Privacy Policy

• Account information. When you sign up, including with Google, we receive your name, email address and profile picture through our sign-in provider, Clerk. We do not receive your Google password and we do not request access to your Gmail, Drive, contacts or any other Google data.
• Your OpenAI API key. If you add one, it is encrypted (AES-256-GCM) before it is stored and is only decrypted on our servers at the moment an image is generated for you. We never show it back to you in full, never log it, and never send it to AI assistants.
• Content you create. Prompts, slide text, captions, brand kit settings (handle, colors, look, mascot), uploaded images and logos, and the images, slides, PDFs and guides generated for you.
• Usage information. Which tools you use, estimated image costs, your monthly budget and basic technical logs (time, tool name, success or failure) used to run, secure and debug the service.
• Cookies. We use only the cookies needed to keep you signed in and remember your light or dark theme. We do not use advertising or cross-site tracking cookies.

• To sign you in and keep your account secure.
• To generate images, carousels, other formats and guides when you ask for them, using your own OpenAI key.
• To store your work so you can view, download and share it from your dashboard.
• To show your spending and enforce the monthly budget you set.
• To prevent abuse, fix problems and improve the service.
• To contact you about your account or important changes. We do not send marketing email without your consent.

We do not use your content or prompts to train AI models, and we do not sell or rent your personal information.

If you sign in with Google, we only receive your basic profile (name, email address and profile picture) to create and identify your account. We do not request any other Google scopes.

Gumana’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not let humans read it except with your consent, for security, or where the law requires it.

We share data only with the service providers we need to run Gumana, each limited to what they need:

• Clerk: sign-in and account management.
• OpenAI: your prompts and reference images are sent to OpenAI, using your own API key, to generate images. OpenAI’s own policies apply to that processing.
• Cloudflare R2: storage for your images, slides and PDFs.
• Neon: our database for account settings, your encrypted key, gallery records and usage.
• Vercel and Manufact: hosting for the dashboard and the connector that Claude talks to.
• Your AI assistant (for example Claude): when you use Gumana inside it, results you ask for are returned to that assistant under its provider’s terms.

We may also disclose information if required by law, or to protect the rights, safety and security of our users and the service.

Your files are private by default and are shown to you through links that expire. If you create a permanent share link (for example to send a guide in DMs or place an image in a document), anyone who has that link can view that file. Links are long and random, so they cannot be guessed. Contact us to disable a link.

Data is sent over encrypted connections (HTTPS). API keys are encrypted at rest, files are kept in private storage, and each account can only access its own data. No system is perfectly secure, but we work to protect your information and will notify you of a breach that affects you as required by law.

Our providers may store and process data in several countries, including the United States and Singapore.

We keep your account data and content while your account is active. You can delete your OpenAI key at any time in Settings, which takes effect immediately. If you ask us to delete your account, we delete your account data, stored files and share links within 30 days, except where we must keep limited records by law.

• Access, correct or download your data.
• Delete your content or your whole account.
• Disconnect Gumana from your AI assistant at any time, and revoke Google access from your Google Account settings.
• Object to or restrict certain processing, where your local law gives you that right.

To make a request, email support@gumana.in. We reply within 30 days.

Gumana is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

If we make material changes to this policy, we will update the date above and notify signed-in users. Questions: support@gumana.in.