Privacy Policy

Last updated: June 5, 2026

What this covers

This policy explains what data Quillon (operated by Benjamin Schlussel, a sole proprietor based in Michigan, USA) collects from you, how Quillon uses it, who Quillon shares it with, and the rights you have over it.

Data Quillon collects

• Account data: email, password hash, full name, time zone.
• Integration credentials (encrypted at rest with libsodium): your Postgres connection string, Stripe restricted API key, Slack webhook URL, future CRM tokens.
• Customer signal data pulled from your Postgres + Stripe accounts: customer IDs, names, plan + payment status, usage event counts. Quillon does not pull message contents (no email bodies, no chat transcripts).
• LLM analyses Quillon generates about your customers, cached by state hash.
• Operational logs (API requests, job runs, errors) for ~30 days.

How Quillon uses your data

Customer signal data feeds the heuristic scoring engine and the LLM analysis layer. Account data identifies you to your sessions. Integration credentials let Quillon poll your sources every 15 minutes. Operational logs help Quillon debug issues.

Who Quillon shares data with

Sub-processors only — see the sub-processors list. Quillon does not sell your data, ever, full stop.

Where data is stored

Once Quillon deploys to production hosting, all Quillon-managed data lives in EU-based infrastructure (Hetzner, Germany). Sub-processor regions are listed individually.

Your rights

• Access: email [email protected] to request a copy of your data.
• Deletion: use the in-app "Delete account" flow in Settings → Danger zone. Deletion follows a 30-day grace period, then a hard purge of all account-keyed data.
• Correction: edit profile fields in Settings → Profile.
• Portability: email [email protected] to request export.

Retention

• Account data and integration credentials: kept while your account exists. Deleted 30 days after account deletion request (the grace window).
• Operational logs: 30 days, then purged.
• Billing records (post-deletion): ~7 years, anonymized — kept for tax and legal compliance.

Children

Quillon is a B2B SaaS product not intended for users under 18.

Changes

If Quillon makes material changes, you'll be notified by email at least 7 days before they take effect.

Contact

Questions: [email protected].