Thumly logo
Build a Thumbnail

Privacy Policy

Last Updated: January 25, 2026

1. Introduction

Welcome to Thumly.co ("we," "us," or "our"). We take your privacy seriously and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and disclose information obtained from users ("User," "you") when using the website https://www.thumly.co and our image generation services (collectively, the "Service").

By using our Service, you agree to the terms of this Policy. If you do not agree with these terms, please do not use our website.

2. Information We Collect

We collect several types of information to provide and improve our Service:

2.1. Personal Data

When registering or using the Service, we may ask you for certain personal information:

  • Contact Details: Email address, name.
  • Account Credentials: Username, encrypted password.
  • Payment Information: We do not store your full credit card details. Payment processing is handled by secure third-party services (e.g., Stripe/lemonsqueezy). We only receive transaction status and limited payment data (e.g., the last 4 digits of the card) to verify payment.

2.2. User Content

  • Uploaded Images: We collect and temporarily store images you upload to the platform solely for the purpose of generating thumbnails and processing them according to your request.
  • Generated Content: Images and data created using our Service.

2.3. Usage and Technical Data

We automatically collect information when you visit our website:

  • IP address;
  • Browser type and version;
  • Time and date of visit;
  • Pages of our Service that you visit;
  • Unique device identifiers;
  • Other diagnostic data.

3. How We Use Your Data

We use the collected data for the following purposes:

  • Service Provision: To authenticate you, generate thumbnails, and ensure the website functionality works correctly.
  • Service Improvement: To analyze website usage, fix bugs, and develop new features.
  • Communication: To send service notifications (password reset, payment confirmation) and, if you have opted in, marketing newsletters.
  • Security: To prevent fraud and ensure platform security.
  • Legal Obligations: To comply with applicable laws and regulations.

4. Legal Basis for Processing (For EEA/GDPR Users)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using personal data depends on the type of data:

  • Performance of a Contract: Processing is necessary to provide you with Thumly.co services.
  • Consent: You have given consent for processing (e.g., for marketing newsletters).
  • Legitimate Interest: Processing is necessary for our legitimate interests (e.g., website security), provided these interests do not override your rights.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Policy.

  • Account Data: Retained while your account is active. Contact support for data removal requests.
  • Uploaded Images: We store uploaded files only for the period necessary to perform the generation and a short period thereafter for caching purposes (your convenience), after which they may be automatically deleted. We do not use your images to train public AI models without your explicit permission.

6. Disclosure of Data

We do not sell or rent your personal data. We may share data with the following categories of third parties:

  • Service Providers: Cloud hosting providers (e.g., AWS, Google Cloud) for data storage; analytics services (e.g., Google Analytics) to improve website performance; email services for sending notifications.
  • Payment Processors: To process your payments.
  • Law Enforcement: If required by law or in response to valid requests by public authorities.

7. Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

8. Your Data Protection Rights

Depending on your jurisdiction (including GDPR and CCPA), you may have the following rights:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct inaccurate data.
  • Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data.
  • Right to Restrict Processing: You can request that we restrict the use of your data.
  • Right to Withdraw Consent: You can withdraw your consent to data processing at any time.

To exercise these rights, please contact us at: contact@thumly.co.

9. Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. We use commercially acceptable means (SSL encryption, secure servers) to protect your personal data.

10. Children's Privacy

Our Service is not intended for anyone under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

11. Links to Other Websites

Our Service may contain links to other sites that are not operated by us. We strongly advise you to review the Privacy Policy of every site you visit.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: