Privacy Policy

1. What this policy covers

This policy explains how Karouselmaker handles information when you use our website and carousel-creation service. It applies to information you provide and information created while providing the Service.

2. Information we handle

• Account information: your email address, sign-in provider details, and account profile data.
• Creation workspace: project details, product context, topics, prompts, slide copy, captions, hashtags, template choices, and generated carousel data.
• Assets: images you upload, images you choose to import from Google Drive, and image-source details needed to render and credit selected third-party images.
• Connected social accounts: when you connect TikTok, we store OAuth tokens, your TikTok user id and username, and post settings you choose (visibility, interaction options, commercial disclosure, title, caption, and schedule time) so we can publish on your behalf.
• Billing records: subscription status, post-pack credits, Stripe customer identifiers, and checkout records. Payment-card details are collected and processed by Stripe, not stored by Karouselmaker.
• Support and operations: messages you send through Contact us and technical request or error information used to operate, secure, and troubleshoot the Service.

3. How we use information

• Authenticate you, save your workspace, and render or export your carousels.
• Generate requested drafts, captions, hashtags, and related carousel content.
• When you connect TikTok and schedule a post, query your current TikTok creator settings, prepare slide images, and send the post through TikTok's Content Posting API using the visibility and disclosure choices you select.
• Process subscriptions and post-pack purchases, apply plan limits, and prevent fraud or misuse.
• Answer support requests, diagnose errors, protect the Service, and meet legal obligations.

4. Service providers and connections

We use service providers to run Karouselmaker. Depending on the features you use, they may process information needed to deliver that feature:

• Supabase and managed cloud storage: account authentication and storage of your assets.
• Managed database infrastructure: account, project, carousel, and subscription records.
• OpenAI: prompts and relevant project content sent to create the AI drafts you request. API inputs are not used to train OpenAI models by default; see OpenAI's API data controls.
• Stripe: secure checkout, subscriptions, and post-pack payments.
• Resend: delivery of messages submitted through Contact us.
• Google Drive: only when you choose to import images. The app uses the drive.file permission to access files or folders you select for import, then saves the imported images to your Karouselmaker library. We do not use Google Drive data for advertising.
• TikTok: only when you connect an account and choose to post. We use TikTok Login Kit and the Content Posting API (Direct Post / Photo Mode). TikTok receives the images, title, caption, privacy level, interaction settings, and commercial disclosure you confirm. TikTok's own terms and privacy policy also apply. You can disconnect TikTok in the Post to TikTok panel; that removes our stored connection tokens so we can no longer post for that account until you reconnect.
• Image sources: your search query and chosen source are sent to the relevant third-party image provider when you request a stock or web image.

5. Cookies and session data

We use essential session cookies to keep you signed in and protect authenticated actions. If we add optional analytics or advertising technologies that require notice or consent, we will update this policy and the relevant in-product notice.

6. Retention and deletion

We keep account and workspace data while your account is active and for a reasonable period afterward for backups, security, billing, dispute resolution, and legal compliance. Scheduled TikTok post records and temporary media URLs are kept long enough to complete publishing and short diagnostics, then cleaned up with ordinary retention. You can remove content from the Service where deletion controls are available, and you can disconnect TikTok at any time. To request access, correction, or deletion of personal data, use Contact us. We may need to retain limited information when law or legitimate operational needs require it.

7. Security

We use reasonable technical and organizational measures designed to protect information. No online service can guarantee absolute security, so please use a unique password and keep account access private.

8. Your rights and choices

Privacy laws in your location may give you rights to request access, correction, deletion, portability, or to object to certain processing. Use Contact us to make a request. We may need to verify your identity and will respond as required by applicable law. For TikTok specifically, you can disconnect the integration in-product; that stops future posts from Karouselmaker.

9. Updates and contact

We may update this policy as the Service changes. The date above identifies the latest version. For privacy questions or requests, use Contact us in the footer. Your use of images and third-party material is also covered by our Terms of Service.