Privacy Policy

1. Who We Are

Quolin ("Quolin," "we," "us," or "our") is a prompt optimization service operated by Ayaan Patel, an individual sole developer located in New Jersey, United States. Quolin is not a registered legal entity. This Privacy Policy describes how Quolin collects, uses, stores, and shares information about you when you use the Quolin website at quolin.com and the Quolin browser extension for Chrome (collectively, the "Services").

2. Information We Collect

2.1 Information you provide directly

• Account information. When you create a Quolin account, we collect your name, email address, and password. Your password is hashed and stored by our authentication provider; we never see or store your password in plain text.
• Prompt content. When you use Quolin to optimize a prompt, we collect the text of the prompt you submit ("user goal"), the AI model you have selected as the target (for example, ChatGPT, Claude, or Gemini), and any "skills" you have selected to apply.
• Feedback. When you rate a generated prompt, we collect your numeric rating, any optional written comment, any tags you select, and any edited version of the prompt you submit.

2.2 Information collected automatically

• Authentication tokens. When you log in, our authentication provider issues a token that identifies your session. The browser extension stores this token locally in chrome.storage.local. The website stores it in browser local storage.
• Server logs. Like most web services, our hosting provider automatically logs basic technical information when you make a request, including your IP address, user agent, and request timestamp. We do not use this information for tracking or analytics.

2.3 Information we do not collect

Quolin does not use Google Analytics, Mixpanel, PostHog, Sentry, Amplitude, Segment, or any other third-party analytics, advertising, or error-tracking service. The browser extension does not read your conversation history, the AI model's responses, or any page content other than the prompt text you have typed into the chat input field. The extension does not track which AI sites you visit beyond receiving the model name when you click "Optimize."

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and maintain your Quolin account.
• To process your prompt and return an optimized version.
• To maintain a history of your past prompts so you can review them inside your account.
• To improve the quality of Quolin's prompt generation by storing high-rated, anonymized prompts in a curated reference dataset (see Section 5).
• To respond to your support requests.
• To detect and prevent abuse, fraud, and security incidents.

4. How Your Prompts Are Processed and Stored

This section is the most important part of this policy. Please read it carefully.

4.1 Server-side processing

Quolin is a thin client. All prompt optimization happens on our servers, not in your browser. When you click "Optimize," the text of your prompt is transmitted over HTTPS to our backend at quolin.com, where it is processed using Anthropic's Claude API to generate an improved version.

4.2 Storage in the prompts database

We store both the original prompt you submitted and the optimized version returned to you in our database, hosted by Supabase. Each entry is associated with your user account by a unique identifier. We retain this prompt history indefinitely so that you can review your past prompts inside your account. We do not currently apply an automatic deletion period.

4.3 Feedback storage

If you rate a prompt, your rating, any written comment, the prompt ID, and your user ID are stored in a feedback table in our database. This data is tied to your account.

5. Curated Reference Dataset

When you rate a generated prompt 4 or 5 stars and either provide tags or submit an edited version, Quolin stores a copy of that prompt in a separate curated reference dataset. This dataset is used to improve the quality of prompt generation for all users — when another user requests a prompt in a similar category, our system may use entries from this dataset as reference examples.

Curated entries are stored without your user ID attached. The original prompt you submitted, the generated output, your edited version, the detected category, the target model, your rating, and the tags you provided are stored, but the link to your account is removed at the time of insertion. We cannot subsequently identify which user contributed any specific curated entry.

The original prompt entry in your personal history (described in Section 4.2) remains tied to your account separately and is not affected by curation.

6. Service Providers (Subprocessors)

To operate Quolin, we share certain information with the following third-party service providers. We do not sell your data to anyone, and we do not share it with anyone other than the providers listed here.

• Anthropic, PBC. Your prompt text and target model are sent to Anthropic's Claude API for processing. Anthropic processes this data under its own commercial terms and privacy policy. See anthropic.com/legal/privacy.
• Supabase, Inc. Supabase provides our database and authentication infrastructure. Your account information, prompt history, feedback, and curated dataset are stored on Supabase. See supabase.com/privacy.
• Railway Corp. Railway hosts the Quolin web application. Standard server logs (IP address, request metadata) are processed by Railway as part of normal hosting operations. See railway.com/legal/privacy.
• Google LLC (Google Fonts). The Quolin website and browser extension load typefaces from Google Fonts. When your browser requests these font files, your IP address is visible to Google. We do not transmit any other information to Google. See policies.google.com/privacy.

7. The Browser Extension

The Quolin browser extension is published in the Chrome Web Store. It operates only on the following AI chat sites: chat.openai.com, chatgpt.com, claude.ai, and gemini.google.com. The extension:

• Reads only the text of the prompt you have typed into the chat input field on these sites. It does not read the AI's responses, your conversation history, or any other page content.
• Sends that prompt text, along with the name of the AI model you are using and any selected skills, to the Quolin backend when you click "Optimize."
• Stores your authentication token and basic user profile (name, email, ID) locally in chrome.storage.local. No prompt history is stored locally on your device.
• Requires you to be logged in to a Quolin account to function. The extension cannot be used anonymously.

The extension does not contain advertising, analytics, error tracking, or any tracking of your browsing activity outside the four AI chat sites listed above.

8. Data Retention and Deletion

We retain your account information and personal prompt history for as long as your account is active. We do not currently apply an automatic deletion period to prompt history.

You may request deletion of your account and all associated personal data at any time by emailing privacy@quolin.com from the email address associated with your account. Upon receiving and verifying your request, we will delete your account, your prompt history (the entries in our database tied to your user ID), and your feedback records within 30 days.

Anonymized entries in the curated reference dataset (described in Section 5) cannot be individually identified or deleted because the link to your account was severed at the time of insertion. If you do not want your high-rated prompts to be added to the curated dataset, do not submit ratings of 4 or 5 stars together with tags or edits.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access. You can request a copy of the personal data we hold about you.
• Correction. You can request that we correct inaccurate personal data.
• Deletion. You can request that we delete your account and personal data, as described in Section 8.
• Objection. You can object to our processing of your data.
• Portability. You can request a copy of your data in a portable format.

To exercise any of these rights, email privacy@quolin.com. We will respond within a reasonable time.

If you are located in California, you have additional rights under the California Consumer Privacy Act (CCPA). Quolin does not sell personal information as defined under the CCPA.

10. Security

All data transmitted between your browser and Quolin's servers is encrypted in transit using TLS (HTTPS). Passwords are hashed by our authentication provider. Authentication tokens are stored locally in your browser's extension storage or website storage. We take reasonable measures to protect your information, but no method of transmission or storage on the internet is 100% secure, and we cannot guarantee absolute security.

11. Children

Quolin is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13, do not use Quolin or create an account. If you believe a child under 13 has provided us with personal information, please contact privacy@quolin.com and we will delete that information.

12. International Users

Quolin is operated from the United States. If you access Quolin from outside the United States, your information will be transferred to, processed in, and stored in the United States, where data protection laws may differ from those in your country. By using Quolin, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of Quolin after a change indicates your acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or about how Quolin handles your data, contact:

Ayaan Patel
Operator of Quolin
New Jersey, United States
Email: privacy@quolin.com