Back to Quotly

Version 2026-05-28

Privacy Policy

This Policy explains what data Quotly processes, why we use it, and what choices you have when using a platform that turns reading notes into AI-assisted content.

Last updated: October 14, 2026

Storage in this version

Google identities and sessions are managed by Neon Auth. Book metadata is stored in Neon Postgres. On the published site, cover photos are stored in private Vercel Blob storage and delivered only after checking the session and book ownership. Local development stores them on disk. When a photo is selected, it is sent to Google Gemini on Vertex AI to extract title, author, and publisher, suggest category and color, and prepare a flat cover through image generation. You can review the result, keep the original photo, or cancel before saving. This version uses no Firebase or usage analytics and imports no data from the previous system.

1. Scope and Controller

This Policy applies to Quotly’s website, app, AI features, storage, exports, public pages, and related services. Quotly acts as controller for the personal data it directly manages to provide the platform.

By creating an account or using the platform, you accept the data processing described in this Policy, without prejudice to any rights granted by applicable law.

2. Data We May Collect

  • Account data: name, email, profile photo, Google or Neon identifier, language, plan, creation dates, last activity, and preferences.
  • User content: books, authors, publishers, covers, back covers, table of contents, reading progress, notes, annotations, context, personal notes, pages, prompts, questions, answers, summaries, flashcards, infographics, and exports.
  • Photos and images: page photos, covers, back covers, images processed for OCR, generated images, and files associated with imports or exports.
  • Usage data: number of photos processed, AI messages, generations, infographics, exports, usage events, errors, language preferences, plan, and consumed limits.
  • Technical data: IP address, browser, operating system, device, session identifiers, security logs, cookies, or local storage when needed for authentication, analytics, or operation.
  • Communications: support messages, feedback, legal or privacy requests, and emails submitted through waitlists or forms.

3. How We Use Data

  • Create and manage your account, authenticate you, and keep your session secure.
  • Store books, notes, photos, personal notes, exports, generated artifacts, and settings.
  • Process photos, extract text, generate summaries, flashcards, infographics, chat responses, and other AI outputs.
  • Measure usage, enforce limits, prevent abuse, detect errors, improve performance, and prioritize product improvements.
  • Respond to support, send administrative notices, communicate important changes, and comply with legal obligations.
  • Protect Quotly, its users, providers, and third parties against fraud, misuse, rights violations, or security risks.

4. AI Processing and External Providers

To provide core features, we may send texts, photos, prompts, annotations, book metadata, and intermediate results to infrastructure and AI providers, including Google, Neon, Google Cloud, and Gemini models.

These providers process data under their own terms, policies, and processing agreements. We aim to limit transmission to what is necessary to provide the requested feature, operate the platform, maintain security, and troubleshoot errors.

You should not upload extremely sensitive information, credentials, health data, financial data, trade secrets, data about minors, or third-party confidential information unless you have a legal basis and a clear need to do so.

5. Who We Share Data With

We do not sell your personal data or reading content as a database to advertisers. If this changes, we will update this Policy and request any consent or options required by applicable law.

We may use aggregated, anonymized, or de-identified data to understand Quotly usage, improve features, develop related products, measure performance, prepare internal reports, and conduct commercial analysis, provided that the data does not reasonably identify a specific user.

  • Technical providers that help us with authentication, database, storage, hosting, analytics, AI, image processing, security, and support.
  • Authorities, courts, or third parties when necessary to comply with law, respond to legal process, protect rights, investigate abuse, or prevent harm.
  • Acquirers, successors, or advisors in the event of a merger, sale, financing, reorganization, asset transfer, or change of control of Quotly.
  • Third parties authorized by you, for example when you export, download, share, or publish content generated from Quotly.

6. Retention and Deletion

We retain data while your account is active or while needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, maintain security, back up operations, or defend rights.

You may delete content from the platform where the feature is available or request account and data deletion. Deletion may not be immediate in backups, security logs, temporary files, legal obligations, or aggregated data that no longer identifies a person.

7. Security

We use reasonable technical and organizational security measures, including authentication, access rules, user-segregated storage, and recognized infrastructure providers. Even so, no internet-connected system can guarantee absolute security.

You must protect your Google account, sign out on shared devices, and notify us if you suspect unauthorized access.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, update, export, delete, restrict, or object to processing of your data, withdraw consent, file complaints with authorities, and request information about data use.

We may ask for additional information to verify your identity before responding to a request. We may also deny or limit requests where permitted by law, for example if they affect third-party rights, security, legal obligations, or information we must retain.

9. International Transfers

Quotly and its providers may process data in different countries. By using the platform, you understand that your data may be transferred, stored, or processed outside your country of residence, where data protection laws may differ.

Where applicable, we will seek to rely on contractual mechanisms, processing terms, or safeguards offered by our providers.

10. Minors

Quotly is not directed to young children and does not seek to knowingly collect minors’ data without authorization. If you believe a minor used Quotly without proper consent, contact us so we can review the situation and take reasonable steps.

11. Cookies, Analytics, and Local Storage

We may use cookies, local storage, authentication identifiers, and analytics tools to maintain sessions, remember preferences, measure usage, detect errors, and improve the platform. Esta versión no utiliza Firebase ni herramientas de analítica de uso.

You may configure your browser to block cookies or clear local storage, but some authentication or usage features may stop working correctly.

12. Changes to This Policy

We may update this Policy to reflect changes in the product, providers, laws, or processing practices. We will publish the current version on this page and, if a change is material, may notify you within the platform or by other reasonable means.

13. Contact

To exercise privacy rights, request account deletion, or ask questions about these documents, use the support channels available in Quotly or the official contact method published by the platform.