Privacy Policy

Last updated: 12 October 2026

Quikbench ("we", "us") converts and processes files for people who use quikbench.com (the "Service"). This page explains what we collect, what we don't, and how each part of the Service handles your files.

The short version

Files you convert

Browser-based conversion: the vast majority of tools on Quikbench (image conversion, audio conversion, merging/splitting/rearranging PDFs, protecting/unlocking PDFs, and more) run entirely in your browser using JavaScript. Your file is never transmitted to our servers. We have no way to see, log, or store these files, because they never leave your device.

Pro server-side processing: some features genuinely require server-side processing — batch conversion of multiple files at once, formats that browsers can't reliably handle (like HEIC or FLAC), and Pro-quality PDF compression. For these, your file is uploaded to our server, processed, and made available for you to download. Once your job is downloaded (or after 15 minutes if it's abandoned), the files and any temporary copies are permanently deleted from our server. We do not retain, back up, or inspect the contents of files you process this way beyond what's needed to complete your job.

AI tools and your photos

The AI tools can't run in your browser. When you use one, your photo is uploaded to our server and sent to Replicate, a third-party AI processing provider based in the United States, which runs the AI model and returns the result to us. We pass the result straight back to your browser and don't store it.

Temporary copies of your photo on our server are deleted as soon as the job finishes. As a safety net, any temporary file left behind by an interrupted job is deleted automatically within about an hour. Replicate processes your photo only to produce the result and handles it under its own privacy policy. We don't use your photos to train AI models, and we don't look at them.

The AI Image Generator and AI Video Generator send your text description and any photos you add to Google (Nano Banana, Veo 3.1, Gemini Omni) or OpenAI (GPT Image 2) models through Replicate to make your result. We keep only a log of which tool and model you used, what it cost, how it ended and, for video, how long it ran — we don't store your descriptions, photos or results (the finished file stays on our server for up to 30 minutes so your browser can download it, then it is deleted). The providers handle the data under their own terms.

The AI Video Upscaler sends your video to Bria's upscaling model through Replicate. Because that model needs a web link to fetch the video from, your upload is offered from our server under a long, private, unguessable link that works only while your job runs. The finished video is kept on our server for up to an hour so you can download it, then deleted. We log only the length, size and cost of the job.

The Bulk Product SEO Optimiser reads your product CSV in your browser. Only each product's handle, title, brand, type, category, tags, options and description are sent — through Replicate to an OpenAI text model — to write the SEO text. Prices, stock and every other column never leave your browser, and we don't store your products or the text written for them.

The Product Photo Batch Processor sends each photo to the same background-removal model as our Background Remover, only when you choose to remove backgrounds; it is deleted straight after. Framing, resizing, renaming and the ZIP are made in your browser. If you keep the backgrounds, nothing is uploaded at all.

The Structured Data Checker needs no account. When you check a web address, our server downloads that public page once and passes its HTML to your browser, where the checking happens; we don't store the page or the address. Code you paste is checked entirely in your browser and never sent to us.

The Website SEO Audit and Internal Link Planner read the public pages of the website you enter, following its own links and respecting its robots.txt. Only page facts (titles, headings, links, word counts and a short text extract) are passed to your browser to build the report; nothing is stored after you leave the page. A whole-site crawl needs an account so that its credit cost can be charged.

The Domain Age Checker and Bulk Domain Age Checker send the domain names you enter to our server, which asks the public domain registries (RDAP or WHOIS) about them. We keep the public registry answer for each domain (dates, registrar, name servers) for up to 7 days so repeat checks are fast; we don't link it to you. The bulk checker uses Cloudflare Turnstile to block bots, which may process technical data about your browser under Cloudflare's privacy policy.

The QR Code Generator and QR Code Scanner run entirely in your browser. What you type into a QR code (including UPI IDs and Wi-Fi passwords), the camera picture and any image you scan are never sent to us. The camera is only switched on when you press “Scan with camera” and is turned off as soon as a code is read or you press Stop.

The Robots.txt Generator works in your browser. If you load a site's current robots.txt, our server fetches that one public file and passes it back without storing it.

The Sitemap Generator reads public pages the same way as the SEO Audit; the sitemap is built in your browser and nothing is kept. For hosted sitemaps (account needed) we store the website address, your verification code, your plan and payment record, the pages to leave out, and the latest sitemap file (page addresses, image addresses and last-changed dates) so we can serve it to search engines. We re-read your site on a schedule and email you if it can't be read or your plan is about to end. Removing the website deletes its sitemap files; payments are handled by Razorpay.

The Print File Checker and the Private Photo Library Cleaner work entirely in your browser. Your images and photos are never uploaded; when the cleaner moves photos into a review folder (Chrome and Edge only), it does so on your own device with your permission.

Some of these AI models are made by Google or OpenAI and are run through Replicate; their providers handle the data under their own terms. This includes Animate Old Photos and the AI Photo Editor (Google models), the Alt Text Generator and OCR text cleanup (an OpenAI model, which receives your image or the text you ask it to clean up), AI OCR for PDFs (Datalab's OCR model, which receives the pages of the PDF you choose to read — also used when you choose AI reading for a scanned bank statement), AI Subtitle Generator (OpenAI's Whisper speech model, which receives only the sound of the video or audio you choose — your browser takes the sound out of the video first where it can; if it can't, the file is uploaded and the sound is taken out on our server — and the file and sound are deleted as soon as the subtitles are made), and Upscale PDF (the Real-ESRGAN model, which receives each page of the PDF as an image; the upscaled page is kept on our server for up to 15 minutes so your browser can collect it, then deleted). The standard OCR option never uploads anything, and neither do the Word Counter, Case Converter, Slug Generator, Text Compare, Password Generator, Sign PDF, Compress PDF to size, the GST Invoice Generator, the Fancy Text Generator, or Bank Statement to Excel for statements downloaded from net banking — those run entirely in your browser. Finished animation videos are kept on our server for about 30 minutes so you can download them, then deleted.

To run the credit system, we keep a basic record of each AI job — which tool, whether it succeeded, and when — without the photo itself.

Account information

If you create an account, we store:

We use this to let you sign in, provide your plan and credits, prevent abuse, and send you the emails described below.

Payment information

Payments for Pro, Autopay and AI credit packs are processed by Razorpay. We do not receive or store your full card, UPI, or bank details — Razorpay handles that directly. We keep a record of each purchase (what was bought, the amount and currency, the date, and Razorpay's order and payment reference) so we can provide what you paid for, handle support and refunds, and meet accounting and tax obligations.

Shopify Store Agent

If you connect a Shopify store to the Store Agent, you approve access in Shopify first. We then read your store's name and its products — titles, descriptions, SEO titles and meta descriptions, images and their alt text, vendor, type and tags — so the agent can check them and write fixes. We do not read or store your customers, orders or payment details.

Shopify's access key for your store is stored encrypted on our server. Product text is sent to our AI provider only to write the fixes you ask for (or that you switch on in the weekly check), and nothing changes in your store unless you approve a fix or turn on automatic applying; every applied change is recorded with its old value so you can undo it. When you disconnect the store or uninstall the app, we delete the access key straight away and remove the store's product data and fix history within 48 hours of Shopify's request. We respond to Shopify's customer data and redaction requests as required.

Amazon Seller Agent

If you use the Amazon Seller Agent, your listings (titles, bullet points, descriptions, search terms, images, price, stock, status and Amazon's listing issues) are stored with your account so the agent can check them, and you can review its fixes from any device. Listing text is sent to our AI provider only to write fixes. If you choose automatic fixing, approved fixes are published to Amazon each week and you are emailed what changed. It does not read customers or orders. Removing the account on that page, or deleting your Quikbench account, deletes its listings and fixes straight away.

Amazon connection

If you connect an Amazon seller account, you approve access on Amazon's own page and we receive an authorization token, which is stored encrypted on our server. We use it only to read your listings (titles, bullet points, descriptions, search terms, images, price, stock, status and listing issues) and, when you press Publish to Amazon, to send the fixes you approved. We do not request or store Amazon customer information, orders or payments, and we never sell or share Amazon data with anyone. Amazon data is sent over encrypted connections only, and listing text goes to our AI provider only to write fixes you ask for. Press Disconnect on the Seller Agent page to delete the token straight away, or remove the app in Seller Central → Manage Your Apps; removing the marketplace account or your Quikbench account deletes the synced listings as well.

Instagram AI Agent

If you use the Instagram AI Agent, we read the public text and photos of the website you add, and store the photos you upload, your brand profile and the content we make for you on our server, privately for your account. Finished content is kept for 60 days. If you don't use the Instagram AI Agent for 30 days and have no active plan, your photos and content are deleted (we email you a week before); your brand profile is kept until you remove the brand. Website text and the words you give us are sent to our AI providers only to write your content.

Instagram account connection

If you connect an Instagram Business or Creator account, you sign in on Instagram's own page — we never see your password. With your permission we receive an access key, stored encrypted on our server, and use it only to: read your profile (username, name, profile picture, follower and post counts); read your recent posts and their counts (likes, comments, and reach, views, saves and shares where Instagram provides them) to analyse what works and plan better content; and publish the posts, carousels, reels and stories that you approve or schedule. We don't read your private messages, follow or unfollow anyone, or post anything you haven't approved or scheduled.

Your recent-post data is kept for at most 30 minutes as a cache. If you connect an AI assistant (Claude, ChatGPT…) to Quikbench, it can read the same Instagram information through your Quikbench connection, only while you allow it.

Deleting your Instagram data: press Disconnect in the Instagram AI Agent (Brand & photos), or remove Quikbench in Instagram (Settings → Website permissions / Apps and websites). Either way we delete the access key and the stored Instagram data straight away. You can also email us to delete everything we hold about your account.

Emails we send

Account emails — always sent, because they're part of the service: your email confirmation code, a welcome email once your email is confirmed, password reset codes, and receipts for Pro, Autopay and AI credit purchases.

Tips and offers — sent only if you tick the box when you sign up or switch it on from your account page. These are occasional emails such as a reminder that your free credits are waiting, that they've refilled, that your credit balance is running low, or news about new tools. We send at most one every few days.

Every tips-and-offers email has an Unsubscribe link that works in one click, without signing in. You can also switch them off anytime from your account page. Emails are delivered through our email provider, Resend. We don't share or sell your email address to anyone for their own marketing.

Free AI credits without an account

You can use the free daily AI credits without signing up. To count them, our server creates a hidden record for your browser that contains no name or email address, and your browser keeps a token for it. To limit abuse we also keep a one-way scrambled version (a hash) of your network address for a few days, which can't be turned back into the address, and we use the same bot check as signup (Cloudflare Turnstile). Photos you send to an AI tool are handled as described under "AI tools and your photos". Hidden records that go unused are deleted after 60 days. Buying credits or a plan always needs a real account.

Anonymous usage counts

Separately from Google Analytics, our own server keeps simple daily totals: how many times each page was viewed, how many times a file was chosen in a tool, and how many results were downloaded, and for downloads which format conversion it was (for example "ogg to mp3"). These totals contain no IP address, cookie, account, file name or file content, so they can't be linked to you. We use them to see which tools people need and where they get stuck.

Analytics and advertising cookies

We use Google Analytics to understand how people use the site (for example, which pages are visited and whether sign-up works), and the Google Ads tag to measure which of our ads lead to sign-ups and purchases. Both use cookies and similar technology and share this information with Google, which handles it under the Google Privacy Policy. They don't receive your files, photos or password. You can block these cookies in your browser settings, or opt out of Google Analytics with Google's opt-out add-on.

We also use the Meta Pixel (Facebook and Instagram) to measure our ads on Meta's apps: it records page visits, sign-ups and purchases (with the amount, not your payment details) and shares them with Meta. When you buy something, our server also tells Meta about that purchase directly (Meta's Conversions API), with your account email in a scrambled, one-way hashed form, your IP address and browser type, so the purchase is counted even if your browser blocks the pixel. Meta may match them to your Facebook or Instagram account to show and measure ads, under the Meta Privacy Policy. It never receives your files, photos, password or what you type into our tools. You can control this in your Facebook or Instagram ad settings ("Ad preferences" → "Activity information from ad partners") or by blocking third-party cookies in your browser.

Advertising on our site

Some of our free tool pages may show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other sites on the internet.

You can opt out of personalized advertising by visiting Google's Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info. Visitors in the European Economic Area, the UK and Switzerland are asked for consent before personalized ads are shown. Learn more about how Google uses information from sites that use its services.

AI assistant

SEO Autopilot reads the public pages of the website you add, the same way a search engine does, and respects its robots.txt. We keep the facts it finds for each page (address, title, meta description, headings, word count, status and a short excerpt of text) so each report can show what changed; they're deleted when you remove the website or delete your account. To write suggested titles and descriptions, a page's title, headings and a short excerpt are sent to an OpenAI model through Replicate. The Keyword Density Checker and Meta Tag Generator fetch a page only when you ask them to, and don't keep it.

The chat assistant on our pages answers questions about Quikbench. The messages you type are sent to an OpenAI model, run through Replicate, to write the answer. We keep the text of the questions (never your IP address or any account details) for up to 30 days to improve the answers, and then delete it. Please don't type personal, payment or password information into the chat. The conversation is kept in your browser only while the tab is open.

Talking to the assistant (voice). If you tap the microphone, speech is turned into text by your own browser's speech feature, not by Quikbench. Depending on your browser, your voice may be processed by its maker (for example Google for Chrome, Microsoft for Edge or Apple for Safari) under their privacy terms. We never receive or store audio, only the text of your question, handled the same way as a typed one. Answers are read aloud by your device. Simple commands such as “open Merge PDF” are handled on your device and are not sent to us.

Local storage

We use your browser's local storage to keep you signed in (a session token) and to remember small preferences, such as your chosen currency and roughly how long AI jobs take on your connection. This stays in your browser and isn't used for tracking.

Bot protection

We use Cloudflare Turnstile to prevent automated abuse of sign-up, sign-in, and password reset. Turnstile may process some technical information about your browser to verify you're a real person; see Cloudflare's privacy policy for details.

Your rights

You can delete your account at any time from your account page. This permanently removes your account, email address, password, email confirmation codes and email history from our systems. Purchase records are kept as required for accounting and tax purposes, and the basic record of past AI jobs (tool, result, time — never the photo) remains, no longer linked to an account.

You can switch tips and offers off at any time, and you can ask us for a copy of the information we hold about you, or to correct it, by contacting us. We'll help directly.

Changes to this policy

If we make material changes to how we handle your data, we'll update this page and adjust the "last updated" date above.

Contact

Questions about this policy or your data? Email support@quikbench.com.