Privacy Policy

Draft. We collect account email, OAuth tokens for YouTube (encrypted), usage metrics, and billing records. Data is stored in tenant-isolated Supabase schemas in India / EU regions per deployment.

We use Google OAuth, Razorpay, Fal.ai, and DeepSeek as subprocessors. We do not sell personal data. Retention: account data while active + 90 days after deletion request unless law requires longer.

International users: by using the service you consent to transfer to jurisdictions where our infrastructure operates, with safeguards consistent with applicable law.

Contact: privacy@thumbforge.tavyr.com