Privacy Notice

Magdi Dakroury operates the Quill Studio AI copywriting workspace. We decide how and why your personal data is processed, which makes us the data controller. You can reach us at magdi_uk@yahoo.com.

• Account data — email address, name, and authentication identifiers (including your Google account identifier if you sign in with Google). Used to create and secure your account. Legal basis: performance of a contract.
• Profile data — display name and avatar you choose to add. Used to personalise the app. Legal basis: performance of a contract.
• Content data — the prompts, briefs, tones and generated drafts you create. Stored so you can return to your library, and sent to our AI provider to generate output. Legal basis: performance of a contract.
• Subscription and usage data — plan, status, billing period dates and generation counts. Used to give you the right level of access and enforce plan limits. Legal basis: performance of a contract.
• Technical data — IP address, device and browser information, and error logs. Used for security, fraud prevention, and diagnosing problems. Legal basis: legitimate interests in keeping the service secure and reliable.
• Support messages — what you send us when you get in touch. Used to answer you. Legal basis: legitimate interests in supporting our customers.

Payment card details are collected and processed by Stripe, our payment processor, not by us. We never see or store your full card number.

• Payment processor — Stripe, Inc., which handles payment collection, subscription billing and tax compliance for our transactions.
• Service providers and subprocessors — our hosting, database and authentication platform, and the AI model providers that generate your copy.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data.

Our providers may process data outside the UK and EEA. Where that happens we rely on appropriate safeguards, such as UK and EU Standard Contractual Clauses or an adequacy decision.

Account, profile and content data is kept while your account is active. If you close your account we delete or anonymise your data within 90 days, except records we must keep longer for tax, accounting or legal reasons. Technical logs are kept for a short period for security and debugging.

Subject to applicable law you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent you can withdraw it at any time. Email magdi_uk@yahoo.com and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your data protection supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level database rules so your drafts are only readable by your account.

We use essential cookies and browser storage only — to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but the app will not be able to keep you signed in if you do.

If we change this notice we will update the date at the top of this page and, for material changes, tell you in the app or by email.