Updated 18 October 2026 · effective 17 November 2026
In short: we store as little as possible, we never sell your data, and we cannot read the private messages in your social media accounts.
From you: brand name, email address, password (stored hashed — we cannot read it), your time zone and language, and the captions, photos, and videos you upload for publishing.
From the platforms you connect: account name, account type, access permission (token), and the reach and engagement numbers for the posts you publish through Qu3u3.
Automatically: sign-in records, device and browser type, IP address and approximate city — used for security and for the device list on your Security page. For payments, our payment provider stores your card details; we only receive the last four digits and the outcome of the transaction.
We only request permission to publish your posts, read their reach figures, and read and reply to public comments on the posts you publish through Qu3u3 — and the latter only if you switch the Comments feature on. We do not request and cannot read private messages, friend lists, or any other account data beyond that. We never learn the password to your social media accounts — permission is granted through each platform's own official page.
To run the features you ask for: publishing on time, showing analytics, billing your subscription, sending the notifications you enable, and answering your questions. We do not sell your data, we do not rent it out, and we do not use your content to train AI models.
We process your data only where the law of your country gives us a basis to do so. Contract: to provide the service you signed up for — your account, publishing, analytics, billing. Consent: for each social media account you connect, and for optional features such as Comments; you can withdraw consent at any time by disconnecting the account or switching the feature off, without affecting what was done before. Legal obligation: to keep payment records for tax and accounting law. Legitimate interests: to keep the service secure — sign-in records and device lists — where those interests are not overridden by your rights.
Photos and videos you upload are stored temporarily so the destination platform can fetch them, then deleted automatically one day after every channel has published successfully — unless you mark them "keep permanently" in the media library. Uploads that are still failing on one of the channels are not cleaned up, so the "Try again" button still has its file. Your posts on the platforms stay intact; what we delete is our own copy.
Captions and publishing history are kept while your account is active. Team change history for 12 months, notifications for 90 days, payment records for as long as accounting law requires. If you delete your account, everything is permanently deleted after 14 days — except the payment records we are required to keep.
Qu3u3 runs on servers rented from Contabo GmbH in Germany, which hold the database, email and backups. So your data leaves your own country when you use Qu3u3. We transfer it only with the safeguards your law requires — a contract binding the recipient to protect it, and the transfer conditions of the Indonesian, Malaysian, Philippine, Singaporean, Thai, Vietnamese and Taiwanese data protection laws.
Other recipients, each receiving only what its job needs: Cloudflare R2 (storing the photos and videos you upload), Midtrans (web payments, Indonesia), Google Play Billing (purchases inside the Android app), Google Sign-In (if you sign in with Google: your name, email address and picture), Google Fonts (this website loads its typeface from Google, which receives your IP address), and the platforms you connect yourself — Meta (Facebook, Instagram, Threads), TikTok and YouTube — which receive the posts you publish. The full list of recipients, with their locations, is on the Izaaja privacy policy, which covers the same company and the same servers.
We do not sell your data, we do not share it with advertisers, and we do not process it with AI models.
The access permissions for your social media accounts are stored encrypted (AES-256-GCM), passwords are stored hashed, connections are encrypted in transit (HTTPS), and data belonging to different brands is fully separated.
If personal data is leaked, lost or accessed without permission, we contain it first, then notify you and the competent authority within the deadline your country's law sets — for example 3 × 24 hours under Indonesia's Personal Data Protection Law, and 72 hours in several other countries we serve. The notice says what happened, which data was involved, what we have done, and what you can do to protect yourself.
Qu3u3 uses only storage that is strictly necessary: your browser keeps the sign-in session and a few display preferences (for example which cards you folded) so the app works. We do not use advertising cookies, and neither this website nor the app loads analytics or tracking scripts. If that ever changes, it will run only after you agree, and you will be able to withdraw that agreement as easily as you gave it.
If you connect a YouTube channel, Qu3u3 uses YouTube API Services. By connecting it you also agree to the YouTube Terms of Service, and your data on Google's side is governed by the Google Privacy Policy.
What we access from your channel: your channel name and picture, the list of videos you publish through Qu3u3 together with their view, like, and comment counts, and the text of comments on those videos. We upload the videos you send from Qu3u3 and — if you use the Comments feature — reply to or delete comments on your instruction. We do not retrieve your subscriptions, your watch history, or videos you did not publish through Qu3u3.
What we store: your access permission (token) in encrypted form, video IDs and titles, and the figures and comments already retrieved — so that the analytics page and the comments page can be shown without calling YouTube over and over. This data is used only to display results back to you; it is never sold, never shared with advertisers, and never used to train AI models.
If you connect Google Drive, Qu3u3 requests only the drive.file scope — we can touch only the files this application itself created or that you picked yourself, not the rest of your Drive.
Google API Services User Data Policy. Qu3u3's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Revoking access: you can disconnect at any time from the Channels page inside Qu3u3, and the stored data is deleted with it. In addition to that, you can revoke Qu3u3's access to your data directly from the Google security settings page at security.google.com/settings/security/permissions.
Depending on where you live, you have the right to: get a copy of your data, including in a machine-readable format so you can move it elsewhere; correct data that is wrong; have your data deleted; withdraw consent; object to or restrict processing; and complain to your country's data protection authority. Qu3u3 does not make decisions about you by automated means alone.
To use any of these rights, email dpo@izaaja.com from your account's email address. To delete your account you can also use the button inside the app — see how to delete your account. We reply within 14 days; where your country's law sets a shorter deadline, we meet that one. The regulator for each country — Indonesia, Malaysia, the Philippines, Singapore, Thailand, Vietnam and Taiwan — is listed in the Izaaja privacy policy. If you live elsewhere, the rights your own law gives you still apply, and you may complain to your own authority.
Qu3u3 is for businesses and is not intended for anyone under 18, or under the age of majority in your country if that is higher. We do not knowingly collect children's data; if it turns out we have, tell us and we will delete it.
If we change something that matters to you — a new category of data, a new recipient, or a longer retention period — we tell you inside the app and by email at least 30 days before it takes effect. The date at the top always shows the current version.
PT IZAAJA SOLUSI DIGITAL · Jl. Marelan Raya 7 Pasar 1 Tengah, Medan Marelan, North Sumatra 20255, Indonesia · Data protection officer: dpo@izaaja.com · General: info@izaaja.com · Billing and invoices: billing@izaaja.com.
See also the Terms & Conditions. Also available in Bahasa Indonesia. This version was published on 18 October 2026 and takes effect on 17 November 2026; until then the version of 7 September 2026 applies. The latest version is always available inside the app.