Privacy policy

Happy Biz FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Privacy contact: hello@qilyo.com.

• Identity, account, organisation, language and authentication data.
• Billing, subscription, invoice and payment references; card details are handled by Stripe and are not stored by Qilyo.
• Sites, keywords, personas, briefs, articles, media, analytics and configuration you provide.
• Technical, security, usage and diagnostic logs.
• Cookie-free audience measurements for public pages: approximate country and region, strongly rounded location, page viewed and time slot. Qilyo does not retain the visitor’s raw IP address or create an advertising identifier for this measurement.

We process data to create and secure accounts, provide contracted features, manage billing and support, prevent abuse, improve reliability and meet legal obligations. Depending on the processing, the basis is contract performance, legitimate interest, consent or legal obligation.

Data is accessible only to authorised Qilyo personnel and processors needed to operate the service, such as Supabase, Vercel, Stripe, Brevo and configured AI/SEO providers. Only data necessary for each operation is shared.

Some processors may handle data outside your country. We rely on the safeguards offered by those providers and, where required, appropriate contractual or legal transfer mechanisms.

Account and service data is kept while the account is active and then for the period needed for deletion, dispute handling, security and legal obligations. Billing records may be retained for statutory accounting periods. Security logs are retained only as long as reasonably necessary. Aggregated public-site audience data is automatically deleted after 400 days.

We use access controls, tenant-scoped database policies, encrypted transport, server-only secrets and operational safeguards. No system is risk-free; please report suspected incidents promptly.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact hello@qilyo.com. We may verify your identity before responding.

Qilyo uses cookies and local security tokens required for authentication, session protection, language preferences and payment return flows. Its first-party public-site audience measurement does not use cookies and is aggregated by time slot and approximate location. Google Analytics is not loaded on the public website, and no advertising storage or personalisation is activated.

We may update this policy when the service or legal requirements change. Material changes will be communicated through an appropriate channel.