Privacy Policy

1. Introduction

Welcome to Thumbr.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform.

By using our service, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

• Account Information: Name, email address, username
• Profile Information: Profile picture, preferences, settings
• Payment Information: Billing address, payment method details (processed securely through Stripe)
• Communication Data: Support requests, feedback, correspondence

Usage Information

We automatically collect information about how you use our service:

• Content Generation Data: Prompts, generated images/videos, generation parameters
• Usage Analytics: Feature usage, session duration, click patterns
• Technical Information: IP address, device type, browser information, operating system
• Performance Data: Error logs, generation success rates, response times

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session and preferences
• Analyze usage patterns and improve our service
• Provide personalized content and recommendations
• Ensure security and prevent fraud

3. How We Use Your Information

We use the collected information for the following purposes:

Service Provision

• Generate AI-powered content based on your prompts
• Maintain and improve our AI models and algorithms
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries

Platform Improvement

• Analyze usage patterns to enhance user experience
• Train and improve our AI models (using aggregated, non-personal data)
• Develop new features and functionalities
• Ensure platform security and prevent abuse

Communication

• Send important service updates and notifications
• Provide technical support and assistance
• Share product updates and new features (with your consent)
• Respond to your questions and feedback

4. Content Privacy and Visibility

Free Plan Users

• Generated content is stored as public by default
• Public content may be visible to other platform users
• We may use public content for platform improvement and model training
• You can delete your generated content at any time

Paid Plan Users

• Generated content is stored as private by default
• Private content is only accessible to you and authorized personnel
• We may use aggregated, non-identifiable data for service improvement
• You maintain full control over your private content

Content Retention

• Generated content is stored until you delete it or close your account
• Individual content can be deleted instantly from your account
• When you delete your account, all your data is permanently removed immediately
• We may retain anonymized, non-identifiable analytics data for service improvement

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

• AI Services: Fal.ai and other AI providers for content generation
• Payment Processing: Stripe for secure payment processing
• Cloud Services: AWS, Vercel, and other infrastructure providers
• Analytics: Service providers for usage analytics and monitoring

Legal Requirements

We may disclose your information if required by law or in good faith belief that such action is necessary to:

• Comply with legal obligations or court orders
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our platform of any change in ownership.

6. Data Security

We implement appropriate security measures to protect your information:

Technical Safeguards

• Encryption in transit and at rest
• Secure authentication and authorization systems
• Regular security audits and vulnerability assessments
• Access controls and monitoring systems

Operational Safeguards

• Limited access to personal information on a need-to-know basis
• Employee training on data protection and privacy
• Incident response procedures for security breaches
• Regular backup and disaster recovery procedures

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

General Rights

• Access: View and download your personal information from your account
• Correction: Update your profile information in account settings
• Deletion: Delete your account and all associated data instantly from Settings → Account
• Portability: Download your generated content before account deletion

EU Users (GDPR Rights)

• Right to object to processing of your personal data
• Right to restrict processing in certain circumstances
• Right to withdraw consent where processing is based on consent
• Right to lodge a complaint with supervisory authorities

California Users (CCPA Rights)

• Right to know what personal information we collect and how it's used
• Right to delete personal information (with certain exceptions)
• Right to opt-out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights

Most rights can be exercised directly from your account settings. For account deletion, visit Settings → Account to permanently delete your account and all associated data. For other privacy-related requests, contact us through our support system.

8. Children's Privacy

Our service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to remove that information from our servers.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

10. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our services and AI models

Account Deletion

You can delete your account at any time from Settings → Account. When you delete your account:

• Immediate deletion: Your account and all personal information is permanently deleted
• Generated content: All your generated images, videos, and content is permanently removed
• Subscription data: Billing history and subscription information is deleted
• No recovery: Account deletion is permanent and cannot be undone

Only anonymized, non-identifiable analytics data may be retained for service improvement purposes, which cannot be linked back to you.

11. Third-Party Services

Our platform integrates with third-party services that have their own privacy policies:

• Stripe: Payment processing (see Stripe's privacy policy)
• Fal.ai: AI content generation (see Fal.ai's privacy policy)
• Vercel: Hosting and deployment

We encourage you to review the privacy policies of these third-party services as they govern the use of your information by those services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Email notification to your registered email address
• Prominent notice on our platform
• In-app notifications for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through our support system or website.

For EU users, our Data Protection Officer can be reached through the same contact methods for privacy-related inquiries.