Privacy Policy

QKAP (“we”, “us”) provides shoppable link-in-bio storefronts for creators. This policy explains what we collect when creators use their account, and when visitors view a storefront, tap a link, save a product, join a deal-alert list, message a creator or send a report. It works alongside our Terms of Service.

When you create and run a storefront, we store:

• Account details: your email address, username, a securely hashed version of your password, and whether you have confirmed your email address. We never store your password in plain text.
• Profile and appearance: display name, bio, avatar, banner, accent colour, theme, layout and button style, social handles, website, link buttons and affiliate disclosure text.
• Storefront content: posts, cover images, captions, categories, links to your original posts, collections (highlights), and products with their titles, links, images, prices, coupon codes and deal end times. We also store whether each post is a draft, scheduled, live or archived, its scheduled time, and the short link codes for your posts and products.
• Imported pages: if you use “Import a page”, we open the public page you paste (for example on Linktree, Wishlink or Stan) and copy its profile, look, links, products and images into your QKAP page. We only keep what ends up on your page; the page you imported from is not stored.
• Settings: your timezone, affiliate tag rules, Amazon sub-tag template and whether followers are offered the store's app.
• How you found us: when you sign up, we save the kind of site that first brought you to QKAP in that browser session (such as a search engine or an AI assistant), its domain name, the first QKAP page you opened, any campaign tags in that link and the date, unless you declined analytics cookies or your browser sends Do Not Track or Global Privacy Control.
• Security details: your signed-in sessions and, if you turn it on, two-factor login. See Account security.
• Moderation: if an account is suspended, the date and the reason.
• Billing: if you start a QKAP plan or its free trial, your plan (Starter, Pro or Premium (legacy)), subscription status and dates (including when a trial started and ends), your Dodo Payments customer and subscription ids, a summary of each payment (amount, date, status and invoice link) and any complimentary plan granted by our team. We never receive your card or UPI numbers.
• Free trial record: when you start a free trial, we keep a one-way fingerprint (a salted hash) of your email address and the date, so each person gets one trial. It isn't stored in readable form, but we can match it if the same email address is used again, which is how a second trial is refused.

When you paste a product link, our server visits that page to suggest a title, image and price, and saves a resized copy of the image with your product. To warn you about broken links, our server also checks your published product links from time to time. These checks identify themselves as an automated link checker, and for direct store links we remove affiliate and tracking tags before checking, so a check doesn't look like a shopper's click.

To keep your account safe, we store:

• Sessions: a one-way hash of each session token with its expiry, when the session started, an approximate “last active” time, and the browser user agent sent when you logged in. We use the user agent only to show a label such as “Chrome on Android” in your list of signed-in devices. We don't store IP addresses for sessions.
• Two-factor login: if you turn it on, your authenticator secret is encrypted before it is stored, and your recovery codes are stored only as one-way hashes. We also keep when two-factor login was turned on and the time slot of the last accepted code, so the same code can't be used twice.
• Google sign-in: we removed “Continue with Google” on October 29, 2026 (it used Firebase Authentication, a Google service), and we no longer receive anything from Google to log you in. For accounts that used it, we keep the Google account ID it linked, stored with the account and deleted with it. For a buyer account, we use it only to show creators that Google confirmed an email address you share with them.
• Email links: password reset and email confirmation links contain a single-use token that expires (30 minutes for a reset, 24 hours for a confirmation). We store only a hash of the token, the address it was sent to and when it was used.

In your dashboard, Settings → Security shows your signed-in devices. You can sign out any of them and turn two-factor login on or off there. Turning two-factor login on signs out your other devices.

When someone views a storefront, taps a Shop button, taps one of a creator's link buttons or taps a cafe or restaurant's order, booking, review, directions or call button, we record an event so the creator can see how their page performs. Each event contains only:

• Which storefront, post, product, link or button was viewed or clicked, and when.
• A hashed daily visitor ID. We combine the visitor's IP address and browser user agent with a secret key and the current date, run it through a one-way hash (SHA-256) and keep only the result. It lets us count unique visitors for a day, cannot be turned back into an IP address, and changes every day, so it can't be used to follow someone over time.
• Device type: mobile, tablet or desktop, worked out from the user agent.
• Referrer host: just the name of the website that sent the visitor, such as instagram.com, never the full address of the page.
• Traffic source: a label such as Instagram, YouTube, WhatsApp, search engines or AI assistants, worked out from a creator's short link (for example one ending in ?src=ig), the referring website, a campaign tag in the link (utm_source, such as chatgpt.com), or the app whose built-in browser opened the page. When only the campaign tag names the site, that site's name is stored as the referring website.

We do not store raw IP addresses or full user agents with analytics, and we ignore known bots and link-preview crawlers. If a creator has turned on opening links in store apps, the user agent is also checked at the moment of a click to see whether the visitor is in an Android in-app browser; that check is not stored. To protect the service from abuse, IP addresses are used briefly in memory for rate limiting and are not written to our database. Like most websites, our hosting infrastructure may keep short-lived technical logs, which can include IP addresses, for security and troubleshooting.

To show QKAP plan prices in your currency, our pricing pages look up the country of your IP address on our own server, using a built-in copy of the IP2Location LITE database (no request goes to anyone else). Only the country is used, and neither it nor the IP address is stored. You can pick a different country on the pricing page; checkout charges by your billing address. This site includes IP2Location LITE data available from lite.ip2location.com.

Visitors can save products on a storefront. That list is kept in their own browser (see Cookies and local storage). When the Saved page is opened, the browser sends us the saved product IDs so we can show current details, and we don't keep that list.

Creators can add a sign-up form to their storefront so followers can get deal alerts by email. If you sign up, we store:

• Your email address and the creator whose list you joined.
• The exact consent text you agreed to, and when you signed up.
• The storefront page you signed up from, such as /priya or /priya/p/12.
• A one-way hash of your personal unsubscribe link, so the link works without us storing the link itself.

We don't store your IP address with your sign-up. Your email address is visible only to the creator whose list you joined, in their dashboard and in the list they can download. It isn't shown publicly, to other creators, or in our admin tools. Once a creator downloads their list, they are responsible for using it only as you agreed and as the law requires.

Creators can send emails to their list through QKAP (for example a new product or a discount). Every such email includes your unsubscribe link. We send them only on the creator's instruction and don't use your address for anything else.

You can leave a list at any time with the unsubscribe link shown after you sign up. It deletes your sign-up straight away. If you sign up again with the same email, you get a new link and the old one stops working. The creator can also remove you, and deleting a creator's account deletes their whole list. Lost your link? Ask the creator, or contact us.

When you order from a creator's shop on QKAP (a download, course, membership or coaching call), we store, on behalf of that creator:

• Your name, email address and, if you give it, your phone number.
• Your answers to any questions the creator asks at checkout.
• What you ordered, the price, any discount code, the time you booked (for calls), and the payment reference you enter after paying, such as a UPI transaction ID.
• A one-way hash and an encrypted copy of your private access link, so the creator can resend it to you if you lose it.
• If you buy a gift: the recipient's name, email address and your note, so they can be sent their own link.
• For courses: which lessons you've marked complete, to show your progress and issue any certificate.
• If you leave a review: your rating, your words and the display name you choose. Once the creator approves it, that review is public on the product page.
• If you join a product's waitlist: your email (and name, if you give it), so the creator can tell you when it opens.

You pay the creator directly. QKAP never sees or stores your card, bank or UPI details. Your order details are visible to the creator you bought from, who uses them to confirm your payment and deliver what you bought, and may contact you about your order. If you tick the box to get the creator's emails (or grab a free lead magnet, which is offered in exchange for joining their list), your email is added to their list as described above.

We keep order records while the creator's account exists, so you can keep accessing what you bought. Unpaid orders are cancelled automatically after 7 days. Deleting a creator's account deletes their orders and shop files. To have your order data removed, ask the creator, or contact us.

Creators can add a message button to their page. To send a message you need a QKAP follower account. We store your messages, the request type, subject and any brand details you add, the creator's replies, and when each was sent. A conversation is visible to you, the creator, and the team members the creator gives inbox access. The creator sees your name, and your email address only if you tick “Share my email” (you can stop sharing it in the conversation). Replies show the page's name, not which team member wrote them. If email is set up, we may email you when the creator replies, without the message itself. The creator can block you. We don't use the content of your messages for advertising.

Anyone can report a storefront or post that seems to break our Terms of Service. A report stores:

• The storefront, plus the post and its number if you reported a post.
• The reason you picked and any details you typed.
• An anonymous daily ID, created the same way as the visitor ID above. It is used only to stop duplicate reports and abuse of the report form.

We don't ask for your name or email and don't store your IP address with a report, so please don't include personal information in the details. Reports are reviewed only by our administrators, who may add a note when they resolve one. Reports are not shown to the creator you reported.

If you share a quote from your dashboard, we store the quote, the name you typed, the optional “what you promote” line, the exact consent sentence you ticked and when you ticked it. Once an admin approves it, the quote appears on our homepage (and may appear on our social media) with your name, profile photo and a link to your page. You can withdraw it any time from your dashboard overview; it then disappears from the homepage on the next page load, and we keep the withdrawn record so we can show you agreed at the time. Quotes we receive outside the app are only published with your written permission, and the note about that permission is stored the same way.

Auto-DM is optional. If you connect an Instagram professional account, QKAP receives from Instagram (Meta) your Instagram account id, username and profile photo, an access token, and your recent reels and posts (caption, link, thumbnail). The token is stored encrypted and is used only to read comments on your reels, send the private reply you set up to people who comment your trigger word, and post your optional public reply.

For each comment we check, we keep the commenter's username, the comment text (first 300 characters) and what happened, so you can see the activity log. These records are deleted automatically after 30 days. We don't use Instagram data for advertising, don't sell it and don't share it with anyone else.

Disconnecting Instagram in your dashboard, removing QKAP under Instagram's “Apps and websites”, or sending a data deletion request through Meta deletes the connection, token and reels list straight away (removal through Meta also deletes the activity log).

Chloe is an optional chat helper on our website and in the creator dashboard that answers questions about QKAP. When you chat with Chloe we store your messages and Chloe's answers, any thumbs up or down you give, the QKAP page you were on, the site language, the time, and an approximate country worked out from your IP address (the IP address itself is not stored). If you are signed in, the chat is linked to your account. If you aren't, it is linked to a random id kept in the qk_chloe cookie (we store only a hash of it).

Processed by Anthropic. To write each answer, your messages (the latest question and up to about ten earlier turns of the same chat) are sent to Anthropic, the provider of the AI model behind Chloe, which processes them on our behalf. In the dashboard we also send a few facts so answers fit your account: your plan (for example Starter, Pro or a free trial) and whether your page is published, your page's username, the dashboard page you're on and, if you help run someone else's page, your team role. We never send your email address, password, orders, payment details or your followers' data. See Anthropic's privacy policy.

Kept for up to 180 days. Chats are deleted automatically 180 days after they start. Until then, our team may read them to improve our support, our help content and Chloe's answers. Please don't share passwords, codes or payment details in the chat. Your browser also keeps the current chat in local storage for up to 7 days so it survives a page change; “New chat” clears it. To have your chats deleted sooner, contact us.

Our essential sign-in cookies aren't readable by scripts:

• tlc_session keeps creators signed in. It is set only when you log in and expires after 30 days without activity.
• tlc_2fa is set only while you log in to an account that uses two-factor login, after your password is accepted. It lasts 5 minutes and only lets that browser enter a code.

While you connect Instagram for Auto-DM, a third short-lived cookie, qkap_ig_state, protects the login for 10 minutes. Buyers who log in get qk_customer. If you chat with Chloe, qk_chloe holds a random id for one year so your chat can continue and our chat limits work (see Chloe, our AI helper).

Analytics cookies (optional). Where we have turned it on, a banner asks whether we may use Google Analytics (Google Analytics 4, through Google's Firebase). Nothing is loaded unless you choose Accept, and we treat Do Not Track and Global Privacy Control as a No. If you accept, Google Analytics sets its own cookies (_ga and _ga_*) and Google receives the pages you visit on QKAP (with private parts of web addresses removed), your browser and device type, an approximate location Google derives from your IP address, and a few events: signing up, logging in, viewing a product, starting a checkout and placing an order (the product, amount and currency only). We never send names, email addresses, order details or anything you type, and Google signals and ad personalisation are off. Analytics never runs in our admin pages, in the buyer area or on private order, reset and invitation links. Right after you sign up or log in, a qk_ae cookie holding only the event name lasts up to 2 minutes so the next page can count it (it is deleted unused if you declined). Your choice is remembered in a qk_consent cookie; you can change it on our Cookie Policy page. Google processes this data under the Google Privacy Policy.

We don't use advertising or cross-site tracking cookies, and visitors browsing a storefront don't receive any cookies from us unless they accept analytics cookies. A creator may add their own Meta, Google or TikTok pixel to their page; it loads only if the visitor accepts on that page's banner, and receives no names, emails or phone numbers (see our Cookie Policy).

Some features keep small notes in your browser's local storage instead. They stay on your device and are not sent to us automatically:

• Products you saved on a storefront, and when you saved them.
• A note that you joined a creator's deal-alert list, so the form shows you're on it.
• For creators, dashboard preferences such as a dismissed “What's new” card, and backups of unsaved post drafts.
• Your current chat with Chloe (its id and recent messages), for up to 7 days.

On our own website and the sign-up and log-in pages, the browser's session storage also keeps a note of how you first arrived in that tab (qk_first_touch): the kind of site that sent you, its domain name, the first QKAP page you opened, any campaign tags in that link and the date. It is gone when you close the tab and is only sent to us if you sign up (see “How you found us” under Information from creators). Nothing is kept if you decline analytics cookies or your browser sends Do Not Track or Global Privacy Control.

You can clear local storage at any time in your browser settings. Our Cookie Policy lists everything we store.

We send email only about your account, and only once email delivery is switched on for the service:

• About your plan: a confirmation when your free trial or plan starts, a reminder a few days before your trial ends and you are charged, a payment confirmation, a notice when a payment fails, a notice a few days before your page would go offline, and a notice when your plan ends. Invoices and receipts are emailed by Dodo Payments.
• Service notices about changes to QKAP's plans that affect your page, such as the notice (and a reminder before the date) that a page published before plans changed needs a plan to stay online. These are sent even if you haven't confirmed your email address.
• A link to reset your password, when you ask for one.
• Message notices: to a creator when someone writes to them through their message button (they can turn these off in Inbox settings), and to a follower when the creator replies. They never include the message itself.
• A link to confirm your email address, after you sign up or change it.
• Notices when your password or two-factor login settings change, and a notice to your old address when your email address changes, with the new address partly hidden.

We don't send newsletters or marketing emails. Our emails contain no images, tracking pixels or third-party content, and they are delivered by an email provider acting on our behalf.

• To run your account and publish your storefront, including scheduled posts, collections and short links.
• To show creators analytics about their own storefront.
• To let followers join a creator's deal-alert list, and give that creator their list.
• To deliver messages between followers and the creators they write to.
• To check that product links still work and warn creators about broken ones.
• To sell and manage QKAP plans and free trials, including checking which features an account can use, whether its page can be published, and that each person gets one trial.
• To keep the service secure, prevent spam, fraud and fake clicks, review reports, enforce our terms, and fix problems.
• To reply when you contact us and to send security emails about your account.
• To meet legal obligations.

We don't sell personal data, and we don't use it for advertising.

• Public by design: your storefront, including your username, display name, avatar, banner, bio, social and link buttons, disclosure, collections, live posts and their products, can be seen by anyone with the link and may be indexed by search engines. Drafts and archived posts stay private, and scheduled posts stay private until their scheduled time. Your email address is never shown.
• Creators see aggregate analytics for their own storefront only, never the identity of individual visitors. They also see the email addresses of people who joined their own deal-alert list, and the name of each follower who messages them (with the email address only if that follower chooses to share it).
• Our administrators, the small team that runs the service, can see account details such as username, email address, sign-up date, post counts, whether an email address is confirmed, whether two-factor login is on, and each account's plan and subscription status. They review reports and can suspend accounts, sign them out, unpublish posts or grant and withdraw complimentary plans, and we keep a record of each of those actions. Subscriber lists aren't shown in our admin tools.
• Service providers such as our hosting provider, and our email provider when email is switched on, process data on our behalf to run the service, under confidentiality obligations.
• Dodo Payments, the merchant of record for QKAP plans, receives your email address, name, billing country and address, and the payment details you enter on Dodo's checkout and billing portal pages. We never receive card or UPI numbers. We store your plan, subscription status and dates, your Dodo customer and subscription ids and a summary of each payment (amount, date, status, invoice link). See Dodo Payments' privacy policy.
• Google provides Google Analytics, which runs only if you accept analytics cookies. See Cookies and local storage for exactly what it receives.
• Anthropic provides the AI model behind Chloe and receives what you type in a chat with Chloe, as described in Chloe, our AI helper.
• Legal reasons: we may disclose information if required by law, or to protect the rights, safety and security of our users and the public.
• Business changes: if QKAP is merged or sold, data may transfer to the new owner, who must continue to protect it as described here.

Shop buttons take visitors to third-party stores such as Amazon or Flipkart. If a creator has turned on opening links in store apps, Android visitors in an in-app browser may be taken to the store's own app instead. Those stores and apps, and any affiliate networks involved, may set their own cookies and collect information under their own privacy policies. We don't control them, so please review their policies before you buy.

Cafe and restaurant pages can show a map from Google Maps. It loads only when you tap Show map, and Google then receives your IP address and may set cookies under its own privacy policy. Order, booking and review buttons take you to those apps or sites, which have their own policies.

Plan checkout and the billing portal are pages hosted by Dodo Payments. When you open them, Dodo processes your payment and may set its own cookies under its own privacy policy. Invoices and receipts are emailed by Dodo, not by us.

• Account, profile and storefront content: until you edit it or delete your account.
• How you found us (saved when you signed up): until you delete your account.
• Analytics events: while your account is active, so you can see trends over time. They are deleted with your account.
• Sessions: until you log out, sign that device out, or they expire. Email links stop working once used or expired, and expired links are cleaned up automatically.
• Two-factor secrets and recovery codes: until you turn two-factor login off. Used or replaced recovery codes no longer work.
• Messages between followers and creators: until the creator deletes the page or their account, or the follower account is deleted. Either deletes the conversation.
• Deal-alert sign-ups: until you unsubscribe, the creator removes you, or the creator deletes their account.
• Billing records (your plan, subscription and payment summaries): for as long as tax and accounting law requires, then deleted with your account where the law allows. Dodo Payments keeps its own records under its own policy.
• Free trial record (the hashed email fingerprint): kept after your account is deleted, so a trial can't be used again by signing up anew. It holds no readable email address, but it can be matched if the same email address is used again.
• Instagram Auto-DM: the connection and token until you disconnect; the comment activity log for 30 days.
• Chats with Chloe: up to 180 days from the start of the chat, then deleted automatically.
• Reports: while the reported account exists, so repeated problems can be spotted. They are deleted with that account.
• Records of administrator actions (the administrator's email, the action, the affected username and any reason or note): kept even after the accounts involved are deleted, so moderation decisions stay accountable. They don't contain storefront content.
• Where backups exist, deleted content may remain in them for a short period before it is overwritten.

Passwords are hashed with Argon2. Session tokens, email-link tokens and recovery codes are stored only as hashes, two-factor secrets are encrypted, cookies are HTTP-only, and the site is served over HTTPS. Links are checked before our server fetches them. You can turn on two-factor login and review your signed-in devices at any time. No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect a problem.

You can view and update your profile and storefront at any time from your dashboard, download your posts, analytics and deal-alert list as CSV files, and delete your account from Settings. Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR, you may also have the right to access, correct, erase or port your personal data, to withdraw consent, and to complain to a data protection authority.

Visitors: because analytics and reports use a daily-changing hashed ID rather than names, emails or IP addresses, we generally cannot link them to you. Deal-alert subscribers can withdraw consent at any time with their unsubscribe link. Contact us if you have a question or request and we will help where we can.

Creator accounts are for adults. QKAP is not directed at children under 13, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

If we change how we handle data, we will update this page and the “Last updated” date. For significant changes, we will make reasonable efforts to let creators know in advance.

Questions, requests or concerns about privacy? Email support@qkap.app and we'll get back to you.