Privacy policy

Your account. Your name, email address and password, and your language and time zone. We store your password only as a one-way hash, never in a form anyone can read. For each session you sign in to, we keep its IP address and the browser’s description of itself (its user agent), to keep your account secure.

Your workspaces. Each workspace’s name and time zone, and who belongs to it, with their roles.

Connected social accounts. When you connect an account on a social network, the network sends us the account’s ID, name, handle and profile picture, and access tokens that let QWER Social act for that account within the permissions you granted. We encrypt the tokens before storing them. We keep the link to the profile picture, and the IDs and links of the posts we publish for you.

Posts and media. The posts you write, edit and schedule, with each network’s version and the times you pick, and the images and other files you upload, with their alt text.

Brand context. What you tell us about your brand, and what you add to help AI write in your voice: pages from your website, documents, your answers to our questions, notes, and past posts you paste in or import from a connected account. We also record how you edit and rate AI drafts, so that drafting can learn your style.

Billing. Dodo Payments takes your payment details. It sends us your plan, payment status and the billing details you give at checkout. We never receive your full card number.

Usage. How much of your plan you use, such as AI credits and scheduled posts. Our servers log requests, with IP addresses, to keep the service running and secure. An audit log records important actions, such as connecting or disconnecting an account, publishing a post or changing brand settings, with who did it and when.

Messages to us. What you send to support, and our replies.

To run QWER Social for you. We create and protect your account, keep your workspaces, calendars and drafts, and send the emails the service needs, such as confirming your email address, resetting your password and telling you when an account needs reconnecting.

To publish on your behalf. We use an account’s tokens only for what you ask: to publish the posts you schedule, to the accounts you choose, at the times you choose; to check that a post went out; to keep the connection working; and, when you ask, to import your recent posts. QWER Social never publishes anything you haven’t scheduled.

For AI drafting. When you ask AI to write or rewrite a post, we send your request and the context it needs, such as your brand context, your draft and examples of past posts, to Anthropic, whose Claude models write the draft. We also use Claude to read the material you add, such as your website, documents and past posts, and to learn your style from your edits. AI drafts are suggestions: nothing is published until you schedule it.

To keep the service safe and working. We prevent fraud and abuse, check that sign-ups and sign-ins come from people rather than bots, limit how fast requests can be made, and find and fix problems.

For billing. We charge for paid plans and apply each plan’s limits.

To meet legal duties. We comply with the law, enforce our terms and answer lawful requests.

Where data protection laws such as the GDPR apply, we rely on these legal bases: performing our contract with you; our legitimate interest in keeping QWER Social secure and reliable, balanced against your rights; your consent, where we ask for it; and our legal obligations.

We never use your content to train AI models. That includes your posts, media and brand context, and anything imported from your connected accounts.

Anthropic processes what we send to return a result to us, and its commercial terms don’t allow it to train models on that content.

Your brand context serves only your own workspace, never another customer’s.

We don’t sell your personal information, and we don’t share it for advertising.

Service providers. These companies process information on our behalf, only to provide their service to us:

• Anthropic runs the Claude models behind AI drafting.
• Cloudflare delivers our website and app, protects them from attacks, stores the media you upload and runs the bot check on sign-up and sign-in.
• Neon hosts our database.
• [Managed Redis provider] hosts the queue of scheduled jobs and other short-lived data.
• [Server hosting provider] runs the servers our application runs on.
• Resend sends our emails.
• Dodo Payments processes payments as our merchant of record, including tax and invoices.

The networks you publish to. When you publish, we send your posts and media to the networks you chose, such as LinkedIn, Facebook, Instagram, Threads, X, Bluesky or your Mastodon server. Once there, they’re covered by that network’s own terms and privacy policy.

Your workspace. Anyone with access to a workspace can see its posts, connected accounts and brand context.

When the law requires it. We may disclose information to comply with the law, or to protect the rights, safety or property of our users, the public or ourselves.

If the business changes hands. If QWER Social is sold or merged, your information may pass to the new owner, who must keep to this policy.

Our website runs no analytics, advertising or tracking scripts, and sets no cookies for them.

The app uses cookies only to keep you signed in, and scripts on the page can’t read them. Cloudflare, which protects the site, may set cookies it needs to tell people from bots, and runs its Turnstile check on our sign-up and sign-in screens.

We keep your information while your account is open, and delete it when you delete it or ask us to, as set out below.

Deleting your account. You can delete your account yourself, in Settings. It takes effect at once: you’re signed out everywhere, and your name, email address and password are erased. Every organization you’re the only member of goes with it, with all of its workspaces, and any paid plan of theirs is cancelled first. Organizations you share with others keep what’s in them, including posts you wrote there. Everything is gone within the hour.

Deleting a workspace. Owners and admins can delete a workspace in its Settings. It takes effect at once for everyone who uses it, and everything in it is gone within the hour.

Disconnecting an account. When you disconnect a social account, we delete its access tokens at once, and revoke them at the network where the network allows it. Posts scheduled for that account won’t be published.

Removing QWER Social at Meta. If you remove QWER Social in your Facebook, Instagram or Threads settings, Meta tells us, and we delete that account’s tokens, the posts we imported from it and its profile picture.

Deletion on request. You can also ask us to delete your account, a workspace or a connected account’s data, for example if you can’t sign in. We delete it within 30 days, or sooner where a network’s rules require it. Data deletion explains each way.

Backups. Deleted information can remain in our database backups until they expire, after [How long backups are kept].

What we keep. We may keep a limited record where the law requires it, such as billing records, or where we need it to settle a dispute or prevent abuse. Our audit log keeps a deleted account’s actions under an anonymous id, never its name, email address or IP address.

Depending on where you live, you can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct it;
• delete it;
• give it to you, or another service, in a portable format;
• restrict how we use it, or stop using it;
• withdraw any consent you gave us.

Some of these you can do yourself, at any time: owners and admins can export a workspace from its Settings, and you can delete your account, or a workspace you run, in Settings.

To make a request, email support@social.qwer.codes. We’ll answer within 30 days, and we may need to confirm it’s you first. We won’t treat you differently for using these rights.

If you’re unhappy with our answer, you can complain to your local data protection authority.

QWER Social uses YouTube API Services when you connect a YouTube channel. If you do:

• you agree to be bound by the YouTube Terms of Service;
• the Google Privacy Policy covers the information Google collects;
• we use the channel’s information only as this policy describes;
• you can revoke QWER Social’s access at any time in your Google Account’s security settings. When you do, or when you disconnect the channel, we delete its tokens at once and the YouTube data we stored within 30 days.

QWER Social is for businesses and professionals, and you must be 18 or older to use it. It isn’t directed to children, and we don’t knowingly collect personal information from anyone under 16. If you think a child has given us personal information, email support@social.qwer.codes and we’ll delete it.

Connections to QWER Social are encrypted with HTTPS. We encrypt social account tokens with AES-256-GCM before storing them, store passwords only as one-way hashes, and keep sign-in cookies out of reach of page scripts. No system is perfectly secure: if a breach affects your information, we’ll tell you as the law requires.

We store your information in the United States, and our service providers may process it in other countries. Where the law requires, we protect these transfers with recognised safeguards, such as the European Commission’s Standard Contractual Clauses.

We’ll post any change on this page and update the date at the top. If a change is significant, we’ll tell you by email or in the app before it takes effect.

For questions, requests or complaints about privacy, email support@social.qwer.codes.

QWER Social is run by [Legal name of the company], [Registered address].

EU representative: [EU representative, if required].

Data protection contact: [Data protection contact].