Privacy Policy

ThumbSuite runs ThumbSuite and decides how your data is used. For anything about your data, write to [contact email to be added].

• Account: your email address and a scrambled (hashed) version of your password. We never see the password itself.
• Face photos: the one to three photos you upload for each avatar.
• Your videos: the YouTube link, uploaded video file or transcript you give us for a project, and the text the AI writes about it. Uploaded video files are only kept long enough to read them and are then deleted.
• Thumbnails: the images generated for you, and the instructions you typed.
• Payments: which plan you have and whether it is paid. Card details go to the payment provider and never reach us.
• Technical data: the IP address, browser type and time of requests, kept in our host's server logs for security and fixing problems.

We do not buy data about you from anyone, and we do not run advertising or analytics trackers.

• They are used for one thing: making the thumbnails you ask for.
• To do that, they are sent to the AI image providers listed below each time you generate.
• We do not use them to identify you, we do not build a face database, and we do not use them to train our own AI models.
• We do not sell them or show them to other users. Only your account can open them.
• Deleting an avatar deletes its photos from our storage straight away.

You may only upload a face that is yours, or that belongs to someone who agreed to it. See the Terms. If your face is on ThumbSuite and you did not agree, write to [contact email to be added] and we will remove it.

• To provide the service you signed up for: account, face photos, videos, thumbnails, payments.
• Your consent: for processing photos of a face, which you give when you create an avatar and can withdraw by deleting it.
• Our legitimate interest in a safe service: server logs, preventing abuse, handling reports.
• Legal duties: keeping payment records.

We use other companies to run ThumbSuite. They only get what they need for their part:

• Supabase: stores accounts, projects, photos and thumbnails.
• Hostinger: hosts the website and its server logs.
• AI model providers (image and text models from Google and OpenAI, reached through the API service Apimart): receive your face photos, the reference thumbnail and your video's text in order to generate.
• YouTube API Services: we use them to read public video and channel information. Google's handling of data is described in the Google Privacy Policy.
• Our payment provider: handles card payments and invoices.
• Our email provider: sends account emails such as confirmations and password resets.

Some of these companies are outside your country, including in the United States. Where the law requires it, the transfer is covered by the safeguards those companies offer, such as standard contractual clauses. We do not sell your data and we do not share it for advertising.

ThumbSuite sets one cookie: the one that keeps you signed in. It is strictly necessary, page scripts cannot read it, and it is removed when you sign out. We use no advertising or analytics cookies, which is why there is no cookie banner. If that ever changes, we will ask first.

• Account, projects, avatars and thumbnails: until you delete them or ask us to delete your account.
• After an account is deleted: its photos and thumbnails are removed within 30 days.
• Server logs: for the limited time our host keeps them.
• Payment records: as long as tax law requires.

You can ask us to:

• show you the data we hold about you, or give you a copy;
• correct it;
• delete it, including your whole account;
• stop or limit a particular use of it.

Write to [contact email to be added] from the email address of your account. We answer within 30 days. If you live in the EU or the UK and think we have handled your data wrongly, you can also complain to your data protection authority.

ThumbSuite is for adults. We do not knowingly keep accounts or face photos of anyone under 18. If you think we have some, tell us and we will delete them.

If we change how we use your data, we update this page and its date. If the change matters, we also tell you by email before it applies.