This policy explains how Forthquill handles personal information when you use our website, app, workspace features, and client review or upload links. Forthquill LLC (“Forthquill,” “we,” or “us”) operates the service.
1. What this policy covers
This policy covers information processed through Forthquill. It does not govern Canva or a social network you connect; those services handle information under their own policies. If you add information about your clients or their customers, you are responsible for deciding what to provide and for having permission to use it.
2. Information we collect
- Account and workspace details: name, email, login/session identifiers, role, workspace settings, plan assignment and service activity.
- Workspace content: brand questionnaire answers and documents, writing samples, ideas, notes, posts, drafts, graphics, photos, tags, projects, tasks, comments, approvals, reports and files you or your collaborators add.
- Connected services: if you connect Canva or a supported social account, we process account identifiers, permissions, credentials needed to provide the connection, content you choose to import or publish, and metrics that service makes available. Availability depends on product support, your account, authorization and any third-party review.
- AI credentials and use: if you provide your own OpenAI or Anthropic API key, we store it for requests you initiate. For eligible Agency and Scale plans, we record AI usage against the owner’s shared monthly allowance.
- Billing: Stripe processes payment details. We may receive billing contact details, subscription status, Stripe customer/subscription identifiers, and transaction records. Forthquill does not receive or store your full card number.
- Client review and upload activity: names or email addresses you provide, review-link activity, feedback, approvals, and files uploaded in response to a request.
- Operational information: basic request, security and error logs, and information you send to support. Our hosting providers may process network and device information, such as IP address and browser details, to deliver and secure the service.
3. How we use information
- Provide and secure accounts, workspaces, collaboration, project management, review and publishing features.
- Process the content and instructions you submit to an AI provider to return copy assistance or analysis you request.
- Connect to Canva or a social service when you authorize it, and perform the actions you request.
- Send service notices, review requests and scheduled reminders; maintain usage limits; troubleshoot errors; prevent abuse; and meet legal obligations.
We do not sell personal information or use workspace content to serve advertising. We do not use your workspace content to train Forthquill’s own AI models. OpenAI and Anthropic state that, by default, they do not train their models on inputs and outputs from their commercial/API services; their terms and settings govern their own handling. See OpenAI’s business-data information and Anthropic’s policy.
4. How AI features use your information
When you request an AI feature, Forthquill sends the relevant instructions and workspace context to the provider selected for that feature. This may include enabled brand questionnaire answers or document text, source material, and reference screenshots you choose to submit. A request uses the current workspace context; it is not intended to include another workspace’s private materials. Reference screenshots are sent for that request and are not automatically added to the photo library or attached to a finished post. A collection must fit the app’s request-size limit (currently 24 MB total).
Studio users supply their own OpenAI or Anthropic API key and are responsible for the provider account and charges. Agency and Scale AI requests use Forthquill’s configured Anthropic API connection and count against the applicable monthly allowance. The provider processes request content to return a response under its applicable API terms and privacy policy. Consumer chat subscriptions do not pay for API requests.
Forthquill uses AI to assist with writing, remixing and analysis. It does not generate artwork. You choose and edit the design in Canva; any Canva Autofill feature uses the approved copy, layout and photos you select.
5. Who receives information
- AI provider: the provider used for the request, as described above.
- Canva and connected social services: information needed for the Canva or network action you request, such as account authorization, selected media, copy, publishing details or metrics.
- Stripe: payment details are entered into Stripe’s secure checkout; Stripe processes payments, recurring billing and related records under its own terms and privacy policy.
- Infrastructure providers: hosting, database, file storage, email, security and error-monitoring providers that help operate Forthquill.
- Workspace collaborators: owners, teammates and the client reviewer can see information allowed by their role. A person holding an active no-login review link can access the specific review content and actions covered by that link.
- Legal, safety and business transfers: we may disclose information where required by law, to protect users or the service, or as part of a business transfer, subject to applicable law.
We require providers acting for us to protect information and use it only to provide their services, subject to their contracts and applicable law. We do not share personal information for cross-context behavioral advertising.
6. Google user data and YouTube
If and when you connect Google or YouTube features, Forthquill’s use and transfer of information received from Google APIs will follow the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used to provide the feature you request, not for advertising. You can revoke access in Google security settings. YouTube API Services are also subject to the YouTube Terms of Service and Google Privacy Policy.
7. Support access
Forthquill support may view workspace information only after the workspace owner approves a specific request. Access is temporary, read-only, separate from teammate seats and recorded in an audit log. Support access may expose the workspace information listed in the approval screen, but does not allow support to edit, generate, schedule, publish or delete content, change billing, or view stored API keys or social connection tokens. The owner can decline or revoke access.
8. Client review links and uploads
Workspace owners and teammates may invite one client reviewer per workspace. A no-login review link is scoped to the requested review and expires after 72 hours. Anyone who has the link may use it while active, so share it only with the intended reviewer. Upload requests let the reviewer submit requested files to that workspace; the owner and teammates with workspace access can see submitted files. The uploader enforces file-type and size limits shown when a request is made.
9. Retention and deletion
We retain account and workspace information while your subscription is active. If you ask us to delete your account or workspace, email maria@mariacrider.com. We will schedule deletion for the end of your current paid billing period so you keep access through that date, then delete the account and workspace content we control. If you subscribe again after deletion, you will start with a new, empty workspace; deleted content cannot be restored.
We may retain limited payment, tax, security or legal records where required or permitted by law. Copies in backups may persist until those backups are overwritten or expire under routine operations. Disconnecting a third-party account stops future access through that connection but does not necessarily remove information already stored in Forthquill or revoke Forthquill’s permission at the third party. Archive and restore controls organize content; archiving is not deletion.
10. Security
We use technical and organizational safeguards designed to protect information, including access controls and protected handling of API credentials and connection tokens. No internet service can guarantee absolute security. If a security incident requires notice under applicable law, we will provide that notice as required.
11. Cookies and browser storage
Forthquill uses essential cookies and browser storage for sign-in, security and app preferences. Your browser can block or delete these, but sign-in and some features may then stop working. If we add non-essential analytics or advertising technologies, we will update this policy and provide any choices required by law.
12. Your choices and rights
You can manage workspace content, collaborators and connected accounts in the app where those controls are available. Depending on your location, you may have rights to access, correct, delete, receive or restrict use of personal information. To make a privacy or deletion request, contact maria@mariacrider.com. We may need to verify your identity and will respond as required by law. If you are a client reviewer or someone whose information a Forthquill customer added, contact that customer first; we will assist the workspace owner as appropriate.
13. International processing
Forthquill is operated from the United States. Our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for international transfers.
14. Children
Forthquill is designed for business users and is not directed to children under 18. Do not create an account if you are under 18.
15. Changes
We may update this policy as Forthquill changes. We will revise the date above and provide notice of material changes through the service or by email where appropriate.
16. Contact
Forthquill LLC
900 Plymouth Sorrento Rd
Plymouth, FL 32768
maria@mariacrider.com