Privacy Policy

Thumbalyze ("we," "us," or "our") provides an AI-powered SaaS platform for YouTube creators to analyze thumbnails, generate creative assets, write scripts, explore niches, and get coaching feedback. This Privacy Policy explains what information we collect, how we use it, and the choices you have when using thumbalyze.com.

We collect information in these categories:

• Account data: email address, password hash (if you register with email/password), display name, onboarding preferences, plan tier, and billing status.
• Usage data: tool runs (analyses, generations, scripts, niche searches, Coach chats), credit consumption, feature settings, and basic product analytics needed to operate the service.
• Content you submit: thumbnail images, titles, niches, scripts, chat messages to Coach, and other inputs you provide for AI processing.
• YouTube OAuth data: if you choose to connect YouTube, we receive channel identifiers, channel title, channel avatar, and OAuth tokens scoped to read-only YouTube access so we can show recent uploads and channel-aware context. We do not post to YouTube on your behalf.
• Payment data: subscriptions and checkout are handled by Stripe. We receive customer and subscription metadata from Stripe, not full card numbers.
• Cookies & session data: authentication cookies, session tokens, and similar technologies that keep you signed in and remember preferences such as theme.

• Provide, maintain, and improve Thumbalyze features.
• Run AI analysis, generation, scripting, niche discovery, and coaching using your submitted content.
• Authenticate accounts, enforce plan limits, and manage credits.
• Process subscriptions, invoices, and affiliate payouts where applicable.
• Send service-related notices and respond to support requests.
• Detect abuse, fraud, and violations of our Terms of Service.

Thumbalyze sends submitted content to third-party AI providers to produce scores, feedback, images, scripts, and text. We send only what is needed to fulfill your request. Do not submit content you are not authorized to share or that contains sensitive personal data you do not want processed by AI systems.

Linking YouTube is optional. When connected, we use Google OAuth with the YouTube read-only scope to read channel metadata and recent uploads for dashboard and coaching context. You can unlink at any time from Settings. Unlinking revokes our use of stored tokens for that channel, subject to routine backup retention described below.

We do not sell your personal information. We share data only with:

• Infrastructure and AI vendors that process data on our behalf under contractual obligations.
• Stripe for payment processing.
• Google when you initiate YouTube OAuth.
• Authorities when required by law or to protect rights, safety, and security.

We retain account and billing records while your account is active and for a reasonable period afterward to comply with legal, tax, and dispute obligations. Saved history (analyses, generations, scripts, chat threads) remains until you delete it or close your account. OAuth tokens are removed when you unlink a channel. We may retain aggregated or de-identified analytics that cannot reasonably identify you.

We use industry-standard measures including encrypted transport (HTTPS), access controls, and hashed credentials. No method of transmission or storage is completely secure; please use a strong, unique password and keep your login credentials confidential.

• Access and update profile information in Settings.
• Delete saved history from Settings where available.
• Unlink YouTube channels at any time.
• Cancel paid subscriptions through billing settings or Stripe customer portal.
• Request account deletion or a copy of your data by contacting us.

Depending on your location, you may have additional rights under applicable privacy laws (such as access, correction, deletion, or objection). We will honor valid requests as required by law.

Thumbalyze is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us data, contact us so we can delete it.

If you access Thumbalyze from outside the United States, your information may be processed in the U.S. or other countries where our service providers operate.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice where appropriate. Continued use after changes means you accept the updated policy.

Questions about privacy or data requests: