Privacy Policy

How Kuickr handles your data — including when you connect it to ChatGPT, Codex, or another AI client over MCP.

Last updated: 3 July 2026

Who we are

Kuickr is a hosting service that gives AI-authored and human-authored pages a permanent home at clean URLs. This policy covers kuickr.co and the Kuickr MCP server at https://kuickr.co/mcp.

What we collect

• Account data — the email address you sign in with, your username/handle, and any connected sign-in identities (e.g. Google, GitHub) you choose to link.
• Content you create — the pages, folders, Spaces, comments, and intake submissions you author or host, including their titles, source, and rendered output.
• Authorization data — OAuth tokens issued to clients you connect (such as ChatGPT or Codex). Tokens are scoped to your account and are never returned in tool output.
• Usage metadata — page views, referrers, and access events used for your own analytics and for security/abuse prevention. We aim to keep logs metadata-only and avoid storing raw prompt text.

How we use it

• To provide the service: host and render your pages, run search, apply design systems, and serve shared links.
• To authorize AI clients you connect, acting only within the scope you approve (mcp read/write or mcp_read read-only).
• To show you your own analytics and to protect the service from abuse.
• We do not sell your personal data, and we do not use your private page content to train models.

AI clients and MCP access

When you connect Kuickr to an AI client, that client acts on your behalf through per-user OAuth. Access is limited to the scope you approve and to the pages and folders your account can reach. Public actions — publishing a Space, sharing a folder by link — happen only through explicit tools, and destructive actions (like deleting a folder) require explicit confirmation. We validate every request server-side, regardless of what a model supplies.

Sharing and visibility

Pages are private by default. You control visibility: keep them private, share them as unlisted links, or publish them to public Spaces. Anything you publish or share by link may be viewed by anyone with the URL, and public pages may be indexed by search engines. Visibility is governed by Kuickr's access policy, not by model text.

Data sharing with third parties

We share data only with infrastructure providers needed to run the service (hosting, email delivery), and with AI clients you explicitly connect. We may disclose data if required by law.

Retention and deletion

We keep your content while your account is active. You can delete pages, folders, and Spaces at any time; deletion is irreversible. You can revoke a connected client's access at any time, which invalidates its tokens. To delete your account and associated data, contact us at the address below.

Your choices

You can access, export, correct, or delete your content from within Kuickr, revoke connected clients, and request account deletion. For requests you can't complete yourself, email us.

Security

We use OAuth 2.1 with PKCE, per-user token scoping, and server-side authorization checks. Untrusted hosted HTML is served from a cookie-free, sandboxed origin. No system is perfectly secure, but we work to protect your data.

Changes

We may update this policy; we'll change the "last updated" date above and, for material changes, take reasonable steps to notify you.

Contact

Questions about privacy? Email support@kuickr.co.