Privacy Policy

Last updated: September 10, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where"control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to MorningSight LLC, 2108 N ST STE N, SACRAMENTO, CA 95816.
  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
  • Country refers to: California, United States
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
  • Third-party Social Media Service means any services or content (including data, information, products or services) provided by a third-party that may be displayed, included or made available by the Service. Currently, the Service uses the YouTube Data API (https://developers.google.com/youtube/v3) to display public YouTube data, and Google Sign-In to create and access Accounts.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Website refers to ThumbnailPeak, accessible from https://thumbnailpeak.com/
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
  • Your Content means the material You provide to the Service to work on: thumbnail images, video titles, YouTube channel handles and video links, any written request You add to an improvement, and any style template or component images You upload.

Collecting and Using Your Personal Data

Types of Data Collected

You can use parts of the Service, including the thumbnail previewer and a limited monthly allowance of the AI critique and improve tools, without creating an Account. When You do so, We do not ask You for any personally identifiable information, but certain information, such as Your IP address, is collected automatically as described below. When You sign in, subscribe, or use features that keep Your work, We collect the additional information described in this section.

Account Information

Accounts are created by signing in with Google. When You sign in, Google provides Us with Your email address, Your name and Your profile picture. We store Your email address and name, together with the date Your Account was created and the date of Your most recent sign-in. Your profile picture is shown to You from Google and is not stored by Us. We never receive Your Google password, and We do not request access to Your YouTube channel or any other Google data.

After You create an Account, We may ask You to answer a short optional survey: Your role, what You want to use the Service for, how You found Us, and what We could improve. Your answers are stored with Your Account and are used to understand who uses the Service and to improve it.

Your Content

The Service works on the material You give it. Depending on the feature You use, this includes the thumbnail images You upload, the video titles You enter, the YouTube channel handles and video links You look up, any written request You add to an improvement, and any style template or component images You upload. We collect Your Content to provide the feature You asked for, as described under "AI Processing of Your Content" and "Stored Results, Projects and Sharing" below.

Please do not upload images or text containing Personal Data about other people unless You have the right to do so.

YouTube Channel Handles

When You enter a YouTube channel handle to preview Your thumbnail on that channel’s page or to watch that channel for breakout videos, We keep, on Your Account, the default handle You choose in Settings and a short list of the handles You have recently looked up (at most the 20 most recent). We use this list to prefill the previewer and to understand which channels Accounts work on. It is visible only to You and to the Company.

Billing Information

Paid subscriptions are processed by Stripe, Inc. (https://stripe.com/privacy). When You subscribe, You enter Your payment details on a page hosted by Stripe; We never see or store Your card number. We store the identifier Stripe assigns to You as a customer and the status of Your subscription (for example whether it is active, when the current billing period ends, and whether it is set to cancel), so that the Service can apply Your plan. The billing history shown in Settings is retrieved from Stripe when You view it.

IP Address

We automatically collect the Internet Protocol (IP) address of the Device You use to access the Service. We use Your IP address to:

  • Enforce usage limits on the Service, such as the monthly allowance of AI critiques, improvements and generations available without an Account;
  • Prevent abuse, fraud, and unauthorized use of the Service;
  • Maintain the security and integrity of the Service; and
  • Analyze usage of the Service for diagnostic purposes.

For usage limits, We do not store Your IP address itself. We store a one-way, salted hash of it, and the usage records keyed by that hash expire automatically: per-day records after 7 days and monthly allowance counters within about 45 days of the end of the month. AI results You create without an Account are attributed to that hash and are reachable only through their own unguessable links. Our hosting provider also records IP addresses in standard request logs for a limited period for security and diagnostic purposes. Your IP address is handled in accordance with the "Retention of Your Personal Data" section of this Privacy Policy.

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

AI Processing of Your Content

The AI features of the Service (critique, compare, improve and generate) are provided with the help of OpenAI, L.L.C. (https://openai.com/policies/privacy-policy), acting as Our Service Provider. When You run one of these features, We send OpenAI the Content that feature needs and nothing else:

  • Critique and compare: the thumbnail image or images You submit and the title, if You entered one.
  • Improve: the thumbnail image, its title, the findings of the critique the improvement is based on, and any written request You add.
  • Generate: frames retrieved from the public YouTube video You link, that video’s existing thumbnail and title, and any style template or component images You attach.

Before any of this is processed, the images and text are checked by OpenAI’s moderation service, and content that is flagged is refused. We do not send OpenAI Your name, Your email address or any identifier for Your Account. OpenAI processes this Content under its API terms, which state that content submitted through its API is not used to train its models (https://openai.com/enterprise-privacy/).

The results of AI processing (scores, written findings, improved images and generated images) are stored by Us as described in the next section.

Stored Results, Projects and Sharing

AI results

Every critique keeps a working copy of the thumbnail, resized to 1280×720, so that You can later improve it from Your history; Your original upload is not retained after processing. Images produced by improve and generate are stored too. These working copies and generated images are stored in Google Cloud Storage and are deleted automatically about 60 days after they were last used. The critique text and scores themselves, and, for signed-in users, a small preview of each saved result, are kept with Your Account until You delete them.

Projects, templates and watched channels

If Your plan includes Projects, the thumbnails and results You file into a project, and the style templates You save to Your template library, are stored with Your Account until You delete the asset, template or project. The list of YouTube channels You choose to watch for breakout videos, and the results gathered for them, are likewise stored with Your Account until You remove the channel.

Sharing

When You choose to share a result, We publish a copy of it (the thumbnail image, its title, its scores and the written findings) at a link that cannot be guessed. Anyone who has that link can view the shared copy, and shared copies and their short links do not expire, so that links You have sent out keep working. Sharing is always Your choice; results You do not share are visible only to You (or, for results created without an Account, only to whoever holds that result’s own unguessable link). To take down a shared copy, contact Us.

YouTube Data

The Service uses the YouTube Data API to fetch public information about the channels and videos You enter, such as the channel’s name, icon and banner, its recent videos, and their titles, thumbnails and view counts, so that We can show Your thumbnail in a realistic setting and find breakout videos. We cache this public data for a limited time to reduce repeated requests. We do not access Your own YouTube account, and We do not share the channel handles You look up with any external party other than Google, to whom they are sent as part of the API request.

If you interact with us or our other users regarding MorningSight and its products and services on any Social Media: (a) where MorningSight responds to any interaction with you on Social Media, your account name/handle may be viewable by any and all members or users of MorningSight’s Social Media accounts. We are not responsible for the Information that you choose to submit or link on any Social Media. Social Media operates independently from MorningSight, and we are not responsible for Social Media interfaces or privacy or security practices. We encourage you to review the privacy policies and settings of any Social Media with which you interact to help you understand their privacy practices. For YouTube and Google Sign-In, please check the Google Privacy Policy (https://policies.google.com/privacy).

Tracking Technologies and Cookies

We use Cookies, browser storage and similar technologies to keep You signed in, to remember Your choices and to understand how the Service is used. The technologies We use are:

  • Necessary / Essential Cookies: Administered by: Us. Purpose: when You sign in, a cookie holds a signed session token so that You stay signed in as You move between pages. Without it, the features that require an Account cannot be provided.
  • Browser storage: Administered by: Us. Purpose: We use Your browser’s local storage to remember things between pages, such as the feedback You gave on a critique, a locally cached preview of Your last critique, how many times You have visited and the link You first arrived from (used by the analytics described below), and whether Your browser is part of the anonymous replay sample. This information stays in Your browser unless it is sent as part of an analytics event.
  • Google Analytics: Administered by: Google LLC. Purpose: to count visits and understand which pages are used. Google’s ability to use and share information collected by Google Analytics about your visits is subject to the Google Analytics Terms of Service and the Google Privacy Policy (https://policies.google.com/privacy). You can opt out with the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout/.
  • PostHog product analytics and session replay: Administered by: PostHog, Inc. (https://posthog.com/privacy). Purpose: to record which pages You visit, which buttons You click and which features You complete, and where You arrived from (for example campaign parameters in a link), so that We can see where the Service confuses people and improve it. PostHog also records session replays, a recording of how a page is used (mouse movement, scrolling and clicks), for signed-in users and for a small random sample (about one in ten) of browsers that are not signed in. Text You type into form fields is masked in replays. When You are signed in, Your events and replays are linked to Your email address and name; when You are not, they are linked only to a random identifier stored in Your browser.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser. You can instruct Your browser to refuse Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to sign in or use some parts of our Service.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to process Your Content with the AI features You ask for, to keep Your saved results, projects and templates, and to monitor the usage of our Service.
  • To manage Your Account: to manage Your registration as a user of the Service and to apply the plan and allowances that belong to Your Account.
  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the subscription or services You have purchased or of any other contract with Us through the Service, including billing You through Stripe.
  • To contact You: to send You a welcome email when You create an Account, to answer Your requests, to tell You about changes to the Service or to Your subscription (for example a failed payment), and occasionally to ask about Your experience with the Service. We contact You by email only.
  • To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information. You can opt out at any time by replying to any such email or by contacting Us.
  • To manage Your requests: To attend and manage Your requests to Us.
  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.
  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

  • With Service Providers: We share Your personal information with Service Providers only as needed to run the Service. They are: Google LLC (Google Cloud hosting, database and file storage; Google Sign-In; the YouTube Data API; Google Analytics), OpenAI, L.L.C. (AI processing of Your Content), Stripe, Inc. (payments), Resend, Inc. (sending email) and PostHog, Inc. (product analytics and session replay).
  • For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With Affiliates: We may share Your information with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy. Affiliates include Our parent company and any other subsidiaries, joint venture partners or other companies that We control or that are under common control with Us.
  • With other users and the public: when You share a result, the shared copy is viewable by anyone who has the link, as described under "Stored Results, Projects and Sharing". We do not otherwise show Your Content or Account information to other users.
  • With Your consent: We may disclose Your personal information for any other purpose with Your consent.

We do not sell Your Personal Data.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies. In particular:

  • Account information, survey answers and channel handles are kept until You ask Us to delete Your Account.
  • Working copies of thumbnails and improved or generated images are deleted automatically about 60 days after they were last used.
  • Saved results, projects, project assets, templates and watched channels are kept until You delete them or ask Us to delete Your Account.
  • Shared copies and their short links are kept indefinitely so that shared links keep working, unless You ask Us to remove one.
  • Usage-limit records keyed by the hash of Your IP address or Account expire within 7 days (per-day records) or about 45 days after the end of the month (monthly counters). Daily totals that contain no per-person data are kept for internal analysis.
  • Billing records held by Us and by Stripe are kept for as long as tax and accounting law requires.
  • Analytics data is retained by Google Analytics and PostHog according to their retention settings.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

The Company is located in the United States, and the Service is hosted on Google Cloud in the United States. Our Service Providers process Your information in the United States. Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

From within the Service, You can delete individual saved results, projects, project assets, templates and watched channels, and You can change or remove Your default channel handle in Settings. Cancelling Your subscription is also done from Settings.

To delete Your Account and the rest of the information We hold about You, or to take down a shared copy of a result, contact Us at the address below from the email address on Your Account. We will respond within the time required by applicable law.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so, for example billing records, and that copies of shared results already saved by others are outside Our control.

Your Privacy Rights

Depending on where You live, You may have the right to ask what Personal Data We hold about You, to have it corrected or deleted, to receive a copy of it, and to object to or restrict certain processing. You can exercise these rights by contacting Us at the address below. We will not treat You differently for exercising them.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Children's Privacy

Our Service does not address anyone under the age of 13, and Our Terms and Conditions require users to be at least 18 years old. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third parties’ site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By email: thumbnailpeak@gmail.com