Privacy Policy
Updated October 30, 2026
Quacko is operated by Moon X Design Inc. This policy explains how we handle information when you create an account, connect services, search for creators, and manage outreach. The Google Gmail connection described below is used for sending email only.
1. Scope and definitions
Quacko is a workspace for creator discovery and outreach. In this policy, “you” means a person using the workspace, and “connected service” means a third-party account you choose to link, such as a store or email account. This policy covers information handled through the Quacko application, including its account, search, creator management, list, and messaging features.
2. Information you provide
When you register, you provide an email address and password. You may also provide a name, business details, newsletter preference, search criteria, saved filters, creator lists, tags, message drafts, and other information you enter into the workspace. A verification code is used to confirm your email address. We use this information to set up your account and deliver the features you request.
3. Connected accounts and platform data
If you authorize a supported connection, Quacko receives only the information needed for the features you enable and the permissions you approve. Other integrations may provide account, store, product, or creator information. The Gmail connection uses your Google account email address and permission to send email on your behalf; it does not request permission to read, search, or modify your inbox. You can choose not to connect an optional service, though features that depend on it may be unavailable.
4. Gmail access, sending, and records
When you connect Gmail, Quacko requests your Google account email address and the gmail.send permission. We store your email address, the granted scope, connection status, and encrypted OAuth access and refresh tokens in your Quacko account so you can send messages through Gmail, including after the access token expires. When you ask Quacko to send an email, we transmit the sender, recipient, subject, message body, and any attachments or inline images you selected to the Gmail API. We record the recipient address, subject, send status, time, Google message ID when available, and error details if sending fails. We do not use Gmail permissions to read your mailbox or retrieve received messages. You can review the message and recipient before sending. Google and the recipients process the messages according to their own policies.
5. Google API data use and Limited Use
Quacko uses information received from Google APIs only to connect the Gmail account you select, send emails you request, maintain that connection, and show related sending status. We do not use Google user data for advertising or to train AI models, and we do not sell it. We share it only as needed to provide these features, with service providers acting on our behalf, with your affirmative consent, or when required by law or for security. Quacko's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Outlook connection
If you choose to connect an Outlook account, Quacko requests Microsoft Graph Mail.Send permission to send email on your behalf and User.Read to identify the connected account. We store encrypted access and refresh tokens, the account address, and connection status. We use the connection to send messages you request and record send metadata as described above. We do not request permission to read your Outlook inbox. You can disconnect the account in Email Management or revoke access through your Microsoft account.
7. Creator and outreach information
Quacko may display creator profiles, public content, performance metrics, product associations, and outreach history obtained from authorized integrations or other available sources. You may add creators to lists, assign tags, block creators, and compose or send outreach. Information about creators should be used only for legitimate business outreach and in accordance with the source platform's rules.
8. How information is used
We use information to authenticate users, maintain a workspace, run searches and filters, organize creators, show connected-store information, prepare outreach, and support features you enable. We may also use operational information to diagnose errors, protect accounts, and improve the service. Newsletter messages should be sent only if you have opted in.
9. AI-assisted features
AI Search sends the search query you enter to OpenAI's embeddings API to find relevant creators. Quacko stores and searches creator data in its own database. Search suggestions and other generated output may be inaccurate; review them before use. The Gmail connection does not provide inbox contents to AI Search, and Quacko does not send Gmail OAuth tokens or message contents to OpenAI for this search feature. If other AI features are enabled, their data use must be disclosed before they process personal information.
10. Cookies and analytics
Quacko uses authentication cookies to keep you signed in. When product analytics are configured, the signed-in application uses PostHog to collect page views, clicks, and other interaction events, including heatmaps and masked session recordings. Input values and displayed text are masked in those recordings, and URL query strings are removed from recorded page addresses. PostHog and infrastructure providers may receive technical information such as IP address, browser type, and timestamps. You can use browser settings to restrict cookies, although blocking essential authentication cookies may prevent sign-in. Quacko does not use Google mailbox data for analytics.
11. When information is shared
Quacko uses service providers to operate the product, including Supabase for authentication and database services, Resend for account email delivery, PostHog when product analytics are enabled, and OpenAI for AI Search query embeddings. The application also uses a hosting provider to serve the website. When you choose to send an email through Gmail, Google and the recipients receive the message and any attachments you include. We may disclose information where required by law or to address security and misuse. Google user data is not sold or used for advertising.
12. Connected-service permissions
Granting access to a connected service allows Quacko to use the permissions you approve for enabled features. For Gmail, you can disconnect the account in Quacko's Email Management page or revoke Quacko's access in your Google Account. Disconnecting in Quacko revokes the Google authorization and deletes the connected Gmail account record and its encrypted tokens. The associated sending records are deleted with that account record. If you revoke access in Google first, Quacko can no longer use that authorization; you can also remove the connection in Quacko to delete its local record. Disconnecting a service does not undo emails already delivered or remove them from recipients' or Google's systems.
13. Storage, security, and location
Quacko's application is hosted online and account and workspace records are stored in Supabase. Connected Gmail OAuth tokens are encrypted before they are stored in the database, and access to connected mailbox and send records is restricted to the signed-in account. Service providers may process information in the regions where their services operate, including outside your country. For questions about the location of your account data, contact [email protected]. No online service can guarantee absolute security.
14. Retention and deletion
We retain account and workspace information while it is needed to provide the service, unless you request deletion or a longer period is required by law or for legitimate operational purposes. Disconnecting Gmail in Quacko deletes the connected account record, encrypted OAuth tokens, and its associated send-log records from the active database; it does not delete messages already delivered. Deleting a Quacko account is a separate action. To request account or other data deletion, email [email protected]. Backups and records held by service providers may persist for their applicable retention periods before removal.
15. Access, correction, and choices
You may update information available in your account and change optional connections or newsletter preferences where controls are provided. To request access to, correction of, or deletion of information not available through the product, email [email protected]. We may need to verify your identity before acting on a request, subject to applicable legal exceptions.
16. Children and third-party sites
Quacko is intended for business users and is not designed for children. Links to connected platforms or other websites are governed by those services' own policies. Their practices may differ from Quacko's, so review their notices before granting access.
17. Changes and contact
Moon X Design Inc operates Quacko and is responsible for this policy. For privacy questions or data requests, contact [email protected]. We may update this policy as the product and its integrations change. We will notify users of material changes in an appropriate way before they take effect. If we change how Google user data is used, we will notify affected users and obtain any consent required before using that data for a new purpose.