Legal
Privacy policy
Effective and last updated: 3 August 2026
This policy explains how Thumbuild, operated by TechieSapien, handles personal data when you use thumbuild.com and the Thumbuild application.
Information we collect
We collect account details such as your name and email, product inputs such as prompts and reference images, generated projects and edits, device and security logs, usage events, support messages, and subscription status. Payment card details are collected and processed by Dodo Payments and are not stored by Thumbuild.
How we use information
We use this information to authenticate you, provide and improve thumbnail generation and editing, maintain project history, calculate credits, process subscriptions, prevent abuse, diagnose failures, communicate service updates, and comply with legal obligations.
AI processing
Prompts and attached references may be sent to our configured AI provider, currently OpenAI, to analyse your brief and generate output. Do not upload material you are not authorised to use. Provider credentials remain server-side. AI outputs may be inaccurate and must be reviewed before publication.
Service providers
We use Supabase for authentication, database, and private file storage; Vercel for hosting, performance analytics, and server logs; OpenAI for configured AI processing; Dodo Payments for checkout, subscriptions, tax, invoices, and payment support; and Google when you choose Google sign-in. Each provider processes data under its own terms and our service configuration.
Private assets and sharing
Project assets are stored in private buckets and normally delivered through authenticated or time-limited URLs. If you enable a project review link, anyone with that unguessable link can view the shared design until you disable sharing. Do not post a review link publicly unless that is your intent.
Retention and deletion
We retain account and project data while your account is active and as reasonably needed for security, dispute resolution, billing, and legal compliance. You can export or delete your account from Settings. Some payment and audit records may be retained by the relevant provider or where law requires.
Security
We use row-level database policies, private storage, server-only secrets, signed webhooks, rate limits, and access controls. No system is perfectly secure; report suspected account compromise to founder@techiesapien.com immediately.
Your choices and rights
You can update preferences, export your account data, delete projects, or delete your account in the product. You may also contact us to request access, correction, erasure, or withdrawal of consent where applicable. We will verify requests before acting.
Children
Thumbuild is not directed to children under 18. Do not create an account or submit a child’s personal data unless you are legally authorised to do so.
International processing
Our providers may process data in countries other than your own. By using the service, you understand that data may be transferred subject to appropriate provider safeguards and applicable law.
Contact and changes
Questions or privacy requests can be sent to founder@techiesapien.com. We may update this policy as the product or law changes. Material changes will be posted here with a revised date.