Legal
Quolle ("we", "us", "our") operates an email platform for businesses, carrying both transactional email and marketing campaigns. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using Quolle, you agree to the practices described in this policy.
We collect four categories of data:
Flipbook reading data deserves saying plainly, because it is more revealing than anything else in the list. An open record says a message was looked at. A reading record says which pages held someone's attention and which they skipped, what they clicked on while they were there, and whether they kept a copy — all tied to the address the link was sent to. If you publish flipbooks, you are collecting that about your recipients, you are the controller for it under section 4, and your own privacy notice needs to account for it. Time is counted only while the document is actually on screen, and the reader's browser is never told whose link it is holding.
We use the data we collect to:
Our own marketing email to you — not the mail you send through us — records when you open it and which links you follow, using the same open pixel and link tracking the product offers. That is how we tell which announcements are worth sending. Every one of those emails carries an unsubscribe link, and using it stops the marketing and the measurement together; service and billing email continues, because you need it to run your account. Nothing here applies to your recipients: tracking on the mail you send is your setting, per sending domain, and is off until you turn it on.
When you send email through Quolle, you are the data controller for your recipients' personal data (including their email addresses and any information contained in message content). Quolle acts as a data processor on your behalf. You are responsible for ensuring you have a lawful basis to send to each recipient and for complying with applicable data protection laws, including the Nigerian Data Protection Act (NDPA) and any laws in your recipients' jurisdictions.
We do not sell personal data. We share it only as necessary to run the Service, with the providers below. Each processes data only as directed by us and under a data processing agreement.
Quolle's servers and database are located in the United States (AWS us-east-1). If you or your recipients are in Nigeria or elsewhere outside the United States, personal data is transferred across borders to be processed. We rely on the data processing agreements with the providers listed above as the safeguard for those transfers, and on your instruction to us as processor under section 4.
Account data is kept while your account is active, and for a reasonable period afterwards to meet legal and accounting obligations or resolve disputes.
Contact lists are kept until you delete them or close your account. Deleting a contact removes it; unsubscribe records are kept after deletion so that somebody who opted out is not re-added by a later import.
Sending history and delivery events — including open and click records and the recipient IP addresses attached to them — are kept for the retention window of your plan and then deleted, along with everything attached to them. Deletion runs daily and allows a short grace period past the window, so that upgrading your plan does not find yesterday's history already destroyed. You can also delete all of your sending history at any time from Settings, and it is removed when you close your account.
Received (inbound) email is deleted automatically after 30 days.
Flipbook pages and reading data — including which links a reader followed and whether they downloaded a copy — are kept for as long as the flipbook exists. They are not on the retention window above: a catalogue is meant to stay readable, and a link sent last quarter should still open. Deleting a flipbook deletes its pages, every reading record attached to it, and every link already sent for it — immediately and for everyone holding one. Both also go when you close your account, and when an individual erasure request is actioned.
We implement reasonable technical and organisational measures to protect data against unauthorised access, loss, or disclosure, including encryption in transit (TLS) and access controls. No system is completely secure; we cannot guarantee absolute security.
Depending on your jurisdiction, you may have the right to access, correct, or request deletion of personal data we hold about you.
If you received an email sent through Quolle and want your data removed, we are the processor, not the controller — the business that sent it decides what happens to your data, and we act on their instruction. Contact them first. When they action the request, your contact record, your address and any details identifying you are removed. What remains is a dated record that a message was sent, with nothing in it that identifies you — the sender needs that to be able to account for their own mail, including to you. If you cannot identify or reach them, write to us and we will pass the request on and tell you who they are, so far as we lawfully can. Every marketing email sent through Quolle carries an unsubscribe link that works immediately and without needing to contact anybody.
If you were sent a flipbook link, the record of what you read — the pages, the time on each, any links you followed and whether you downloaded a copy — is part of what an erasure request removes, and it is removed in full rather than redacted, because unlike a sending record nobody needs an anonymous trace of it. Unsubscribing stops further links being sent to you; it does not by itself delete what is already recorded, so ask for erasure if that is what you want.
To exercise these rights, contact us at privacy@quolle.com. We will respond within the timeframe required by applicable law.
We may update this Privacy Policy from time to time. We will indicate the date of the most recent update at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
For privacy-related enquiries, contact us at privacy@quolle.com.