Privacy Policy
Last updated October 9, 2026
This policy explains how AppCraft LLC handles personal data when you visit quelta.ai, use the free video ad review and request private access to Quelta.
1. Who is responsible
The controller of your personal data is AppCraft LLC, Georgia, Tbilisi, Police lane, N5 (“we”, “us”). For any privacy question, write to am@appcraft.pro with the subject “Quelta”.
2. What data we collect
- Video ad review. The video you upload or the link to it, the settings you choose (platform, audience country and age, report language), the report generated from it and the technical data needed to run the service: the IP address of the request (used only to count the limit and protect the service from abuse), a random identifier in the
kr_idcookie to count the daily limit and the result of the bot check. We do not ask for your name or email to run a review. A video may contain the image or voice of people; see section 5 of the Terms of Use about the rights to the video. - Private access. Your email address. We do not ask for your name, phone number or other identity details. Optionally: your role (chosen from a list) and a link to your product, store or website.
- Request context: the language of the page you used, campaign tags in the link (UTM), the page you came from, the page version and the time of your consent. Your IP address is not stored — only an irreversible hash of it, used to protect the form from spam.
- Website analytics via PostHog: pages viewed, clicks, browser and device type, and approximate location derived from the IP address. PostHog on quelta.ai works without cookies and without browser storage; the identifier lives only while the tab is open. Session recording is turned off, and form fields are not captured.
3. Why we use it and on what legal basis
- To review the video you submitted and show you the report — because you asked us to (performance of a contract, Art. 6(1)(b) GDPR).
- To keep the service free and available: to count the daily limit and protect it from bots and abuse — on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
- To add you to the private access list and contact you about Quelta, including discussing your task and volumes — on the basis of your consent (Art. 6(1)(a) GDPR).
- To prepare for the conversation using the role and link you provided — on the basis of your consent.
- To understand which pages and campaigns work and to improve the website — on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in running a useful and secure website.
- To protect the form from spam and abuse — on the basis of our legitimate interest.
We use your email only for messages about Quelta. We do not sell it, share it with third parties for their own purposes or use it for anyone else’s advertising.
We use your videos only to prepare the report you requested. We do not sell them, do not pass them to third parties except the processors listed in section 5, without whom the analysis is impossible, and do not use them to train models.
4. How long we keep it
Videos and reports are kept for 7 days and then deleted automatically. After that, the report link stops working.
We keep your private access request until we open Quelta for you and for no longer than 3 years from the moment we receive it, or until you withdraw your consent, whichever comes first. Then the data is deleted. Analytics data is kept in pseudonymous form for no longer than necessary for analysis and no longer than 3 years. Records used to count the daily review limit are deleted after 2 days; the IP address and cookie identifier linked to a review are deleted together with it after 7 days.
5. Where data is stored and who processes it
- Videos, reports and requests are stored on our server in the European Union (DigitalOcean, LLC, data centre in Frankfurt, Germany).
- To analyse a video, we pass it or the data extracted from it to processors, only to the extent needed for the analysis: Google LLC (Gemini API — analysis of the video), ElevenLabs Inc. (speech recognition) and Anthropic PBC through OpenRouter, Inc. (analysis of the text: transcript and descriptions of scenes).
- Bot protection on the review form is provided by Cloudflare, Inc. (Turnstile). It checks the browser and does not set advertising cookies.
- A copy of the requests is kept in a spreadsheet in Google Workspace (Google LLC), which our team uses to work with requests.
- Analytics is provided by PostHog Inc. in its EU Cloud (data hosted in Frankfurt, Germany).
- Some of these processors are located in the United States.
- Our team may access the data from Georgia and other countries outside the EU. Where data leaves the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
We do not disclose data to anyone else unless required by law.
6. How we protect it
The connection to the website is encrypted (HTTPS). Access to the data is limited to team members who need it for the purposes above; the server is protected by a firewall, and backups are kept in protected storage.
7. Cookies
The video ad review sets one functional cookie, kr_id: a random identifier valid for 1 year, used only to count the free daily limit of reviews. It is strictly necessary for the service, so it does not require consent, and it is not used for analytics or advertising. When you open the review form, Cloudflare Turnstile may use the technical data it needs for the bot check.
quelta.ai does not set cookies for analytics or advertising and does not use browser storage for them. If this ever changes, we will ask for your consent first.
8. Your rights
You may ask us what data we hold about you, have it corrected or deleted, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time — just write to am@appcraft.pro. We reply within 30 days. Withdrawing consent does not affect processing carried out before it.
If you believe we handle your data unlawfully, you may complain to the data protection authority in your country of residence or to the Personal Data Protection Service of Georgia.
9. Children
quelta.ai is intended for businesses and professionals and is not directed at people under 16.
10. Changes
We may update this policy. The current version is always published on this page with its date.