Back to Home

Privacy Policy

Last updated: 2026-09-14

1. Information We Collect

ThumbnailFlow collects and processes the following information through Google Sign-In:

  • Your Google account email address and name (used for login and sending notifications)
  • Connected YouTube channel information (channel ID, channel name)
  • Titles, thumbnails, and view counts of connected YouTube videos (used to run A/B tests and measure performance)
  • View counts and performance data of connected YouTube videos (used to measure A/B test results)
  • Payment-related information (processed via Paddle; raw payment method details such as card numbers are never stored on ThumbnailFlow's servers)

2. Google OAuth Permissions We Request

To provide the Service, ThumbnailFlow requests the following OAuth permissions (scopes) from your Google account:

  • https://www.googleapis.com/auth/youtube.force-ssl — Read and update YouTube video metadata (thumbnails and titles) to run A/B test swaps on your behalf.
  • https://www.googleapis.com/auth/userinfo.email — Identify your account and send service notifications.
  • https://www.googleapis.com/auth/userinfo.profile — Display your name within the app.

We request only the permissions necessary to deliver the Service. You can revoke these permissions at any time via Google Account Permissions.

3. Use of YouTube API Services

ThumbnailFlow uses YouTube API Services. By using ThumbnailFlow, you agree to be bound by the YouTube Terms of Service. For information on how Google collects and processes data, please see the Google Privacy Policy.

ThumbnailFlow's access to, and use of, information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice this means:

  • YouTube data is used only to provide and improve the thumbnail/title A/B testing features described in this policy — never to serve ads.
  • We do not sell YouTube API data, and we do not transfer it to third parties except as needed to provide our service (e.g., our cloud image storage provider) or as required by law.
  • No human reads your YouTube data except: with your explicit consent, for security purposes (e.g., investigating abuse), to comply with applicable law, or where the data has been aggregated and anonymized.
  • Data obtained from Google APIs is never used to train AI or machine learning models.

4. How We Use Your Information

  • Running automated thumbnail/title A/B test swaps
  • Comparing candidate performance (view counts, VPH) and determining a winner
  • Sending email notifications about test completion and plan/billing status
  • Preventing abuse of the service and enforcing per-plan usage limits

5. Data Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, or destruction. OAuth refresh tokens are stored encrypted and are used exclusively to operate the Service on your behalf. We do not store raw payment method details (e.g., card numbers) on our servers — all payment data is handled directly by Paddle, our payment provider.

6. Data Retention, Deletion, and Third-Party Sharing

We use the information we collect solely to provide the service, and we do not sell or share it with third parties except where required by law.

If you disconnect a channel from the Settings page, the stored OAuth refresh token for that channel is deleted immediately, and ThumbnailFlow permanently loses the ability to access that YouTube account.

To request deletion of your entire account and all associated data (including video, test, and analytics records), contact us at the email address below. We will complete the deletion within 30 days of a verified request.

7. Contact

For privacy-related inquiries, please contact us via the in-app Settings page or at admin@trythumbnailflow.com.