Privacy Policy
Last updated: October 7, 2025
1. Introduction
Welcome to Thumbtory ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.
By using Thumbtory, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
2.1 Personal Information
When you register or authenticate through Google OAuth, we collect:
- Your name and email address from your Google account
- Your Google profile picture (if available)
- Account creation and last login timestamps
2.2 Content and Usage Data
When you use our services, we collect:
- Images you upload for thumbnail generation
- Generated thumbnails and associated metadata
- Persona images (face swap photos)
- Style preferences and generation history
- Credit usage and transaction history
- YouTube channel information you provide for style analysis
2.3 Automatically Collected Information
- IP address and browser type
- Device information and operating system
- Pages visited and features used
- Date and time of visits
- Referring website addresses
3. How We Use Your Information
We use the collected information for the following purposes:
- To provide, operate, and maintain our AI thumbnail generation services
- To authenticate and authorize your access to the platform
- To process your images and generate thumbnails using AI technology
- To manage your account, credits, and subscriptions
- To improve and personalize your experience
- To communicate with you about updates, features, and support
- To analyze usage patterns and optimize our services
- To detect, prevent, and address technical issues or fraudulent activity
- To comply with legal obligations and enforce our Terms of Service
4. Third-Party Services
We use the following third-party services that may collect or process your data:
4.1 Google OAuth
We use Google OAuth for authentication. When you sign in with Google, you are subject to Google's Privacy Policy. We only receive the information you authorize Google to share with us.
4.2 OpenAI DALL-E
We use OpenAI's DALL-E API to generate thumbnails. Images you upload or prompts you provide may be processed by OpenAI according to their API data usage policies. OpenAI's API data is not used to train their models.
4.3 YouTube API
When you use our YouTube style analysis feature, we access YouTube's API to retrieve public channel information. This is subject to YouTube's Terms of Service and Google's Privacy Policy.
5. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:
- Secure data transmission using SSL/TLS encryption
- Encrypted storage of sensitive information
- Regular security audits and updates
- Access controls and authentication mechanisms
- Secure hosting with reputable cloud providers
Your images and generated content are stored on secure servers. We retain your data for as long as your account is active or as needed to provide you services.
6. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With third-party vendors who perform services on our behalf (e.g., OpenAI for image generation, hosting providers)
- Legal Requirements: When required by law, subpoena, or legal process
- Protection of Rights: To protect our rights, property, or safety, or that of our users or the public
- Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
- With Your Consent: When you explicitly authorize us to share your information
7. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request access to the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your account and associated data
- Export: Request a copy of your data in a portable format
- Opt-out: Unsubscribe from marketing communications at any time
- Withdraw Consent: Withdraw consent for data processing where applicable
To exercise these rights, please contact us through the contact information provided below. We will respond to your request within 30 days.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we need to retain it for legal or legitimate business purposes.
9. Cookies and Tracking
We use cookies and similar tracking technologies to track activity on our service and store certain information. Cookies are files with a small amount of data that are sent to your browser from a website and stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
10. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our services, you consent to the transfer of your information to these locations.
11. Children's Privacy
Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our services after any modifications indicates your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: privacy@thumbtory.com
Address: Thumbtory Privacy Department
We will respond to your inquiry within 30 days.