Quikturn Privacy Policy

1) Who we are

Quikturn, Inc. ("Quikturn," "we," "us," or "our") provides software that helps users generate presentation slides and related assets. This Privacy Policy explains how we handle Personal Data when you visit our websites, create an account, or use our products and services (collectively, the "Services"). It also explains choices and rights you may have.

Unless stated otherwise, Quikturn is the controller of Personal Data we collect about website visitors, prospects, and account holders. For content you upload into the Services (e.g., logos, text, images, prompts) on behalf of your business, Quikturn typically acts as a processor to your organization (the Customer). Our Data Processing Addendum (DPA) applies to processor mode handling when executed by both parties.

2) Notice at Collection (California)

We collect the categories of Personal Data listed below for the business purposes described in Section 5. We do not sell Personal Data and we do not share Personal Data for cross context behavioral advertising. If this changes, we will update this Policy and provide required mechanisms to opt out.

3) What we collect and how we obtain it

4) How we use Personal Data (purposes)

• Provide and secure the Services: create and manage accounts, deliver features, generate outputs, host and back up data, prevent fraud and abuse, and maintain security.
• Customer support and communications: respond to requests, provide updates, and send transactional emails.
• Billing and administration: process payments, tax, and accounting.
• Analytics and improvement: assess feature usage, reliability, and performance, and improve user experience (using de identified or aggregated data where possible).
• Compliance and enforcement: comply with law, enforce terms, and protect rights, privacy, safety, and property.

AI/Model training. Unless you opt in, we do not use your Customer Content or Output to train foundation models made available to other customers. We may use de identified operational metrics to improve reliability and security.

5) Legal bases (EEA/UK/Switzerland)

Where GDPR/UK GDPR applies, our processing is based on: Contract (to provide the Services), Legitimate Interests (e.g., security, analytics, product improvement in ways that do not override your rights), Consent (where required for non essential cookies/marketing), and Legal Obligation (e.g., tax, accounting, responding to lawful requests).

6) Cookies and similar technologies

7) How we disclose Personal Data

We disclose Personal Data to:

• Service providers / subprocessors who help us operate the Services (hosting, storage, authentication, email, analytics, customer support, payments). We require them to process Personal Data only on our instructions.
• Enterprise Customer administrators (for organizational accounts) who can access and manage users and content in their workspace.
• Legal and safety recipients when required by law, subpoena, or to protect rights, privacy, safety, or property.
• Corporate transactions (merger, acquisition, financing, or sale of assets), subject to standard confidentiality.

We do not sell Personal Data. We do not share Personal Data for cross context behavioral advertising. If we introduce advertising features in the future, we will update this Policy and provide opt out mechanisms.

8) Data retention

We keep Personal Data only as long as necessary for the purposes described or as required by law. Typical retention periods:

• Account data (identifiers): life of account + 2 years after closure.
• Billing/transaction records: 7 years.
• Product telemetry/analytics: up to 12 months (aggregated thereafter).
• Security logs: 90 days (unless needed for investigations).
• Support records: up to 24 months.
• Customer Content and Outputs: as directed by the Customer and for as long as the account remains active, plus a limited period for backups.

We may retain de identified or aggregated data that does not identify you.

9) Security

We use administrative, technical, and physical safeguards designed to protect Personal Data appropriate to the nature of the data and our Services. No method of transmission or storage is 100% secure. You are responsible for safeguarding your account credentials and for using strong passwords and multi factor authentication where available.

10) International data transfers

If we transfer Personal Data outside the region where it originated, we implement appropriate safeguards, such as Standard Contractual Clauses for EEA/UK transfers, and conduct transfer risk assessments as applicable. You can contact us for a copy of the relevant safeguards, subject to redactions.

11) Your rights and choices

12) Automated decision making

We do not use automated decision making that produces legal or similarly significant effects about you without human involvement.

13) Third party services and links

The Services may link to or integrate with third party sites and services. Their privacy practices are governed by their own policies. Review those policies when you interact with third party services.

14) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide notice (e.g., by email, in product message, or banner) and indicate the effective date at the top. Your continued use after the effective date means you accept the revised Policy.

15) Contact us

16) Region specific notices (supplements)

17) Definitions

• Personal Data / Personal Information: information that identifies, relates to, describes, or can reasonably be linked to an identified or identifiable individual.
• Customer Content: content you or your organization provide to the Services, including prompts, files, logos, brand assets, templates, and outputs.
• Processor / Controller: roles described by applicable data protection laws, including GDPR/UK GDPR.