Privacy Policy

1. Who we are

Quill, Inc. ("Quill," "we," "us") operates quillresearch.org, a tool that helps high school students draft personalized outreach emails to research labs. This policy explains what we collect, why, where it lives, and your rights over it. Contact: hello@quill.ink.

2. What lives only in your browser

The working product runs client-side. Your profile details (name, school, city, year, interests), your CV attachment, your drafts, and your send history live in your browser's local storage on your device. They are not uploaded to Quill servers as you type, and one click of "Reset all data" on your Profile page wipes them instantly.

3. What we store on our servers

We keep a deliberately small server-side footprint (hosted on Supabase, a US cloud database provider):

• Account records: your email address, a salted hash of your password (never the password itself), verification status, and plan tier.
• Waitlist entries: the email address you submit on the landing page.
• Verification codes: short-lived hashed codes used to confirm your email, delivered via Resend.
• Usage telemetry: counts of drafts generated and emails marked sent, used for credit metering and the aggregate "students benefitted" counter. We do not store the content of your emails.

4. AI processing

When you click Generate, the relevant parts of your profile and the target researcher's public information are sent to Anthropic's Claude API through our server to produce your draft. Anthropic processes the request to generate the output and, under the API terms we operate on, does not use it to train models. We do not store the prompt or the draft server-side.

5. Payments

Pro subscriptions are processed by Stripe. Your card details go directly to Stripe; we never see or store them. We receive from Stripe only what we need to activate your plan (your email and subscription status).

6. What we never do

• We do not sell or rent your personal information to anyone, ever.
• We do not train AI models on your emails or profile.
• We do not send email on your behalf or read your mailbox. Gmail integration is a compose deep link; we never receive Gmail credentials or OAuth scopes to your inbox.
• We do not run third-party advertising or tracking pixels. Analytics are limited to Vercel's aggregate, cookieless performance metrics.

7. Children's privacy

Quill is intended for students aged 13 and older and is not directed at children under 13. We do not knowingly collect personal information from children under 13; if we learn we have, we will delete it. If you are a parent or guardian and believe a child under 13 has created an account, contact hello@quill.ink.

8. Your rights and choices

• Delete local data: Profile → Reset all data, instant.
• Delete your account and server records: email hello@quill.ink from your account address and we will delete your account records within 30 days.
• Access or correct: same address; we will provide a copy of the server-side data we hold about you.
• Waitlist removal: reply to any email from us or write in; we only email you about access anyway.

Depending on where you live (for example California or the EU), you may have additional statutory rights; we honor reasonable requests regardless of jurisdiction.

9. Security

Transport is HTTPS everywhere with HSTS; we ship a strict Content Security Policy, rate limiting on all API endpoints, and cryptographically random verification codes. See the Security page for details and how to report vulnerabilities.

10. Data retention

Server-side records are kept while your account is active and deleted on verified request. Verification codes expire and are purged automatically. Local-storage data persists until you clear it.

11. Changes

We will update this policy as the product evolves and change the date above. Material changes will be announced on the site. Continued use after changes take effect means you accept the updated policy.