Privacy Policy

1. Introduction

Timbre ("we", "our", "us") is operated by Lorem LLC. This Privacy Policy explains how we collect, use, store, and share information when you use our web application at gettimbre.ai and related services (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Data We Collect

Account Information

When you sign up, we collect your name, email address, and avatar URL through your OAuth provider (Google or GitHub). We do not store passwords; authentication is delegated to third-party providers via Supabase Auth.

Writing Samples

To build your voice profile, you upload or paste existing writing samples. These samples are stored securely and used solely to analyze your writing style. They are never shared with other users or used for any purpose beyond improving your experience.

Generated Content and Edits

We store the content generated by the AI on your behalf, along with any edits you make. Edit diffs are analyzed to improve the accuracy of future generations for your account only.

Usage and Analytics

We use PostHog for product analytics. PostHog collects information such as pages visited, features used, and device type. Analytics events are associated with your user account. You can opt out of tracking via PostHog's opt-out mechanism.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number or bank details on our servers. Stripe may collect information as described in their privacy policy.

3. How AI Processes Your Data

Your writing samples and voice profile data are sent to third-party AI providers (OpenAI and Anthropic) to perform voice analysis and content generation. These providers process the data according to their own privacy policies and data processing agreements.

We use API access with data processing agreements that prohibit the providers from using your data to train their models. Your content is not used for model training by Timbre or our AI providers.

4. Data Retention

We retain your account data, writing samples, voice profiles, and generated content for as long as your account is active. Edit events are stored indefinitely to support the data flywheel that improves your voice profile over time.

If you delete your account, all personal data including profiles, voice profiles, writing samples, generations, and platform posts will be permanently removed within 30 days. Anonymized, aggregated analytics data may be retained.

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of service providers, each bound by data processing agreements:

• Supabase (database hosting and authentication)
• OpenAI and Anthropic (AI content generation)
• Stripe (payment processing)
• Vercel (application hosting)
• PostHog (product analytics)
• Upstash (rate limiting infrastructure)

6. Your Rights (GDPR and Similar Laws)

If you are a resident of the European Economic Area, United Kingdom, or a jurisdiction with similar data protection laws, you have the following rights:

• Access: Request a copy of all personal data we hold about you. You can export your data from the Settings page.
• Rectification: Request correction of inaccurate data via your account settings.
• Erasure: Request deletion of your account and all associated data from the Settings page.
• Portability: Export your data in a machine-readable JSON format.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Objection: Object to processing of your data for analytics purposes. Use the opt-out mechanism in PostHog.

To exercise any of these rights, contact us at the address below or use the self-service tools in your account settings.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, and our business purposes for collecting it.
• Right to Delete: You may request deletion of personal information we hold about you. You can delete your account and all associated data from the Settings page.
• Right to Correct: You may request correction of inaccurate personal information via your account settings.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA. Because we do not sell or share personal information, there is no need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, contact us at privacy@gettimbre.ai or use the self-service tools in your account settings. We will verify your identity before processing any request and respond within 45 days as required by law.

8. Cookies

We use essential cookies for authentication session management. PostHog may set analytics cookies to track usage patterns. You can control cookie preferences through your browser settings.

9. Security

We implement industry-standard security measures including encrypted data at rest and in transit, row-level security policies in our database, rate limiting on all API endpoints, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or sending an email. Continued use after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:

Lorem LLC
PO Box 38, Queen Creek, AZ 85142 USA
Email: privacy@gettimbre.ai