Privacy Policy – Ultimate Carousel

Last updated: April 21, 2025

1. Introduction

Welcome to Ultimate Carousel. Your privacy is important to us, and we are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your data when you use our web application, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using Ultimate Carousel, you agree to the practices described in this Privacy Policy.

2. Data We Collect

We collect the following categories of data:

Personal Information

  • Email address (required for account creation and authentication)
  • Name (optional, for personalization)

Usage Data

  • User prompts and input (e.g., text entered to generate carousels)
  • Customization parameters (e.g., font, colors, layout preferences)
  • Generation logs (e.g., timestamps, template used, success/failure status)

Billing Information

Handled securely via Stripe for paid users. We do not store your payment card details.

Analytics & Monitoring

  • Plausible Analytics: Privacy-friendly usage metrics (no cookies, no personal data).
  • Sentry (self-hosted): Application error tracking (may include anonymized technical logs).

3. How We Use Your Data

We use your data for the following purposes:

  • To provide and improve the service: Generate carousels, save preferences, enhance features.
  • To authenticate and manage user accounts
  • To communicate with you: Account updates, support, important service notifications.
  • To process payments and manage subscriptions
  • To monitor and improve app performance (e.g., debug issues via Sentry)
  • To generate aggregated insights (non-personal, for product analytics)

We do not use your data for advertising or sell it to third parties.

4. Data Storage and Security

  • Hosting: The frontend is hosted on Vercel, the backend and database on Supabase.
  • Data retention: We store your data only as long as necessary to provide our services or comply with legal obligations.
  • Security: We implement technical and organizational measures to protect your data, including encryption, access controls, and regular audits.

5. Sharing with Third Parties

We only share data with trusted service providers when necessary to deliver our services:

ProviderPurposeData Shared
VercelHosting frontendTechnical access logs
SupabaseBackend & databaseUser data storage
OpenAIAI generationPrompt content for processing
StripePayment processingBilling and subscription data
PlausibleAnalyticsAnonymized usage data (no cookies)
SentryError monitoringAnonymized logs for debugging

All third-party services are GDPR-compliant and under appropriate data processing agreements.

6. Cookies & Analytics Tools

We aim to provide a cookie-light experience:

  • No marketing or tracking cookies.
  • Plausible Analytics does not use cookies and does not collect personal data.
  • We may use technical cookies for session management and user authentication only.

7. Your Rights

As a user under the GDPR, you have the following rights:

  • Access – Request a copy of your personal data
  • Rectification – Correct inaccurate or incomplete data
  • Erasure – Request deletion of your account and associated data
  • Restriction – Limit the use of your data in specific cases
  • Portability – Request your data in a structured, machine-readable format
  • Objection – Object to certain types of processing

To exercise these rights, please contact us via the details below. We will respond within 30 days.

8. Contact

If you have any questions or requests related to this Privacy Policy or your personal data, you can contact us at:

Ultimate Carousel
Email: privacy@ultimate-carousel.com