Privacy Policy

Information we collect

• Account information. When you sign up with email and password, we store your email address. If you sign in with Google, we receive your name, email address, and profile picture from your Google account (we never see your Google password). You also choose a public handle and optional display name.
• Content you save. The links you save and any metadata we fetch about them (title, description, preview image, site name), plus the tags, notes, and collections you create.
• Optional API keys. If you add your own AI provider key, it is encrypted at rest and used only to run enrichment on your behalf.
• Usage on published pages.When someone visits a collection you’ve published, we record aggregate click analytics (counts, approximate country, device type, referrer). We do not store raw IP addresses; unique visitors are approximated with a salted hash that rotates daily.

How we use your information

• To provide, maintain, and secure the service.
• To fetch link previews and, if enabled, generate AI summaries of the links you save.
• To render the public collection pages you choose to publish, and to show you analytics for them.
• To communicate with you about your account (e.g. email verification, important service notices).

We do not sell your personal information, and we do not use your saved content to train AI models.

AI processing

To generate summaries, the URL and fetched metadata of a saved link may be sent to our AI provider (Anthropic). If you supply your own provider key, requests use your key instead. Enrichment is subject to a monthly free-tier limit and can be disabled by not using it.

Publicly shared content

Collections are private by default. If you set a collection to public or unlisted and publish it, its contents and your public handle and display name become viewable by anyone with the link. You can make a collection private again at any time, which removes public access.

Service providers we use

• Supabase — database, authentication, and storage.
• Vercel — application hosting and delivery.
• Google— optional “Sign in with Google” authentication.
• Anthropic — AI summaries (when enrichment is used with our platform key).

These providers process data on our behalf under their own security and privacy commitments.

Data storage & security

Your data is isolated per account and enforced at the database level (row-level security), so one user cannot read another user’s private data. Sensitive values such as your bring-your-own API key are encrypted at rest. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

Cookies

We use essential cookies to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

Data retention & your rights

We keep your information for as long as your account is active. You can access and edit your links, tags, notes, and collections at any time in the app. To export or permanently delete your account and associated data, contact us at support@downeastventures.com. Depending on your location, you may have additional rights to access, correct, or delete your personal data.

Children

quiklink is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you.

Contact

Questions about this policy or your data? Email support@downeastventures.com.