1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using our service:

• Account Information: Email address, username, and password when you create an account
• Profile Information: Optional profile details you choose to add
• Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
• Content: Images you upload and thumbnails you generate
• Communications: Messages you send to our support team

1.2 Information Collected Automatically

When you use ThumbJoy AI, we automatically collect certain information:

• Usage Data: Features used, generation history, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and pages viewed
• Cookies: Session cookies and preference settings

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our thumbnail generation service
• Process your transactions and manage subscriptions
• Send service-related notifications and updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve our service
• Detect, prevent, and address technical issues
• Enforce our Terms of Service and protect against fraud

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely using industry-standard encryption:

• User data is stored in Supabase's secure PostgreSQL database
• Generated thumbnails are stored in secure cloud storage
• All data transmission is encrypted using SSL/TLS protocols

3.2 Security Measures

We implement various security measures to protect your information:

• Password hashing using bcrypt
• Regular security audits and updates
• Limited access to personal information by authorized personnel only
• Secure API endpoints with authentication tokens

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party services that help us operate our business (e.g., Stripe for payments, Supabase for database)
• Legal Requirements: When required by law or to respond to legal process
• Protection of Rights: To protect the rights, property, or safety of ThumbJoy AI, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Your Rights and Choices

5.1 Access and Control

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Export your generated thumbnails
• Opt-out of marketing communications

5.2 Data Portability

You can download your generated thumbnails at any time through your account dashboard. We provide data in commonly used formats for easy portability.

6. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Analyze service usage and performance
• Provide personalized features

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.

7. Third-Party Services

Our service integrates with the following third-party services:

• Stripe: Payment processing (see Stripe's Privacy Policy)
• Supabase: Database and authentication (see Supabase's Privacy Policy)
• Fal.ai: AI image generation (see Fal.ai's Privacy Policy)
• Vercel: Hosting and analytics (see Vercel's Privacy Policy)

8. Children's Privacy

ThumbJoy AI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your information remains protected.

10. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with our services
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@thumby.ai
• Support: support@thumby.ai
• Website: thumby.ai