Last updated: August 19, 2026
Welcome to Quixli ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our document creation and organization platform.
By using Quixli, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.
Quixli plays two different roles, and it matters which one applies to a given piece of information.
For our own service, we decide. Your account, your billing, our website, our support conversations and the analytics of our own marketing pages exist because we decided to collect them, for purposes we set. In the language of data protection law we are the controller of that information, and this policy is our account of it.
For the documents you write and the people you send them to, you decide. You choose what a document says, who receives it, and whether to look at how they read it. We do not own that information, do not control it, and make no decisions about it: we store it and measure it on your instruction and no other. For it we are a processor acting for you, and you are the controller — which means the obligations towards your recipients are yours: having a proper reason to send them the document, telling them what you are measuring, and answering them if they ask. We give you the tools to do that, including the section below, which is written to be read by a recipient and is linked from every document.
The practical consequence, if you are the person who received a document: the sender is the one who decided to send it and to see how it was read. Ask them first. If you cannot reach them, write to us at [email protected] and we will pass it on and help.
We collect information that you voluntarily provide to us when you:
When you use Quixli, we automatically collect certain information, including:
Your documents, PDFs, images, Quix collections, and all content you create or upload ("Content Data") are stored securely on our servers. We treat your Content Data as confidential and do not access it except as necessary to provide our services or as required by law.
When you open a document that someone sent you through Quixli, we record the visit and show it to them. That means the time you opened it, how long it stayed open, whether you have opened it before, the country and city your IP address resolves to, and your browser and device type. The city is an estimate and is often wrong by some distance. If the sender asked for your email address before showing you the document, the address you typed is recorded too, and it is not verified. If the document contains a pricing selector and you choose an option, your choice is recorded.
We also record which sections of the document were on your screen and for how long, so the sender can see which parts held your attention, which you passed over, and which you came back to. Sections are identified by their headings. The timer runs only while the document’s tab is the one you are looking at and only while you are scrolling, typing, clicking or touching; it stops when you switch to another tab or window, and it stops about a minute after you last do anything. This measures what was in front of you, not what you read — we cannot tell whether you were reading, and the sender is told so.
We do not record the text you select, what you type into the document, your mouse movements or exact scroll positions, or anything you do after you close it.
To tell a return visit from a first one we set a single cookie, qx_vid, which holds a random identifier and nothing else. It lasts a year. Your IP address is kept in full for 30 days and then shortened so that it no longer points at one connection; the individual event records are deleted after twelve months.
This information goes to the person who shared the document and to the owners and administrators of their workspace. Other members of that workspace see it only if the workspace has chosen to open analytics to everyone. We do not sell it and we do not use it to advertise to you. The sender can delete a document’s reading data at any time, and you can ask them to.
We use the information we collect to:
We do not sell your personal information. We may share your information in the following circumstances:
When you share documents or Quixs with team members or create public links, we share that content according to your sharing settings and permissions.
These are the companies that process data on our behalf. There are no others.
| Who | What for | Where |
|---|---|---|
| DigitalOcean | Hosting, database, and storage of your documents and files | London, United Kingdom |
| Paddle | Payments, as Merchant of Record — it is the seller for your purchase | United Kingdom, United States, Canada |
| Resend | Sending email — notifications, password resets, and marketing if you asked for it | United States |
| Analytics and advertising measurement on our website and inside the app — never on the pages where a document is read | United States | |
| Crisp | Support chat on our website and inside the app | France |
| Sentry | Error reports from our servers, so failures are seen rather than reported by users | Germany |
Your documents and files are stored in London. Of the companies above, only DigitalOcean holds them.
We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Quixli, our users, or others.
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
The measures we actually have in place are:
We want to be equally clear about what we do not have: Quixli has not undergone an independent security audit or certification such as SOC 2 or ISO 27001, and we do not claim one. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Different things are kept for different lengths of time:
| What | How long |
|---|---|
| Your documents, files and Quix collections | Until you delete them, or until your account is erased |
| Account details — name, email, settings | While the account exists |
| A reader’s IP address, in full | 30 days, then shortened so it no longer identifies one connection |
| Individual records of document reading | 12 months, then deleted automatically |
The qx_vid cookie in a reader’s browser | One year |
| Invoices and payment records | Held by Paddle as Merchant of Record, for as long as tax law requires |
The two automatic periods in that table are enforced by scheduled jobs, not by our remembering to do it.
Closing your account is not the same as erasing it. “Delete account” in your settings closes the account, cancels your subscription and ends your access, but your documents and account details remain stored. If you want everything erased, write to [email protected] and we will do it within 30 days and confirm when it is done. We are being explicit about the difference because the two are easy to confuse and we would rather you knew which one you had.
Depending on your location, you may have certain rights regarding your personal information:
To exercise these rights, please contact us at [email protected].
Rather than describe categories, here is what we actually set. You can control cookies through your browser settings, though signing in will not work without the first two.
accessToken and refreshToken keep you signed in. Without them there is no session.qx_vid, a random identifier that lets us tell a return visit from a first one. It is described in full in section 2.4 above, which is written for the person receiving the document.We set no preference cookies and we personalise nothing. And the pages where someone reads a document that was shared with them — who may have no Quixli account and no relationship with us — carry neither the Google tags nor the support chat. On those pages qx_vid is the only cookie we set.
Quixli is a business tool and is not intended for children — meaning anyone who is a minor in their country of residence, since that age differs from one country to the next. We do not knowingly create accounts for them or collect their personal information. If you believe we hold information about a child, write to [email protected] and we will delete it.
Your documents and files stay in London. Some of the companies in the table above operate outside the UK and the European Economic Area, and where they do, the transfer is covered by the European Commission’s Standard Contractual Clauses (Implementing Decision 2021/914) and the UK Addendum, rather than by your agreement to this page.
We rely on the Standard Contractual Clauses rather than on your consent deliberately: a transfer mechanism that depends on consent stops working the moment somebody withdraws it, which would leave your data somewhere we could no longer lawfully keep it.
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of Quixli after such changes constitutes your acceptance of the updated Privacy Policy.
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: [email protected]
Support: [email protected]