Last updated: June 9, 2026
Timbre ("we", "our", "us") is operated by Lorem LLC. This Privacy Policy explains how we collect, use, store, and share information when you use our web application at gettimbre.ai and related services (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
When you sign up, we collect your name, email address, and avatar URL through your OAuth provider (Google or GitHub). We do not store passwords; authentication is delegated to third-party providers via Supabase Auth.
To build your voice profile, you upload or paste existing writing samples. These samples are stored securely and used solely to analyze your writing style. They are never shared with other users or used for any purpose beyond improving your experience.
We store the content generated by the AI on your behalf, along with any edits you make. Edit diffs are analyzed to improve the accuracy of future generations for your account only.
We use PostHog for product analytics. We do not collect any analytics or load analytics cookies until you accept them in our cookie banner. If you decline, or before you choose, no analytics events or session recordings are processed. Once you consent, PostHog collects information such as pages visited and features used, associated with your account. You can withdraw consent at any time via the “Cookie Preferences” link in the footer.
Payment processing is handled by Stripe. We do not store your credit card number or bank details on our servers. Stripe may collect information as described in their privacy policy.
Your writing samples and voice profile data are sent to third-party AI providers (OpenAI and Anthropic) to perform voice analysis and content refactoring. Text you paste into our public, no-signup demo is sent to Groq for processing. These providers process the data according to their own privacy policies and data processing agreements.
We use API access with data processing agreements that prohibit the providers from using your data to train their models. Your content is not used for model training by Timbre or our AI providers.
We retain your account data, writing samples, voice profiles, and generated content for as long as your account is active. Edit events are stored indefinitely to support the data flywheel that improves your voice profile over time.
If you delete your account, all personal data including profiles, voice profiles, writing samples, generations, and platform posts will be permanently removed within 30 days. Anonymized, aggregated analytics data may be retained.
We do not sell your personal data. We share data only with the following categories of service providers, each bound by data processing agreements:
Several of these providers (including PostHog, Stripe, OpenAI, Anthropic, Groq, and Vercel) are based in the United States, so your data may be transferred outside the EEA and UK. Where required, these transfers are covered by Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.
We process your data under the following legal bases: performance of our contract with you (to provide the service), your consent (for analytics and non-essential cookies), and our legitimate interests (to secure and improve the product). You may object to processing based on legitimate interests, or withdraw consent, at any time.
If you are a resident of the European Economic Area, United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:
To exercise any of these rights, contact us at the address below or use the self-service tools in your account settings.
If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:
To exercise these rights, contact us at privacy@gettimbre.ai or use the self-service tools in your account settings. We will verify your identity before processing any request and respond within 45 days as required by law.
We use strictly necessary cookies for authentication and session management, which are required for the service to function. Non-essential analytics cookies (PostHog) are only set after you accept them in our cookie banner — they are never loaded for visitors who decline or have not yet chosen. You can change or withdraw your choice at any time via the “Cookie Preferences” link in the footer, or through your browser settings.
We implement industry-standard security measures including encrypted data at rest and in transit, row-level security policies in our database, rate limiting on all API endpoints, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email. Continued use after changes constitutes acceptance.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:
Lorem LLC
PO Box 38, Queen Creek, AZ 85142 USA
Email: privacy@gettimbre.ai