Privacy Policy

Overview

This Privacy Policy explains how Thumbize (“we”, “us”, or the “Service”) handles information when you use the Service. We do not publish a made-up company name or contact email here. For questions or requests, use the in-product support ticket area.

Information we may receive

Depending on how you use the Service, we may receive:

• Account information — such as your name, email address, sign-in records, and account settings.
• Support information — ticket titles, messages, attachments, and the order or subscription details you choose to include in a ticket.
• Usage and security information — feature activity, plan and entitlement state, rate-limit signals, device and browser information, IP-related security signals, and logs needed to operate and protect the Service.
• Submitted creative material — images, text, prompts, and other inputs you intentionally submit to a feature.
• Public avatar lookup information — a Roblox username or public identifier and the resulting public avatar image needed for a requested workflow. We do not ask for or store Roblox passwords, cookies, session tokens, or login credentials.
• Payment and subscription information — Stripe checkout, subscription, invoice, and payment-status data. Stripe handles payment-card details; we do not store full card numbers or security codes on our servers.
• Cookies and similar storage — information needed for authentication, security, preferences, and basic operation.

How we use information

We use information to:

• provide, render, download, and support requested features;
• authenticate accounts and protect the Service from fraud, abuse, and unauthorized access;
• create and maintain orders, subscriptions, invoices, plan entitlements, and the existing credit ledger where applicable;
• respond to support tickets, payment questions, and refund requests;
• measure reliability and improve the Service; and
• comply with legal obligations and enforce our agreements.

Images, avatar material, and AI providers

Avatar-derived files, source images, and finished images containing avatar material may be retained for up to 24 hours for processing, download, abuse prevention, or support. They are not intended to be used as a persistent character library. Temporary files may be removed earlier, and deletion can be delayed by backups or technical limits.

When an AI background feature is available, the AI service is used for the background only. Avatar or character material is not intentionally sent to a third-party AI model for character generation. Prompts and background-related inputs may be processed by the configured provider needed to deliver that feature. Review each output before publishing it.

Sharing

We do not sell personal information. We may share the minimum information needed with service providers that host, secure, process, store, or support the Service, including Stripe for payments and a configured AI provider for an AI background request. Providers are expected to process information for the requested service or other lawful operational purposes.

We may also disclose information when required by law, to respond to valid legal process, or to protect users, the Service, or other people from fraud, abuse, security threats, or harm.

Retention and deletion

We keep information only as long as reasonably needed for the purposes described above, legal obligations, dispute handling, security, accounting, and reliable operation. Avatar-derived and image files are subject to the up-to-24-hour processing window described above. Account, order, subscription, support, and security records may be retained longer where needed for those purposes.

You can request account or data assistance through a support ticket. We may need to verify the request and may retain information that we must keep for legal, security, fraud-prevention, or accounting reasons.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to certain processing. Use the support ticket area to make a request. We will respond according to applicable law and may ask for information needed to verify your identity and protect the account.

Security

We use access controls, encryption in transit, provider safeguards, and operational measures appropriate to the information and feature. No internet transmission or storage system is completely secure. Do not send passwords, full card numbers, security codes, Roblox credentials, or other unnecessary secrets in a support ticket.

Minors

The Service does not make a representation that its collection or use of information is compliant with every law that may apply to minors. If a minor uses the Service, a parent or guardian should be involved where required by applicable law or platform rules. Do not submit another person’s information without the permission required by law.

International processing

Service providers may process information in countries different from where you live. Where required, we use appropriate safeguards for cross-border processing.

Changes to this policy

We may update this Privacy Policy by changing the date above and, where appropriate, notifying users through the Service. The updated policy applies from its posted date unless applicable law requires another process.

Support

For privacy questions, data requests, payment questions, or deletion assistance, use the in-product support ticket area.