Privacy
What Quail collects, why, and who sees it.
What we collect
Your name, email and password (stored hashed) when you sign up. Creators also give a phone number at signup; only the Quail team sees it, and a brand you chat with sees just the country it's from. Your profile: photo, headline, bio, location, niches and portfolio. The social accounts you connect and the public stats of posts you submit. Payout and tax details you give us before withdrawing: legal name, date of birth, home address, tax number (such as a SIN, SSN or your own country's tax number) and a record of when and from where you signed your tax form. Brands also give us company and campaign details and payment information.
Signing in with Google
Brand accounts can sign in with Google. We only ask Google for your name, email address and profile photo, and use them to create or sign in to your Quail account. We don't get access to your Gmail, Drive, contacts or anything else in your Google account.
Quail Creators on Discord
When you connect Discord, you authorize QuailBot to identify your Discord account and add you to the Quail Creators community. We store your Discord ID, username and the time you connected, and check server membership when you apply to campaigns. The connection does not give us access to your private Discord messages. We use the authorization token once, request its revocation, and do not store Discord access or refresh tokens. Your email, phone number, application answers, campaign decision and pay are not posted to Discord. Community membership continues whether or not you are selected for a campaign. You can leave the server in Discord at any time; rejoining is required for a new campaign application when community membership is required. Contact oh@heyquail.com to unlink or correct a Discord connection.
How we use it
To run Quail: match brands and talent, track the views on submitted posts, pay creators, send account emails, prevent fraud and meet our tax and legal obligations. We don't sell your information and we don't use it for third-party advertising.
Who sees it
Brands see your public profile and the posts you submit to their campaigns. Your earnings rate and payout details are never shown to brands. We share data with the services that run Quail (hosting, database, email, and Stripe for payments and payouts) only as needed to provide them.
Tax numbers
We ask for your tax number only because tax law requires it: Canada's T4A slips and its reporting rules for online platforms, and the US Form W-9. We use it for tax reporting and nothing else, and we share it only with the tax authorities that require it.
Security
Tax numbers are encrypted at rest and only the last 4 digits are ever shown back. Passwords are hashed and never stored in plain text. Card and bank details are handled by Stripe and never touch our servers.
Keeping and deleting data
We keep your account data while your account is open. Email us to delete your account and we'll remove your personal information, except records we have to keep for tax, payment or legal reasons. Tax and payment records are kept for 6 years after the year they relate to, as Canadian tax law requires.
Connected TikTok, Instagram, YouTube and Facebook accounts
If you connect a TikTok, Instagram, YouTube or Facebook account so Quail can post your approved videos, we store the sign-in tokens the platform gives us (encrypted), your username, display name, profile photo and the posting settings the platform reports for the account. We use them only to post videos you uploaded and agreed to, to read how those posts perform, and, for Instagram, to run auto-DM as described below. Disconnect any time in Settings > Accounts, which deletes the tokens. Removing Quail inside TikTok, Instagram, Facebook or your Google account does the same, and a deletion request sent through Meta is completed right away. For YouTube, Quail uses YouTube API Services: by connecting a channel you agree to the YouTube Terms of Service (youtube.com/t/terms), Google's Privacy Policy (policies.google.com/privacy) applies, and you can remove Quail's access at any time at myaccount.google.com/permissions. Quail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Auto-DM on Instagram
If you join a campaign that uses auto-DM, Quail reads the comments and direct messages your connected Instagram account receives to look for the campaign's keyword. When one matches, Quail sends that person your link by direct message from your account, and for a comment it may also post a short reply under it. We keep the person's Instagram username and ID, the first 300 characters of their comment or message, and a record of what we sent and whether it was read, so you can see it on your Auto-DM page. If someone unsends a message, we delete its text. The Auto-DM page also shows the comments on your recent posts so you can reply to, hide or delete them; we don't store those comments. Disconnecting Instagram stops all of this, and a deletion request sent through Meta deletes these records.
Cookies
Quail sets a few cookies of its own: one keeps you logged in, short-lived ones finish a sign-in or account connection you started, and one remembers which referral link brought you to Quail. Quail doesn't use advertising or analytics cookies.
Contact
Questions or requests about your data: oh@heyquail.com.