Privacy Policy

We collect the following categories of information:

• Account information — your name, email address, and authentication identifiers, provided when you sign up and managed through our authentication provider.
• Profile and content data — your niche, target audience, content pillars, tone and writing preferences, and the ideas, captions, breakdowns, and carousels you generate or upload.
• Payment information — subscription status, plan, billing history, and payment metadata. Full card details are collected and processed by our payment processor and are never stored on our servers.
• Usage and device data — log data, IP address, browser and device type, pages viewed, and feature interactions, collected automatically for security, analytics, and improvement.

We use the information we collect to:

• Provide, operate, personalize, and maintain the Service.
• Generate AI content tailored to your brand profile and inputs.
• Process payments, manage subscriptions and credits, and send service-related emails.
• Detect, investigate, and prevent fraud, abuse, and security incidents.
• Analyze usage to improve features, reliability, and performance.
• Comply with legal obligations and enforce our Terms & Conditions.

We do not sell your personal information, and we do not use the private content you generate to train our own models.

We rely on the following trusted providers to deliver the Service. Each processes data only as needed for its function and is bound by its own privacy and security commitments:

• Clerk — authentication, sign-up/sign-in, and account-session management.
• Razorpay — payment processing for subscriptions and one-time purchases.
• Anthropic and OpenAI — AI models that generate text (ideas, captions, breakdowns) and images (carousels) from your inputs.
• Cloudflare R2 — secure cloud storage for generated images and assets.
• Resend — delivery of transactional and support emails.

When you generate content, the relevant inputs are sent to the applicable AI provider to produce your output. We encourage you to review those providers' privacy policies for details on their handling of data.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure your session, and understand how the Service is used. Essential cookies are required for core functionality. You can control non-essential cookies through your browser settings, though disabling some cookies may affect how the Service works.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain certain information for legal, tax, accounting, or security purposes. Backup copies may persist for a limited time before being overwritten.

You have meaningful control over your data. Depending on your location, you may have the right to:

• Delete your account and associated personal data, at any time from your settings or by contacting us.
• Export your data — request a copy of the personal information and generated content associated with your account.
• Access, correct, or update inaccurate information.
• Object to or restrict certain processing, and withdraw consent where applicable.

To exercise any of these rights, email us at support@carouselabs.com from your account address and we will respond within a reasonable timeframe.

CarouseLabs is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. Users must also meet the minimum age required to enter into our Terms & Conditions. If you believe a child under 13 has provided us personal information, contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you install our Chrome browser extension, additional data practices apply:

• Extension API Key — the extension stores a unique authentication key (generated from your CarouseLabs account settings) locally in your browser, used solely to identify your account when saving content.
• Captured content — when you right-click and choose to save an image, link, or selected text from a webpage, that specific content and its source URL are sent to CarouseLabs and stored in your Ideas Board, associated with your account.
• No automatic browsing tracking — the extension does not monitor your general browsing activity, history, or any page content beyond what you explicitly choose to save via the right-click menu.
• No third-party sharing — captured content is used solely to populate your personal Ideas Board within CarouseLabs and is never sold or shared with third parties.
• Your control — you can delete any saved item from your Ideas Board at any time, and revoke or regenerate your Extension API Key from your account settings, which immediately disconnects the extension from your account.

If you install our LinkedIn commenting extension, the following additional practices apply:

• Extension token — signing in from the extension stores a unique authentication token locally in your browser, used solely to identify your account when generating comments. Each browser you install on holds its own token.
• Post content you select— when you click the Comment button on a LinkedIn post, that post’s visible text, author name and headline, and its link are sent to CarouseLabs so a comment can be written about it. This happens only for posts you explicitly select.
• Generated comments — the comment produced for you, and whether you copied or inserted it, are stored against your account so they appear in your History.
• 90-day retention — comment history is deleted automatically 90 days after it is created, by a scheduled job. Nothing is kept beyond that window.
• No automatic browsing tracking — the extension reads a post only when you click its Comment button. It does not monitor your general browsing, your feed, your messages, or any page content you have not selected.
• It never posts for you— the extension never submits anything to LinkedIn. Copy places the comment on your clipboard. Insert, which is optional and off by default behind a warning, only places text into LinkedIn’s comment box; you still review it and press Post yourself.
• No third-party sharing — post content and generated comments are used solely to provide the feature to you and are never sold or shared with third parties. Generating a comment involves sending the post text to our AI model providers purely to produce that comment.
• Your control— you can sign out from the extension’s Account screen, which immediately revokes that browser’s token and disconnects it from your account. Signing out on one browser does not affect your other devices.

For privacy questions, requests, or concerns, email support@carouselabs.com.