Privacy Policy
Last updated: 13 September 2026
This policy explains what QuinR Marketer collects, why, who it is shared with, and the choices and rights you have. QuinR is operated by QuinR Digital Solutions (“QuinR”, “we”). Our service is hosted in the United States (Hostinger), and this policy describes the rights that United States privacy laws give you.
1. What we collect
- Account information — your name, email address and organisation, received from our sign-in provider when you create an account, so we can give you access and keep it secure.
- Google Search Console (read-only) — query, page, click, impression, position and index-status data for properties you connect. Used to decide which problems matter and to measure results.
- Google Analytics 4 (read-only) — aggregate session, engagement and conversion figures, so a report can say whether the work changed business outcomes.
- Google Business Profile — if you choose to connect it: your business’s profile information, reviews and performance figures, so QuinR can check them and make the changes described in section 2.
- Your website — pages we crawl, and stored snapshots of pages we have changed, so any change can be rolled back.
- Credentials — the access tokens or application passwords for the services you connect, such as Google or your website’s content management system.
- Activity in your account — records of what happened and who did it, such as a change being approved, applied or rolled back.
- Contact form — if you send us an inquiry: your name, work email, company, website, phone number (optional), team size, search volume, budget (optional), requirements, preferred contact method and timeline.
- Free site check — the website address you enter, what the check found, and your email address if you choose to give it. The result link stops working after seven days.
- Technical information — the IP address and browser information that reach our servers and our network provider with every request. We use it to keep the service secure, limit abuse, and protect our forms from bots.
- Cookies — only the cookies needed to keep you signed in and to protect forms from abuse. We do not use advertising or analytics cookies.
The access credentials for services you connect are the only sensitive information we hold: they are stored encrypted and used only to provide the service. We do not collect other sensitive personal information, such as government identifiers, financial account details, precise location or health information.
2. Google user data and the Limited Use requirements
QuinR’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data obtained from Google APIs is:
- used only to provide and improve the features described on our homepage;
- never sold, and never transferred except as set out in section 5;
- never used for advertising, including retargeting or personalised advertising;
- never used to train generalised machine-learning or AI models;
- never read by a human except with your explicit permission, for security purposes, to comply with applicable law, or where it is aggregated and anonymised.
The scopes we request are webmasters.readonly and analytics.readonly, which are read-only: QuinR cannot alter anything in Search Console or Analytics. If you separately connect your Business Profile, we also request business.manage, which lets QuinR update that profile — only with changes you approve, or kinds of change you have chosen to let QuinR apply without asking each time.
3. How we use information
- To provide the service: auditing your website, proposing changes, applying the changes you approve, checking they worked, and reporting on results.
- To create and secure accounts, and to prevent fraud and abuse.
- To answer inquiries and support requests.
- To send the reports and service messages you ask for.
- To comply with the law and enforce our terms.
We do not use personal information for advertising, and we do not use it to make decisions that have legal or similarly significant effects on you.
4. How it is stored and protected
- Credentials for connected services are envelope-encrypted before storage and are never logged.
- Customer data is isolated per organisation at the database level, so one customer’s data cannot be read while serving another.
- Page snapshots are held in object storage reachable only by the service.
- Backups are encrypted on our server before they are copied off it, so the backup provider stores only data it cannot read.
- Data is hosted in the United States (Hostinger).
No system is perfectly secure, but we limit access to personal information to the people and services that need it to run QuinR.
5. Who we share it with
We share personal information only with the service providers that process it to run QuinR for us:
- Hosting and network — Hostinger (our servers, in the United States) and Cloudflare (network delivery, DNS, bot protection for our forms, and storage for our encrypted backups).
- Sign-in — Clerk, which manages your account identity.
- AI processing — Anthropic receives extracts of your page content and audit findings to generate or review proposed text, and does not use them to train its models. OpenAI and Google (Gemini) receive the questions QuinR asks AI assistants about your business and its topics, to measure how those assistants describe it.
- Search data — DataForSEO receives keywords, domains and search queries to return rankings and competitor data; no personal information is sent.
- Error monitoring — Sentry, with its data stored in the United States, receives a report when part of QuinR fails: what failed and where in our code. We set it up so those reports leave out IP addresses, cookies, what you type into forms, and the content of your pages.
- Email delivery — Resend delivers reports and service messages, and so receives the recipient’s address and the message.
- Google — the Google services you connect, and Google’s page-speed services, which receive the public addresses of your pages.
We may also disclose information if the law requires it, to protect the rights, property or safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to it.
We do not sell personal information, and we do not share it for cross-context behavioural advertising — and have not done so in the past 12 months. We do not disclose personal information to third parties for their own direct marketing.
6. How long we keep it
- Account and service data is kept while your account is active.
- Disconnecting an integration deletes its stored credentials immediately. Removing a website deletes the data held for it.
- If you ask us to delete your account, we delete the associated data within 30 days, except records the law requires us to keep.
- Contact-form inquiries are kept so we can respond and keep business records, and are deleted on request.
- Free site check result links stop working after seven days.
7. Your privacy rights
Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with privacy laws — you may have the right to:
- know what personal information we collect, use and disclose, and get a copy of it in a portable format;
- correct inaccurate personal information;
- delete your personal information;
- opt out of the sale or sharing of personal information, targeted advertising, and profiling — none of which we do;
- not be treated differently for exercising any of these rights.
We honour requests to access, correct or delete your information from any user, wherever you live.
How to make a request. Email [email protected] or use our contact form. We will confirm the request comes from you — usually by asking you to reply from the email address on your account — and respond within 45 days. If we need longer, we will tell you why, and take no more than another 45 days. An authorised agent may make a request for you with your written permission.
Appeals. If we decline your request, you may appeal by replying to our decision. We will answer your appeal within 45 days, and if you are not satisfied you may contact your state attorney general.
Browser signals. Because we do not sell or share personal information or track you across other websites, a Global Privacy Control or Do Not Track signal changes nothing we do — there is nothing to switch off.
8. Children
QuinR is a service for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
9. Revoking Google access
Disconnect the integration inside QuinR, or revoke it at myaccount.google.com/permissions. Either removes our ability to read your Google data; the first also deletes the token.
10. Changes to this policy
We will update the date above when this policy changes, and will tell you directly if the change is material.
11. Contact us
Questions about this policy or your information: email [email protected] or use our contact form.
QuinR Digital Solutions · [email protected] · Terms of service