1. Introduction

ThumbBoost ("we," "our," or "us") operates the thumbboost.com website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our thumbnail preview and comparison service.

By using ThumbBoost, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: When you create an account, we collect your email address, name (optional), and password. If you sign up via third-party authentication (Google, GitHub), we receive your name, email, and profile picture from that provider.
Uploaded Content: Thumbnails, images, and other media files you upload for preview and comparison. This includes metadata such as file names, dimensions, and file sizes.
Project Data: Video titles, notes, labels, and organizational data you create within the service.
Payment Information: When you subscribe to a paid plan, our payment processor (Dodo Payments) collects billing details. We do not store your full credit card number on our servers.
Communications: Emails, support requests, and feedback you send us.

2.2 Information Collected Automatically

Usage Data: Pages visited, features used, time spent, click patterns, and navigation paths within our service. We use PostHog to track product usage events such as page views, feature interactions (e.g., uploads, layout switches, generation requests), and funnel progression. PostHog receives your user ID, subscription plan, and credit balance to help us understand how different user segments use the product.
Error and Performance Data: We use Sentry to collect error reports, crash data, and performance traces. When an error occurs, Sentry may capture a session replay — a reconstruction of your screen interactions leading up to the error — to help us diagnose and fix issues. Sentry receives your user ID for error attribution. Session replays are only captured when an error occurs (not during normal browsing).
Advertising Data: We use Google Ads (via Google Tag Manager) for conversion tracking and advertising measurement. Google may collect device identifiers, IP address, and browsing activity on our site to measure ad effectiveness.
Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
Log Data: IP addresses, access times, referring URLs, and error logs.
Cookies and Similar Technologies: We use essential cookies for authentication and session management, and optional analytics cookies to understand usage patterns.

2.3 AI Generation Data

When you use our AI thumbnail generation features, we process your input prompts, reference images, and style preferences. Generated images and the prompts used to create them are stored in your account.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process your uploads and generate thumbnail previews
Execute AI generation requests and deliver results
Process payments and manage subscriptions
Send transactional emails (account verification, password resets, receipts)
Send product updates and marketing communications (you can opt out at any time)
Respond to your support requests and inquiries
Analyze usage patterns to improve user experience
Detect, prevent, and address technical issues and abuse
Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

4.1 Service Providers

Cloud Infrastructure: Hosting and storage providers that process data on our behalf
Payment Processing: Dodo Payments for subscription billing and one-time purchases (Merchant of Record)
AI Services: Google Gemini for AI thumbnail generation, content analysis, and CTR scoring. Prompts, reference images, and uploaded thumbnails are sent to Google's API for processing.
Product Analytics (PostHog): We use PostHog to track product usage, feature adoption, and conversion funnels. PostHog receives your user ID, subscription plan, credit balance, and behavioral events (e.g., page views, uploads, generation requests). PostHog is hosted in the US/EU.
Error Monitoring (Sentry): We use Sentry to capture errors, performance data, and session replays (on errors only). Sentry receives your user ID, browser information, and interaction data surrounding errors. Sentry data is processed in the US.
Advertising (Google Ads): We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. Google may use cookies and device identifiers for this purpose.
Email Services: Transactional email providers

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, or legal process.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share information for other purposes with your explicit consent.

5. Data Storage and Security

5.1 Storage Location

Your data is stored on servers located in the United States and/or European Union. By using our service, you consent to the transfer of your information to these locations.

5.2 Security Measures

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest for sensitive data, secure password hashing, and regular security audits. However, no method of transmission over the internet is 100% secure.

5.3 Your Content Privacy

Your thumbnails are private by default. Uploaded content is only accessible to you and is not publicly visible.

6. Data Retention

Account Data: Retained while your account is active and for 30 days after deletion request
Uploaded Content: Retained until you delete it or close your account
Generated Images: Stored in your account until you delete them
Log Data: Automatically deleted after 90 days
Error Reports (Sentry): Retained for 90 days; session replays retained for 30 days
Analytics Data (PostHog): Retained in accordance with PostHog's data retention policies
Payment Records: Retained as required by tax and accounting laws (typically 7 years)

7. Your Rights and Choices

7.1 Account Controls

Access and update your account information at any time
Download your data (data portability)
Delete individual uploads, projects, or your entire account
Opt out of marketing emails via unsubscribe links

7.2 Cookie Preferences

You can manage cookie preferences through your browser settings or our cookie consent banner. Note that disabling essential cookies may affect service functionality.

7.3 Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

7.4 Rights for California Residents (CCPA)

California residents have the right to:

Know what personal information is collected
Know whether personal information is sold or disclosed
Say no to the sale of personal information (we do not sell data)
Access your personal information
Request deletion of personal information
Equal service and price regardless of privacy choices

8. Children's Privacy

ThumbBoost is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly. If you believe we have information from a child under 16, please contact us.

9. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a notice on our website prior to the change becoming effective. Your continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

Email: [email protected]
Website: thumbboost.com

For GDPR-related inquiries, please include "GDPR Request" in your email subject line. We will respond to all requests within 30 days.