Privacy Policy

Account information

When you create an account, we collect your name and email address. If you subscribe to a paid plan, Stripe collects and stores your payment information — we do not store credit card numbers.

Thumbnail images

When you use the Service, you may upload thumbnail images. These are processed to generate a preview and, if you are on the Pro plan, stored in AWS S3 to power your thumbnail history. Images uploaded by Free and Starter users are not persisted after the analysis is complete.

Usage data

We log basic usage information including the search terms you enter, the plan you are on, and the timestamps of scoring requests. This data is stored in our database and used to enforce plan limits and improve the Service.

Automatically collected data

Like most web services, we may collect standard server log data including your IP address, browser type, referring URL, and pages visited. This data is used for security monitoring and aggregate analytics only.

• To provide, maintain, and improve the Service.
• To authenticate you and manage your account.
• To process payments and manage your subscription via Stripe.
• To send transactional emails (password resets, subscription receipts). We do not send marketing emails without your consent.
• To enforce plan limits and detect abuse.
• To respond to support requests.

We share data with the following third parties to operate the Service:

• Anthropic — thumbnail images and search terms are sent to Anthropic’s Claude API to generate AI scores and analysis. Anthropic’s use of this data is governed by their Privacy Policy.
• Stripe — payment processing. Your payment information is handled directly by Stripe and subject to their Privacy Policy.
• Amazon Web Services — Pro-plan thumbnail history is stored in S3. AWS’s data handling is governed by their Privacy Notice.
• YouTube (Google) — we use the YouTube Data API to fetch competitor thumbnail data. This is subject to Google’s Privacy Policy.

We do not sell your personal information to any third party.

We retain your account information for as long as your account is active. Scoring log entries are retained for up to 90 days. Pro thumbnail history is stored until you delete it or close your account.

When you delete your account, we delete your personal information within 30 days, except where we are required to retain it for legal or compliance reasons.

We take reasonable technical and organizational measures to protect your information. Passwords are hashed using bcrypt before storage. API keys and secrets are never exposed to the client.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security and are not responsible for unauthorized access beyond our reasonable control.

We use session cookies required for authentication (via NextAuth). We do not use third-party tracking cookies or advertising cookies. You can disable cookies in your browser, but doing so will prevent you from logging in.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Depending on your location, you may have the right to access, correct, or delete the personal information we hold about you. To exercise these rights, email us at support@thumbrival.com.

If you are located in the European Economic Area, you also have the right to object to processing and the right to data portability under the GDPR.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, notify you by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Email us at support@thumbrival.com.