Privacy Policy

At ThumbFlow AI, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered thumbnail generation service at thumbflow.io ("the Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Account preferences and settings

2.2 Usage Data

We collect information about how you use our Service:

• Text prompts for image generation
• Uploaded images
• Generated thumbnails and edited images
• Usage patterns and feature interactions
• Device information and IP address

2.3 Payment Information

Payment processing is handled by Creem. We do not store your credit card information. Please refer to Creem's privacy policy for details on how they handle payment data.

2.4 Face Data and Biometric Information

We do not collect or store biometric identifiers. Any facial feature data processed to enable the face swap functionality is used only transiently to complete your requested operation, is not used to uniquely identify any person, is not used to train our models, and is discarded immediately after processing.

• We do not create or retain persistent face templates or embeddings.
• Uploaded images that may contain faces are treated as content under Section 2.2 and retained only according to the retention rules in Section 5. Deleting a source image removes all copies we control.
• No face data is shared with third parties except providers strictly necessary to run the transformation and bound by appropriate data processing agreements.
• Face swap requires consent from all depicted individuals and must not be used for minors (under 13, or higher where local law applies).

Our Service utilizes third-party AI providers to deliver our features. When you use our Service, your data may be processed by various AI service providers, including:

• AI Model Providers - For text-to-image generation and image editing services
• AI Platform Services - For AI model hosting and processing infrastructure
• Natural Language Processing Services - For prompt optimization and text processing

These providers operate under their respective privacy policies and data protection standards. We maintain contractual agreements with all AI service providers to ensure appropriate data protection measures.

We use the collected information for:

• Providing and maintaining our Service
• Processing your AI generation requests
• Managing your account and subscription
• Improving our Service and user experience
• Communicating with you about updates and support
• Preventing fraud and ensuring service security
• Complying with legal obligations

We retain your data according to your subscription plan:

• Free users: Generated content stored for 7 days
• Creator plan: Generated content stored for 30 days
• Professional plan: Generated content stored for 90 days
• Business plan: Generated content stored permanently

Account information is retained until you delete your account. You can request account deletion at any time through your account settings.

We do not sell, trade, or rent your personal information. We may share data only in these circumstances:

• With third-party AI services necessary to provide our features
• With payment processors for subscription management
• When required by law or to protect our rights
• In case of business transfer or merger (with prior notice)

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Withdraw consent for data processing
• Object to certain types of processing

To exercise these rights, please contact us at contact@thumbflow.io

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy, please contact us: