Legal
Privacy Notice for California Residents
This Privacy Notice for California Residents (this “California Notice”) supplements the information contained in the Quill Privacy Policy at https://www.tryquill.com/legal/Quill_Privacy_Policy.pdf (the “Privacy Policy”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). Quill Technologies, Inc. (“Quill,” “we,” “us,” or “our”) adopts this California Notice to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (the “CCPA/CPRA”). Any terms defined in the CCPA/CPRA have the same meaning when used in this California Notice. To the extent any provision of this California Notice conflicts with the Privacy Policy with respect to California consumers, this California Notice controls.
Where indicated, the CCPA/CPRA treats Personal Information reflecting a written or verbal business-to-business communication or transaction (“B2B Personal Information”) differently from certain other categories of Personal Information. Quill’s services are primarily B2B in nature, and many interactions with Quill are within the scope of B2B Personal Information.
1. Categories of Personal Information We Collect#
Personal Information includes information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. Personal Information does not include publicly available information from government records, or de-identified or aggregated consumer information.
In the preceding twelve (12) months, Quill has collected the following categories of Personal Information from consumers:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Real name, postal address, unique personal identifier, IP address, email address, account name, or other similar identifiers. | YES |
| B. California Customer Records (Cal. Civ. Code § 1798.80(e)) | Name, signature, address, telephone number, education, employment, employment history, financial account information (e.g., billing). | YES (limited to business contact and billing information) |
| C. Protected classifications | Age, race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex, sexual orientation, veteran or military status, genetic information. | NO |
| D. Commercial information | Records of products or services purchased, obtained, or considered, including subscription and order history. | YES |
| E. Biometric information | Genetic, physiological, behavioral, or biological characteristics used to extract a template or identifier (e.g., fingerprints, faceprints, voiceprints). | NO |
| F. Internet or other electronic network activity | Browsing history, search history, information on interaction with our Website, application, or advertisement. | YES |
| G. Geolocation data | Approximate location derived from IP address. We do not collect precise geolocation. | YES (approximate only) |
| H. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. | YES (limited to support recordings with consent, voicemail, or chat transcripts you provide) |
| I. Professional or employment-related information | Job title, employer, business contact details, and similar professional information. | YES |
| J. Non-public education information | Education records (e.g., grades, transcripts) maintained by an educational institution. | NO |
| K. Inferences | Inferences drawn from the categories above to create a profile reflecting preferences, characteristics, or behavior. | LIMITED (used for product analytics and B2B marketing) |
| L. Sensitive Personal Information | Government-issued identifiers; precise geolocation; racial or ethnic origin; religious or philosophical beliefs; union membership; contents of mail, email, or text messages (other than where Quill is the intended recipient); genetic data; biometric data used to identify; health, sex life, or sexual orientation information. | NO (we contractually prohibit submission of Sensitive Personal Information to the Services) |
2. Sources of Personal Information#
We obtain the categories of Personal Information listed above from the following categories of sources:
| Source | Examples |
|---|---|
| Directly from you | Account registration, billing, order, contact, support, and configuration forms. |
| From your devices and browser | Cookies, web beacons, log files, and similar technologies (see Section 5 of the Privacy Policy). |
| From customers and their authorized administrators | When an administrator invites you to a workspace or assigns you a role in the Services. |
| From service providers and business partners | Analytics, fraud-prevention, identity, and enrichment providers; marketing partners; channel partners and resellers. |
| From third-party data sources and public records | Enrichment data, public registries, professional networks, and similar sources. |
3. Purposes for Collecting Personal Information#
We may use or disclose the Personal Information we collect for the business and commercial purposes described in our Privacy Policy, including for the use of AI-enabled features as described in Section 8 (AI Processing) of our Privacy Policy. Specifically:
- to fulfill or meet the reason you provided the information (for example, to respond to inquiries, process orders, provide and support the Services, and facilitate payments);
- to operate, secure, and improve the Website and Services, including for testing, research, analysis, product development, and the operation of AI-enabled features (which may involve processing Personal Information through third-party AI model providers acting as service providers/subprocessors, as listed at https://trust.tryquill.com);
- to create, maintain, customize, and secure your account, prevent fraud and abuse, and protect against malicious or illegal activity;
- to provide customer support and respond to your inquiries;
- to communicate with you about your account, the Services, security and privacy matters, and changes to our policies, and (where permitted) to send you marketing communications;
- to comply with applicable law, regulatory requirements, court orders, and other legal process; and
- to evaluate or conduct a corporate transaction (such as a merger, acquisition, restructuring, or sale of assets) in which Personal Information is among the assets transferred.
We will not collect additional categories of Personal Information or use the Personal Information we collected for materially different, unrelated, or incompatible purposes without first providing you notice.
4. Disclosure of Personal Information for a Business Purpose#
In the preceding twelve (12) months, Quill has disclosed the following categories of Personal Information for the business purposes described above, including disclosures to third-party AI model providers acting as service providers to operate AI-enabled features of the Services. We do not “sell” or “share” (for cross-context behavioral advertising) Personal Information as those terms are defined in the CCPA/CPRA, and we have not done so in the preceding twelve (12) months. We do not knowingly “sell” or “share” the Personal Information of consumers under the age of sixteen (16). A current list of the service providers and subprocessors to whom we disclose Personal Information for business purposes is maintained at https://trust.tryquill.com, and Quill provides at least ten (10) days’ advance notice of new subprocessors as described in the Privacy Policy.
| PI Category | Business Purpose Disclosure | Sold or Shared |
|---|---|---|
| A: Identifiers | Yes — to hosting, infrastructure, identity, analytics, support, security, AI model, and payment providers | No |
| B: California Customer Records | Yes — to payment processors and accounting providers | No |
| D: Commercial information | Yes — to billing, CRM, and analytics providers | No |
| F: Internet or electronic network activity | Yes — to analytics, security, and (where consented) marketing measurement providers | No |
| G: Geolocation (approximate) | Yes — to analytics and fraud-prevention providers | No |
| H: Sensory data (limited) | Yes — to support, recording, and transcription providers used to operate the Services | No |
| I: Professional information | Yes — to CRM, sales-enablement, and marketing providers | No |
| K: Inferences | Yes — to analytics and marketing providers (for B2B marketing) | No |
5. Sensitive Personal Information#
Quill does not collect or process Sensitive Personal Information for the purpose of inferring characteristics about you. We contractually require customers and users not to submit Sensitive Personal Information to the Services. We use Personal Information that may be considered “sensitive” (such as account credentials and security log data) only for the purposes described in Section 7027(m) of the CCPA/CPRA regulations, including to perform Services reasonably expected by an average consumer, to ensure the security and integrity of the Services, and to detect and prevent malicious or illegal activity. Because we limit our use of Sensitive Personal Information to these purposes, you do not need to exercise a separate right to limit the use of Sensitive Personal Information for purposes outside of those purposes.
6. Your Rights Under the CCPA/CPRA#
Subject to certain exceptions, you have the following rights under the CCPA/CPRA:
Right to Know. You have the right to request that we disclose: (a) the categories of Personal Information we collected about you; (b) the categories of sources from which the Personal Information was collected; (c) our business or commercial purpose for collecting, selling, or sharing the Personal Information; (d) the categories of third parties to whom we disclosed the Personal Information; and (e) the specific pieces of Personal Information we collected about you (a “data portability” request).
Right to Delete. You have the right to request that we delete Personal Information we collected from you and retained, subject to certain exceptions (for example, where retention is necessary to complete a transaction, detect security incidents, comply with a legal obligation, or for internal uses reasonably aligned with your expectations based on your relationship with us).
Right to Correct. You have the right to request that we correct inaccurate Personal Information that we maintain about you.
Right to Opt Out of Sale or Sharing. You have the right to direct us not to “sell” or “share” your Personal Information. Quill does not sell or share Personal Information as defined in the CCPA/CPRA. We honor the Global Privacy Control (“GPC”) signal as an opt-out signal.
Right to Limit Use of Sensitive Personal Information. As described above, we use any Sensitive Personal Information solely for the purposes permitted under Section 7027(m) of the CCPA/CPRA regulations, so a separate right to limit the use of Sensitive Personal Information generally does not apply to our processing.
Right to Non-Discrimination. You have the right not to receive discriminatory treatment for exercising any of your CCPA/CPRA rights.
Right to Appeal. You have the right to appeal our decision on your rights request by emailing privacy@tryquill.com with the subject line “CCPA/CPRA Appeal.”
7. How to Exercise Your Rights#
To exercise the rights to know, delete, correct, opt out of sale/sharing, or limit use of Sensitive Personal Information, please submit a request by:
- emailing us at privacy@tryquill.com; or
- writing to us at: Quill Technologies, Inc., 244 Fifth Avenue, Suite #1861, New York, NY 10001, Attn: Privacy.
Only you, or someone legally authorized to act on your behalf (an “Authorized Agent”), may make a verifiable consumer request related to your Personal Information. You may make a request on behalf of your minor child. You may only submit a request to know twice within a 12-month period. Your request must (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an Authorized Agent, and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm that the Personal Information relates to you. You do not need to create an account with us to submit a request to know or delete. We will only use Personal Information provided in the request to verify the requester’s identity or authority to make it. If we cannot complete an Authorized Agent’s request without additional verification, we may contact you directly.
8. Response Timing and Format#
We will confirm receipt of your request within ten (10) business days. If you do not receive confirmation within that time, please contact us at privacy@tryquill.com. We will endeavor to substantively respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and the extension period in writing. If you have an account with us, we will deliver our written response to that account; otherwise, we will deliver our written response by mail or electronically, at your option. Any disclosures we provide will cover the 12-month period preceding our receipt of your verifiable request. For data portability requests, we will select a format that is readily useable and should allow you to transmit the information from one entity to another. We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded; if we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing your request.
9. Non-Discrimination#
We will not discriminate against you for exercising any of your CCPA/CPRA rights. Unless permitted by the CCPA/CPRA, we will not: (a) deny you goods or services; (b) charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) provide you a different level or quality of goods or services; or (d) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. We currently do not offer financial incentives for the collection, sale, or retention of Personal Information.
10. Retention of Personal Information#
We retain each category of Personal Information for the period described in Section 11 (Data Retention) of our Privacy Policy. In summary, we retain Personal Information for as long as necessary to provide the Website and Services, fulfill the purposes outlined in our Privacy Policy and this California Notice, comply with our legal and contractual obligations, resolve disputes, and enforce our agreements. We delete or de-identify Personal Information when retention is no longer necessary for those purposes.
11. CCPA/CPRA Rights Request Metrics#
The CCPA/CPRA requires businesses that buy, receive for the business’s commercial purposes, sell, or share for commercial purposes the Personal Information of 10,000,000 or more consumers in a calendar year to report certain metrics about rights requests received in the prior calendar year. Quill has not met this threshold; however, we are providing the following metrics voluntarily for transparency. The metrics below are for the period from January 1, 2025 to December 31, 2025.
| Request Type | Received | Granted (in whole or in part) | Denied | Mean Days to Respond |
|---|---|---|---|---|
| Requests to Know | 0 | 0 | 0 | 0 |
| Requests to Delete | 0 | 0 | 0 | 0 |
| Requests to Correct | 0 | 0 | 0 | 0 |
| Requests to Opt-Out of Sale/Sharing | 0 | 0 | 0 | 0 |
| Requests to Limit Use of Sensitive PI | 0 | 0 | 0 | 0 |
12. Other California Privacy Rights#
California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits California residents to request information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. Quill does not disclose any category of Personal Information to third parties for those third parties’ own direct marketing purposes, and has not done so in the preceding calendar year. To request additional information, please email privacy@tryquill.com.
California Civil Code Section 1798.99.86 requires platforms that are likely to be accessed by minors to comply with certain additional requirements. Our Website and Services are intended for business users and are not directed to individuals under the age of sixteen (16). We do not knowingly collect Personal Information from any individual under the age of sixteen (16). This threshold is consistent with our Privacy Policy and Terms of Service. Please see our Privacy Policy for additional information about how we treat information related to minors.
13. Changes to This California Notice#
We reserve the right to amend this California Notice at our discretion and at any time. When we make changes, we will post the updated notice on the Website, update the “Last Updated” date above, and notify you by additional means if required by law. Your continued use of the Website or the Services following the posting of changes constitutes your acceptance of those changes.
14. Contact#
If you have questions or comments about this California Notice, the ways in which we collect and use your information, or your rights and choices regarding such use, or if you wish to exercise your rights under California law, please contact us at privacy@tryquill.com or by mail at: Quill Technologies, Inc., 244 Fifth Avenue, Suite #1861, New York, NY 10001, Attn: Privacy. If you need to access this California Notice in an alternative format due to a disability, please contact privacy@tryquill.com.