time. Where we ask for consent (for example, if we add analytics cookies), you can withdraw it at any time.
3. How we treat data from social platforms
Data we receive through platform APIs is used only to provide the features you have asked for: publishing, first comments, deleting posts, and showing your own analytics. In particular, we:
- do not sell platform data or share it with data brokers or advertisers;
- do not use it to target advertising or to build profiles of you or your audience;
- do not use it to train AI models, ours or anyone else’s;
- stop accessing an account as soon as you permanently delete it, and delete the data on request.
We comply with the Meta Platform Terms, the X Developer Agreement, the LinkedIn API Terms of Use and the TikTok Developer Terms of Service. When we add YouTube, our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. How to remove our access is explained in our Data deletion instructions.
4. AI features and your data
When you use an AI feature, we send your prompt and the content needed for that task (for example, a draft caption, your brand kit or the text of a page you asked us to fetch) to one of the AI model providers we use: OpenAI, Anthropic, Google Gemini, xAI, DeepSeek, Groq, Mistral or OpenRouter. Which provider handles a request depends on the feature and our configuration.
We do not use your content to train our own models. The providers process requests under their own API terms; where a provider offers settings that keep API data out of model training, we use them. Please avoid putting sensitive personal data, such as health information, into AI prompts.
5. Payment processing
We use a third-party payment processor, Paddle, to handle payments. Paddle is the Merchant of Record for orders made through Paddle checkout. In some regions, Stripe or PayPal may process a payment instead. We do not store or collect your payment card details. That information is provided directly to our third-party payment processor whose use of your personal information is governed by their Privacy Policy.
Paddle’s Privacy Policy can be viewed at: https://www.paddle.com/legal/privacy. See also the Stripe Privacy Policy and the PayPal Privacy Statement.
7. International transfers
Equalpixels and some of our providers are located outside the European Economic Area, the UK and Switzerland. When we transfer personal data from those places to a country without an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (and the UK addendum where relevant) or another lawful transfer mechanism, together with additional safeguards such as encryption. You can ask us for a copy of the relevant safeguards at [email protected].
8. Data retention
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
When you close your account, we delete your personal data and content within 30 days, except billing records we must keep by law. Backups roll off within a further 30 days. Posts already published to a social platform stay there until you remove them, or ask us to remove them before you close the account.
9. Security of data
We protect data with encryption in transit (TLS), encryption of OAuth tokens at rest, hashed passwords, role-based access inside each account, restricted staff access, and regular backups.
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.
10. Your data protection rights
Depending on your location, you may have rights under data protection laws (such as the GDPR or the UK GDPR) regarding your personal data, including the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong or incomplete;
- have your data deleted;
- restrict or object to how we use it, including use based on legitimate interests;
- receive your data in a portable format;
- withdraw consent where we rely on it;
- complain to your local data protection authority.
To exercise these rights, please contact us at [email protected]. We may need to confirm your identity, and we reply within one month. Deleting your account is explained step by step in our Data deletion instructions.
11. Notice for California and other US residents
In the last 12 months we have collected the categories of personal information described in section 1: identifiers (such as name, email and IP address), commercial information (plan and billing history), internet activity (usage data), and the content you upload. We use them for the business purposes in section 2 and share them only with the providers in section 6.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. You have the right to know what we collect, to correct it, to delete it, and not to be treated differently for using these rights. You or an authorised agent can make a request at [email protected].
12. Children
The Service is not for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us at [email protected] and we will delete it.
13. Changes and contact us
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, and for material changes we will also tell you by email or in the app.
If you have any questions about this Privacy Policy, please contact us:
- Email: [email protected]
- Website: https://quevix.com