Privacy Policy

Last updated: February 15, 2026

1. Introduction

fumbl ("we," "our," or "us") operates the fumbl.io platform, including the web application at app.fumbl.io and the marketing site at fumbl.io. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using fumbl, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Password (stored securely using bcrypt hashing)
  • Google account information (if you sign up via Google OAuth)

Content Data

When you use our content repurposing service, we process:

  • Text content you submit for repurposing
  • URLs you provide for content extraction
  • Generated output content across all selected formats
  • Your format preferences and tone settings

Usage Data

We automatically collect:

  • Generation counts and usage patterns
  • Feature usage statistics
  • Device information (browser type, operating system)
  • IP address and approximate location
  • Pages visited and time spent on the platform

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive financial information on our servers. We receive from Stripe: transaction confirmations, subscription status, and billing history metadata.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our content repurposing service
  • Process your content through our AI pipeline and deliver generated outputs
  • Manage your account and subscription
  • Process payments and prevent fraud
  • Send transactional emails (account confirmation, password resets, billing receipts)
  • Analyze usage patterns to improve our product
  • Respond to support requests

4. Third-Party Services

We use the following third-party services that may process your data:

  • Anthropic (Claude API) — Processes your content to generate repurposed outputs. Content is sent to Anthropic's API and processed according to their privacy policy. Anthropic does not use your content to train their models.
  • Stripe — Handles all payment processing. Your payment data is subject to Stripe's privacy policy.
  • Google — If you use Google OAuth for sign-in, Google shares your basic profile information with us per their privacy policy.

5. Cookies and Tracking

We use the following cookies:

  • Session cookies — Essential for authentication and keeping you logged in
  • CSRF tokens — Security cookies to prevent cross-site request forgery
  • Preference cookies — Store your settings like dark mode preference

We do not use advertising cookies or third-party tracking pixels. We do not sell your data to advertisers.

6. Data Retention

We retain your account data for as long as your account is active. Generated content is stored for the lifetime of your account so you can access your history. If you delete your account, we will remove your personal data and generated content within 30 days, except where we are required by law to retain certain records.

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encrypted storage for sensitive data, and secure authentication via Laravel Sanctum. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

For All Users

  • Access your personal data through your account settings
  • Update or correct your information at any time
  • Delete your account and associated data
  • Export your generated content

GDPR Rights (EU/EEA Residents)

Under the General Data Protection Regulation, you have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Correct inaccurate or incomplete data
  • Erasure — Request deletion of your data ("right to be forgotten")
  • Restriction — Request we limit processing of your data
  • Portability — Receive your data in a structured, machine-readable format
  • Object — Object to processing based on legitimate interests

CCPA Rights (California Residents)

Under the California Consumer Privacy Act, you have the right to:

  • Know what personal information we collect and how it is used
  • Delete your personal information
  • Opt out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights

9. Children's Privacy

fumbl is not intended for use by children under 16 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of fumbl after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: