Privacy Policy
Qootra LLC ("Qootra," "we," "us," or "our") provides an AI-native social media management platform that helps users plan, create, publish, manage, analyze, and improve social media workflows across supported platforms.
This Privacy Policy explains how we collect, use, share, and protect information, and describes the choices and rights you have. It applies to visitors to qootra.com, early-access and closed-beta participants, users, workspaces and teams, and — where we act on behalf of our customers — the people who interact with the social media accounts our customers manage through Qootra.
Table of Contents
1. Who We Are
Qootra LLC is a limited liability company registered in Wyoming, United States, with its mailing address at 1401 Pennsylvania Ave, Suite 105 #3189, Wilmington, DE 19806, United States.
Qootra is the data controller for account, workspace, billing, and website data. When you connect social media accounts, Qootra also processes engagement data — for example, comments and messages addressed to your accounts — on behalf of your workspace. In those cases you are the controller and Qootra is the processor.
Data Protection Officer
Qootra is not required to appoint a Data Protection Officer and has not appointed one.
EU/UK Representative
Before open launch, Qootra intends to designate representatives in the European Union and the United Kingdom under GDPR Article 27 and the UK GDPR. Their details will be published here once designated.
For privacy-related questions, contact:
2. Information We Collect
We collect information you provide directly, information generated through your use of Qootra, information received from connected social platforms, and information collected automatically — including when you request early access or browse qootra.com.
2.1 Account Information
When you create an account, we may collect:
• Name
• Email address
• Password or authentication credentials
• Profile information
• Role and permission settings
• Account preferences
• Login and session events
If you create or join a workspace, we may also collect:
• Workspace name
• Brand or business details
• Team member names and email addresses
• User roles and permissions
• Client or brand profiles (including Knowledge Hub context)
• Collaboration activity
• Workspace settings
2.2 Agencies and Client Workspaces
Qootra may be used by agencies to manage client social media operations.
Agency users may create separate workspaces for different clients. Each client workspace is treated as a separate workspace environment.
The agency is responsible for ensuring it has all necessary rights, permissions, and authority to manage each client's content, social accounts, data, publishing workflows, analytics, and connected platform access. Qootra is not responsible for disputes between agencies, clients, team members, contractors, or other workspace participants.
2.3 Billing and Subscription Information
If you purchase a paid plan, we may collect billing-related information such as:
• Billing name
• Billing email
• Billing address
• Subscription plan
• Payment status
• Invoice history
• Tax information, where applicable
Payment processing is handled by Polar, our Merchant of Record.
Full payment card numbers never reach Qootra — Polar collects and stores payment data under its own privacy policy.
2.4 Communications With Us
When you contact Qootra, we may collect:
• Your name
• Email address
• Message content
• Support requests, feedback, and bug reports
• Attachments or screenshots you choose to provide
2.5 Automatically Collected Information
When you use Qootra, we may collect technical and usage information such as:
• IP address
• Browser type and version
• Device information
• Session metadata
• Authentication and session events
• Request and error logs
• Feature usage and interaction events
• Performance and reliability telemetry
These are processed with the help of the service providers listed in Section 8 — including PostHog (product analytics, which you can opt out of in your account settings), Sentry (error monitoring), and Axiom (log analytics).
2.6 Sensitive Personal Information
Qootra does not intentionally require sensitive personal information to use the service. Please do not submit sensitive information (for example government IDs, financial account numbers, health information, biometric data, or precise geolocation), unless necessary and you have the right and lawful basis to provide it.
3. Information From Connected Social Platforms
Qootra allows users to connect supported third-party social media platforms and business profiles. Depending on the platform, the permissions you approve, and the features you use, Qootra may access, collect, process, or store information from platforms such as:
• TikTok
• YouTube
• Twitter/X
• Bluesky
• Google Business Profile
• Tumblr
This list is illustrative and may change as Qootra adds or removes platform integrations. We only access platform data after you authorize Qootra through that platform's official authorization flow, and only within the permissions (scopes) you approve.
3.1 Connected Account Information
3.2 Content and Publishing Data
3.3 Engagement and Inbox Data
• Comments
• Replies and mentions
• Messages or conversations
• Engagement activity
• Sender or commenter profile information
• Conversation timestamps
• Moderation status, assigned team members, and internal notes
For this data, the people who comment on or message your accounts are typically your end users: you are the controller and Qootra processes this data on your behalf (see Section 1).
3.4 Analytics and Performance Data
3.5 Platform Limitations
4. Information Created Inside Qootra
• Content calendars, campaigns, drafts, ideas, and briefs
• Uploaded media
• Brand guidelines and voice settings (including Knowledge Hub context)
• Audience notes and content pillars
• Automation rules
• Inbox assignments and internal comments
• Analytics reports
• AI-generated suggestions
• Workspace activity logs
5. AI Features, Orcai, and Knowledge Hub
5.1 Data Used by AI Features
AI features may process:
• Prompts and instructions you provide
• Workspace and brand context (including Knowledge Hub)
• Draft and published content
• Analytics context
• Engagement or inbox context, if enabled
• Automation settings
• Your feedback on AI outputs
5.2 How AI Features Are Used
AI may assist with:
• Content ideation and drafting
• Strategy suggestions
• Analytics summaries
• Workflow and automation suggestions
• Brand voice consistency
5.3 AI Output Disclaimer
AI-generated output may be inaccurate, incomplete, outdated, biased, or unsuitable for your use case. You are responsible for reviewing and approving outputs before use or publication.
You retain ownership of content you create. AI outputs do not transfer intellectual property rights to Qootra, and you are responsible for ensuring content does not infringe third-party rights.
Do not input personal data of others into AI features unless you have a lawful basis to do so.
5.4 AI Providers
Qootra routes AI requests through OpenRouter, which provides access to supported AI models. Prompts and responses are processed solely to generate a response for you. OpenRouter does not store your prompts or responses by default and does not sell or share them.
Qootra has disabled provider training and prompt logging on our AI routing and excludes endpoints that train on user data. A list of AI models currently used is available on request.
5.5 AI Training and Model Improvement
Qootra uses workspace data and user-provided inputs to provide AI features within your workspace.
Qootra does not sell connected social platform data.
Qootra does not use your content, workspace data, or connected platform data to train third-party foundation models.
6. How We Use Information
• Create and manage accounts
• Operate workspace and team permissions
• Connect social accounts
• Schedule, publish, and manage content
• Provide inbox and engagement workflows
• Provide analytics and reports
• Generate AI suggestions and maintain Knowledge Hub context
• Provide automations
• Process payments and subscriptions
• Provide customer support and service communications
• Operate, secure, and improve the platform
• Detect abuse, fraud, spam, or unauthorized activity
• Comply with legal obligations
• Enforce our Terms of Service and Acceptable Use Policy
7. How We Share Information
Qootra does not sell personal information.
Qootra does not share personal information for cross-context behavioral advertising.
Qootra does not use advertising or retargeting cookies.
We may share information:
• With service providers that help us operate Qootra, under contract (listed in Section 8 and on our Subprocessors page)
• With connected platforms, when you publish, schedule, or analyze content through them
• With workspace members, according to their permissions
• For legal and safety reasons — complying with law, responding to lawful requests, protecting Qootra, users, or the public, and enforcing our Terms
• In connection with a business transfer (merger, acquisition, or sale of assets), with appropriate protections and notice
8. Third-Party Services and Providers
Qootra uses third-party providers to operate the service, including:
• Polar — payments and billing (Merchant of Record)
• Cloudflare — hosting, security, delivery, infrastructure
• Neon — database infrastructure
• Railway — background worker and job-queue infrastructure
• Redis Cloud — Orcai agent memory; development job-queue infrastructure
• Upstash Redis and QStash — sessions, caching, rate limiting, async job dispatch
• Resend — transactional email
• PostHog — product analytics (where enabled)
• Sentry — error monitoring (where enabled)
• Axiom — log analytics (where enabled)
• OpenRouter — AI model routing
• The social platforms you choose to connect
These providers process information only as needed to provide services to Qootra or to you, under contractual protections. Current details — including purpose and data categories per provider — are on our Subprocessors page. Their own privacy policies also apply to their services.
9. Cookies and Tracking Technologies
• Authentication and session management
• Security
• Load balancing
• Remembering your preferences
No advertising or retargeting cookies.
Qootra does not run advertising pixels or cross-site tracking on qootra.com or in the app.
Product analytics inside the app (PostHog) can be opted out of in your account settings. Public website measurement is collected in a privacy-preserving way.
Where we later introduce optional cookies of any kind, we will ask for your consent first, as required by applicable law.
10. Data Retention
10.1 Account and Workspace Data
We retain account and workspace data while your account is active. If you delete your account, data is deleted or anonymized within 30 days, unless we must retain it for legal, billing, security, fraud-prevention, or compliance reasons.
10.2 Connected Platform Data
We retain connected platform data (including access tokens) only while the connection is active or as needed to provide features, comply with platform requirements, or meet legal obligations. If you disconnect a social account, we stop collecting new data from that account, and engagement data is deleted within 30 days (subject to the YouTube timeline in Section 11).
10.3 Backups
Deleted information may remain in encrypted backups for up to 35 days before secure deletion or overwrite.
10.4 Aggregated/De-Identified Data
We may retain aggregated, anonymized, or de-identified data that does not identify individuals or workspaces.
11. Data Deletion and Account Disconnection
You may request deletion of your personal information, workspace data, or connected platform data via privacy@qootra.com, via support@qootra.com, or through the request form on our website. We verify requests before acting and aim to complete verified deletion requests within 30 days unless law or platform rules require otherwise.
11.1 Operational Deletion Flow
Deletion may occur in stages — for example, account/workspace access revocation, or soft-deletion followed by downstream purge or anonymization according to retention and legal obligations.
11.2 Disconnecting Social Accounts
You may disconnect social accounts in workspace settings (if available), and you may revoke Qootra's access directly from the relevant platform's account, security, or connected-app settings. After disconnection, Qootra stops collecting new data from that platform account.
11.3 Workspace and AI Context Deletion
Workspace deletion requests may include deletion or anonymization of associated content, drafts, calendars, analytics, inbox data, automation rules, Knowledge Hub context, and AI memory associated with that workspace. Some data may be retained where required for legal, billing, security, or compliance purposes.
11.4 YouTube API Data
If YouTube is connected and you revoke access or request deletion of stored YouTube API data, Qootra will delete applicable stored YouTube user data as soon as reasonably possible and within 7 calendar days, unless retention is required by law.
You can revoke access via Qootra or through Google's security settings page:
For details on how Qootra handles Google user data, see also Google's Privacy Policy:
12. Your Privacy Rights
Depending on your jurisdiction, rights may include:
• Access to your personal information
• Correction of inaccurate information
• Deletion of personal information
• Portability / export of a copy
• Objection to or restriction of certain processing
• Withdrawal of consent
• Opt-out of marketing communications
• Filing a complaint with a data protection authority
California residents
Qootra does not sell personal information and does not share personal information for cross-context behavioral advertising.
EU / EEA / UK residents
To exercise any right, contact privacy@qootra.com or use the request form on our website. We may verify your identity before completing a request.
13. Google, YouTube, and Google Business Profile Data
When you connect Google services, Qootra accesses only the data you authorize, for the purposes described in this policy — such as account connection, content management, publishing workflows, analytics, and reporting.
Qootra does not sell Google user data.
Qootra does not use Google user data for unauthorized advertising purposes.
Qootra does not use Google user data to train third-party foundation models.
You can revoke Qootra's access to Google services through your Google account permissions or through Qootra's account connection settings. Your use of Google services is also subject to Google's own privacy policy and terms.
14. International Data Transfers
Qootra LLC is based in the United States. If you access Qootra internationally, your data may be transferred to, stored in, and processed in the United States or other countries where Qootra or its service providers operate.
Where required by law, we safeguard international transfers using Standard Contractual Clauses approved by the European Commission (EU/EEA), the UK International Data Transfer Agreement / UK Addendum (United Kingdom), and applicable transfer mechanisms elsewhere. Several of our providers also hold EU-US Data Privacy Framework certifications for their own transfers.
You may request a copy of the relevant safeguards by contacting privacy@qootra.com.
15. Security and Data Breaches
We use reasonable technical, organizational, and administrative safeguards, including:
• Access controls
• Encryption in transit and at rest, where appropriate
• Secure authentication
• Monitoring and logging
• Vendor security review
• Limited internal access to sensitive data
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and controlling workspace access.
Data breaches
If a breach affecting your personal information occurs, we will notify affected users without undue delay and, where required by law (including within 72 hours where the GDPR applies to a breach we must notify), notify the relevant data protection authorities.
16. Children's Privacy
Qootra is not intended for children. You must be at least 18 years old, or the age of legal majority in your jurisdiction (whichever is higher), to create an account.
We do not knowingly collect personal information from children. If we learn we have collected such information in violation of applicable law, we will delete it.
17. Changes to This Privacy Policy
We may update this policy from time to time. We will update the "Last updated" date and keep an archive of previous versions at our legal hub.
If a change is material — for example, a new purpose for processing, new categories of data, or new sharing — we will notify you by email or in-app notice before it takes effect and, where appropriate, ask for your consent again before using your data in the new way. Changes never apply retroactively to data collected under a previous version.
18. Contact Us
If you have questions about this Privacy Policy, contact us at:
Qootra LLC
1401 Pennsylvania Ave, Suite 105 #3189, Wilmington, DE 19806, United States
