Privacy Policy

1. Introduction

FastCarousel ("we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data when you use the FastCarousel service at fastcarousel.com ("the Service").

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

When you create an account, we collect your email address and full name. If you sign up via Google OAuth, we receive your name and email from your Google account.

2.2 Generated Content

We store the carousel content you generate, including your prompts, brand settings, and the resulting HTML output. This data is necessary to provide the Service and allow you to access your past generations.

2.3 Usage Data

We collect data about how you use the Service, including credits consumed, generation history, feature usage, and timestamps. This data helps us operate and improve the Service.

2.4 Payment Information

All payment processing is handled by our third-party payment processor, Paddle. We never directly collect, store, or have access to your credit card numbers, bank account details, or other financial payment instruments. We receive only a customer identifier and subscription status from Paddle to manage your account.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including generating carousels and managing your account
• Process your subscription and manage billing through Paddle
• Monitor and enforce credit usage and rate limits
• Improve the quality and relevance of AI-generated outputs
• Send transactional emails related to your account and billing (e.g., subscription confirmations, payment receipts)
• Detect, prevent, and address abuse, fraud, and technical issues
• Comply with legal obligations

We do not sell your personal data. We do not use your data for targeted advertising.

4. Third-Party Services

We share data with the following third-party service providers, strictly as necessary to operate the Service:

• Supabase — Database hosting and user authentication. Your account data and generated content are stored in Supabase's infrastructure.
• Paddle — Payment processing. When you subscribe to a paid plan, Paddle processes your payment. Their use of your data is governed by their own privacy policy.
• Zhipu AI (GLM) — AI content generation. When you generate a carousel, your prompt and configuration are sent to Zhipu AI's API for processing. The AI provider may process this data in accordance with their own data handling policies.
• Vercel — Application hosting and deployment. Vercel hosts the web application and may process server logs containing IP addresses and request metadata.

5. Data Retention

We retain your account information (email, name, subscription details) for as long as your account is active, or as needed to provide you with the Service. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.

Generation history (prompts, carousel outputs, credit transactions) is retained for up to 12 months from the date of creation. After this period, generation data may be permanently deleted from our systems.

6. Your Rights

You have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete personal data
• Deletion — Request deletion of your personal data and account
• Export — Request a machine-readable export of your data

To exercise any of these rights, email us at support@fastcarousel.com with the subject line "Data Request" and a description of your request. We will respond within 30 days.

7. Cookies

FastCarousel uses only essential session cookies required for authentication and maintaining your login state. We do not use tracking cookies, analytics cookies, or advertising cookies. We do not serve ads and do not participate in any ad networks or retargeting services.

8. Security

We implement industry-standard security measures to protect your personal data, including encryption in transit (TLS/SSL), row-level security policies on our database, and secure authentication mechanisms. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete such data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. Your continued use of the Service after such modifications constitutes your acceptance of the updated Privacy Policy.

11. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at support@fastcarousel.com.