Scope
Applies to website visitors, prospects, customers, and connected platform usage in Quillwell services.
How Quillwell collects, uses, and protects information across our website, consulting services, and productized agent workflows.
Last updated: January 2025
Quillwell LLC ("Quillwell", "we", "us", "our") is a go to market consultancy and product studio that builds software agents for managing paid media and related GTM workflows. This Privacy Policy explains how we collect, use, and protect personal data when you visit our website, contact us, or use our products and services.
If you have any questions about this Privacy Policy, you can contact us at:
Email: privacy@quillwell.com
Address: Quillwell LLC, 553 E Grant Hwy, Marengo, IL 60152
This Privacy Policy is not intended to provide legal, financial, or regulatory advice. It is a description of how we handle data in the normal course of business.
This Privacy Policy applies to:
In some engagements we act as a processor or service provider to our customers. In those cases, the customer's own privacy notice applies to their end users and our obligations are also governed by the contract we sign with that customer.
We collect three broad categories of data.
When you visit our site, we may automatically collect:
We may also collect any information you provide through website forms, for example:
When you interact with us as a prospect or client, we may collect:
If you work with us on paid media or use our software products, we may process data from platforms that you choose to connect to our systems, such as advertising, analytics, or CRM platforms.
Depending on the integrations you configure, this can include:
We obtain this data through the official interfaces and permissions provided by the platforms you connect, such as APIs, exports, or native integrations. We do not use scraping or automated browsing to collect data from LinkedIn or from any other platform in ways that are inconsistent with that platform's terms or user controls.
We do not intentionally collect highly sensitive categories of data such as government identification numbers, payment card numbers, or health information through these integrations.
When you connect advertising or social platforms to our services, we use the data we receive only to provide the functionality you have requested. In practice, this means we use your advertising and social platform data to:
We do not:
In some cases we may process information from other sources to help deliver or improve our services. These sources can include:
Where we collect information from public websites, we do so in ways that are intended to be consistent with applicable laws and with the terms, robots rules, and technical controls of those sites. We do not use automated tools to access or collect data from LinkedIn or similar closed platforms in ways that violate their rules.
Access to your third party accounts is always based on your explicit authorization, typically through an OAuth or similar connection flow provided by the platform or through credentials you supply. We do not gain access to your accounts without an authorization step that you or your organization completes.
You can revoke our access at any time by disconnecting the integration within our product or directly within the relevant platform. Once access is revoked, our systems will no longer be able to read from or write to that account.
We periodically review connected integrations and may disable stale or unused connections as a security measure.
We use the data described above for the following purposes:
We do not sell your personal data or your advertising and analytics data to third parties.
If you are located in a region where data protection laws apply, such as the European Economic Area or the United Kingdom, our legal bases for processing may include performance of a contract, our legitimate interests in operating and improving our services, and your consent where required.
Our products use automation and machine learning to analyze performance and generate recommendations. We may use your configuration and performance data inside your environment to tune models and rules that operate on your accounts.
We do not use your advertising or analytics data to train models that are then shared in a way that would expose your strategies or performance to unrelated customers. Any analysis we perform across customers is used only to improve our services and is handled in a way that does not allow other customers to identify you, your users, or your individual campaigns.
We do not use your connected platform data to train public models or models operated by third parties for their own purposes.
Our application and data are hosted on a small number of reputable cloud infrastructure providers. We design our system so that production data stays within this stack and is not copied to arbitrary third party services.
In broad terms:
These cloud providers maintain their own security programs and undergo independent audits such as SOC 2 and ISO 27001 or similar frameworks. Quillwell itself has not yet completed a SOC 2 audit. We rely on the security controls of our providers at the infrastructure level, and we are responsible for the security of our application code, access controls, and data handling within that environment.
Production access is limited to Quillwell personnel and contractors who need it to perform their work and are bound by confidentiality obligations.
We share personal data only with third parties in the following categories and for the purposes described:
Cloud infrastructure and hosting providers
To host the website, application, APIs, and databases, and to deliver content securely over the internet.
Service providers
To help us operate our business, which may include:
Professional advisors, auditors, or regulators
When reasonably necessary for legal, tax, compliance, or audit purposes.
Other third parties when required
When we are required to do so by law, court order, or legal process, or when you explicitly ask us to share information on your behalf.
We require our service providers to use the data they receive from us only to provide services to us and to protect it in a manner consistent with this Privacy Policy and applicable law.
We do not disclose your advertising performance data or configuration data to other customers, and we do not sell this data to data brokers.
When we integrate with third party platforms, including advertising and social platforms, we do so using their official tools and interfaces and in accordance with their applicable terms, policies, and developer documentation.
We do not use automated means to access data or functionality that we are not permitted to access, and we do not attempt to bypass technical controls, rate limits, or consent mechanisms put in place by these platforms.
If a platform or account owner revokes our access, our systems stop accessing that account and we remove or anonymize related data from our systems within a reasonable period, subject to any legal or contractual retention requirements.
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy or as required by law. In general:
We may retain certain data for longer periods if necessary to comply with legal obligations, resolve disputes, or enforce our agreements. When data is no longer needed, we take steps to delete or anonymize it.
You can request deletion of your data earlier, subject to our legal obligations and technical feasibility.
We take reasonable technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
These measures include:
No method of transmission or storage can be guaranteed to be perfectly secure, but we work to reduce risk and improve our practices over time.
If we become aware of a security incident that materially affects your personal data or connected platform data, we will investigate and, where required by law or contract, notify you without undue delay along with information about steps we are taking to mitigate the impact and prevent recurrence.
Depending on your location, you may have certain rights regarding your personal data, which can include:
To exercise these rights, contact us at privacy@quillwell.com. We may need to verify your identity before fulfilling your request. Some rights may be limited where we have a legal obligation or compelling legitimate interest to retain certain data.
If you receive marketing emails from us, you can unsubscribe at any time by using the unsubscribe link in the email or by contacting us.
Our infrastructure providers may process data in countries that are different from the country where you are located. These countries may have data protection laws that are different from those in your jurisdiction.
Where required, we use appropriate safeguards to protect cross border transfers of personal data, such as standard contractual clauses or equivalent mechanisms, and we work with providers that commit to protecting data that they process on our behalf.
Our website, products, and services are not directed to children under 16 years of age, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action to delete that information.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will update the "Last updated" date at the top of this page. In some cases we may provide additional notice, such as by email or by posting a notice on our site.
If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at:
Email: privacy@quillwell.com
Postal mail: Quillwell LLC, 553 E Grant Hwy, Marengo, IL 60152