Privacy Policy

1. About this policy

Be a Goose, LLC operates Thumbform. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit thumbform.com, use the Thumbform application, purchase credits or a subscription, connect an integration, or contact us.

Questions and privacy requests can be sent to support@thumbform.com.

2. Information we collect

• Account information, such as your name, email address, profile details, authentication identifiers, and account preferences.
• Customer Content that you choose to provide, including prompts, instructions, videos, audio, reference images, face images, thumbnails, generated images, edits, and project files.
• Product activity, such as projects, generation settings, exports, credit usage, subscription status, connected integrations, and actions taken in the service.
• Billing information, such as your plan, purchases, billing address, transaction identifiers, and payment status. Stripe processes payment-card details, and Thumbform does not store complete card numbers.
• Device, log, and analytics information, such as IP address, browser type, device type, referral source, page and feature activity, approximate location derived from IP address, cookies, and similar identifiers.
• Communications and support information that you send to us.

3. How we collect information

We collect information directly from you, automatically from your browser or device, from services you connect, and from providers that help us operate Thumbform. For example, we receive authentication details from Clerk or Google and transaction status from Stripe.

4. How we use information

• Provide, personalize, maintain, and improve Thumbform.
• Authenticate users, secure accounts, prevent fraud and abuse, enforce usage limits, and investigate technical or security issues.
• Process requested image generations, edits, video analysis, transcription, storage, and exports.
• Administer credits, subscriptions, purchases, invoices, and customer support.
• Measure product performance, understand acquisition and feature usage, and improve the customer experience.
• Send service, security, billing, support, and legal communications.
• Comply with law, protect rights and safety, and establish or defend legal claims.

5. AI and media processing

Thumbform sends the inputs needed to complete your request to AI and media-processing providers. These inputs may include prompts, instructions, reference images, selected video frames, audio, and existing thumbnails. The resulting output may also be processed to check quality and follow your instructions.

We use face and reference images as visual inputs for the features you request. Thumbform does not intentionally create face-recognition templates or use those images to identify a person.

We do not use private Customer Content to train Thumbform models unless we separately ask for and receive your permission.

6. Legal bases

Where data-protection law requires a legal basis, we process information as necessary to perform our contract with you, pursue legitimate interests such as operating and securing the service, comply with legal obligations, and act with your consent where required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

7. How we disclose information

We disclose information only as needed to operate Thumbform, complete your requests, comply with law, or protect the service and its users.

• Service providers for authentication, hosting, private file storage, databases, AI generation and verification, transcription, analytics, customer support, and payments. These include Clerk, Google, Vercel, Neon, OpenAI, Stripe, and PostHog. Google Analytics may also be used when enabled.
• Services that you direct us to connect, such as YouTube or another integration.
• Professional advisers, authorities, or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or the protection of rights.
• A buyer, investor, successor, or adviser in connection with a merger, financing, reorganization, sale, or similar corporate transaction, subject to appropriate protections.

8. Cookies and analytics

Thumbform and its analytics providers use cookies, local storage, and similar technologies to keep the service working, remember settings, measure visits and conversions, and understand product use. You can limit optional cookies through browser controls or supported privacy tools, although blocking necessary storage may prevent parts of the service from working.

We do not sell personal information or use it for cross-context behavioral advertising.

9. Retention and deletion

We retain account and project information while your account is active and for as long as needed to provide the service. You can delete individual projects and assets using the available product controls. You may request account or personal-information deletion by emailing us.

We may retain transaction records, security logs, support history, and limited backup copies for legal, accounting, fraud-prevention, dispute-resolution, and service-recovery purposes. Retention depends on the type of information and why it is needed. When information is no longer required, we delete it or de-identify it.

10. Security

We use technical and organizational safeguards designed to protect personal information, including access controls and private storage for customer uploads and outputs. No system is completely secure, so we cannot guarantee absolute security. Please use a secure account and contact us promptly if you believe your account has been compromised.

11. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may also have the right to appeal a decision or complain to a data-protection authority. Send requests to support@thumbform.com. We may verify your identity before completing a request.

California residents may request access, correction, or deletion and may exercise applicable opt-out rights without discrimination. Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or advertising-sharing opt-out to exercise for Thumbform.

12. International transfers

Thumbform and its providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers, such as contractual protections, and take steps designed to protect information in accordance with this policy.

13. Children

Thumbform is not directed to anyone under 18, and we do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information so we can take appropriate action.

14. Changes to this policy

We may update this policy as Thumbform changes. We will post the updated policy with a new effective date and provide additional notice when required by law.

15. Contact

Contact Be a Goose, LLC at support@thumbform.com with privacy questions, requests, or complaints.