Privacy & Terms

We collect only the data we need to run Thumblify and provide you with a good experience:

• Account data — your email address, used to create and secure your account.
• Face photos — if you use our Face Swap feature, the photo(s) you upload so the AI can place your likeness into generated thumbnails.
• Payment data — handled entirely by our payment processor, Stripe. We never see or store your full card number.
• Analytics data — anonymized usage data (pages visited, features used, approximate location from IP) to help us understand how Thumblify is used and where it breaks.

Your data is used strictly to operate the service:

• To generate your AI thumbnails, including placing your face when you use Face Swap.
• To send you transactional and account emails (trial reminders, receipts, password resets) via our email provider, Brevo.
• To process subscriptions, trials, and invoices via Stripe.
• To improve the product based on aggregated, anonymized usage patterns.

We do not sell your personal data, and we do not use your uploaded face photos to train AI models without your explicit, separate consent.

Generated thumbnails and uploaded photos are stored on Cloudflare R2, an encrypted object storage service.

• Face photos are stored as part of your Brand Kit and are deleted when you delete your account. To have a face photo removed without deleting your account, email support@thumblify.co and we'll remove it manually.
• Generated thumbnails are kept for as long as your account is active, so you can re-download past work.
• Account and billing records are retained for as long as required by applicable tax and accounting law after account closure.

Under GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain kinds of processing, including analytics.

To exercise any of these rights, email us at support@thumblify.co — we'll respond within 30 days.

We use a minimal set of cookies: strictly necessary cookies to keep you logged in, and privacy-friendly analytics to understand aggregate product usage. We do not use third-party advertising trackers. You can disable non-essential cookies in your browser at any time without losing core functionality.

Thumblify is operated from Poland, within the European Union, and we process personal data in accordance with the General Data Protection Regulation (GDPR).

• Our legal basis for processing is either your consent, the performance of our contract with you (providing the service you signed up for), or our legitimate interest in operating and improving Thumblify.
• Sub-processors (Stripe, Brevo, Cloudflare) are contractually bound to GDPR-equivalent data protection standards.
• If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority — in Poland, the Urząd Ochrony Danych Osobowych (UODO).

Questions about this Privacy Policy or how your data is handled? Email us at support@thumblify.co.