Privacy Policy

Last updated: September 12, 2026

Welcome to Carouse, a service that turns articles, videos, and podcasts into swipeable carousels you can scan in seconds. This Privacy Policy explains how we collect, use, and share personal data when you use:

• our websites, including carouse.app and my.carouse.appand related pages (the “Website”); and
• our software, APIs, integrations, and related services (collectively, the “Services”).

We follow India's Digital Personal Data Protection Act, 2023 (“DPDPA”) and, until fully in force, the Information Technology Act, 2000 and the SPDI Rules, 2011. Regional add-ons for other countries appear later in this policy.

Who is responsible for your data?

Modularity Labs, Hyderabad, Telangana, India (“Modularity Labs,” “Carouse,” “we,” “us,” “our”) is the data fiduciary. For privacy-related questions, requests, or grievances, please contact:

• Privacy: privacy@carouse.app(use “Grievance Officer” or “Data Protection” in the subject)
• Support: support@carouse.app

What counts as personal data?

“Personal data” means any information that identifies you or can reasonably be linked to you.

What does “processing” mean?

“Processing” covers any use of personal data: collecting, storing, using, sharing, or deleting it.

Legal bases we rely on

• Consent: where you choose to allow specific processing (e.g., marketing cookies).
• Contract: to provide the Services you requested.
• Legal obligation: where laws require us to keep or disclose data.
• Legitimate interests: to run, secure, and improve our services (balanced against your rights).
• Your authorization and instructions: when you submit links and instruct us to generate, save, or share carousels on your behalf.

Data we collect

1) Data you provide

• Account & profile: name, email, and, for paid plans, billing and subscription information. We use Firebase Authentication, so sign-in is by email magic link or Google. We do not store passwords.
• Content: the source links you submit (articles, videos, podcasts), the carousels generated from them, your saved and added carousels, your topic interests and onboarding preferences, and your per-carousel visibility choices.
• Support: information you provide in emails, forms, or tickets.

2) Data we collect automatically

• Device & usage: IP address, browser type, device information, operating system, log information, usage information, session information, error reports, diagnostics, and basic analytics events.

3) Data from platforms & providers

• Authentication (Google): when you sign in with Google, we receive your name, email address, and profile photo as permitted by your Google account. We do not access your Google contacts, mail, or drive.
• Source links: the public URLs you submit are public content on the open web. We fetch and process the content at those URLs to build carousels.
• Email & messaging: we use providers to send system messages and newsletters (only with your consent where required).

4) Information we do not collect

Carouse does not collect:

• private messages or conversations;
• contacts or connection lists;
• content behind your logins on other services; or
• browsing activity unrelated to the Services.

Carouse processes only the public links you submit and the carousels, saves, and preferences you create through the Services.

5) Aggregated data

We create aggregated or de-identified statistics to understand usage and improve services. We do not attempt to re-identify aggregated data.

Public carousels and sharing

When you add a carousel, it defaults to public because the underlying source is already public on the open web. A public add can appear on Carouse's discovery surfaces (Explore and cross-user Feed) and carries your name as the byline. The first person to add a source publicly is credited as the byline for that carousel.

You can share any carousel you add as a public link in the form carouse.app/c/..., which renders the full carousel with no sign-in required and credits the original source.

On paid plans, you can mark an add as private. A private add stays in your own library, never enters Explore, and carries no byline. Private governs whether your add appears on our discovery surfaces; it is not a guarantee of confidentiality of the source content, which remains public on the web and may still surface through another user's public add of the same link.

Artificial intelligence processing

Carouse uses artificial intelligence technologies to read source content and write carousel slides. The content at the links you submit may be processed by third-party AI providers (such as OpenAI and Anthropic, including via OpenRouter) solely to generate the requested carousel.

We do not permit third-party AI providers to use your submitted content or account data to train public foundation models on our behalf.

AI-generated carousels are a reading and comprehension aid. They summarize third-party sources and may contain errors; always consult the original source, which we credit and link, before relying on any claim.

Web & marketing technologies on our Website

• Cookies/SDKs: we use cookies and similar tech for essential operations, analytics, and (with consent where required) advertising.
• Analytics: we use PostHog to understand product and site usage (e.g., funnel and page metrics). We use analytics for measurement only.

Your choices: where a cookie banner applies, you can Accept or Reject non-essential cookies and change your preferences anytime via your browser controls.

How we use personal data

• Create and manage accounts; authenticate users.
• Generate, save, and share carousels you request.
• Populate your Feed and Explore based on your interests.
• Process payments and provide customer support.
• Secure the Services; detect fraud and abuse.
• Improve features, performance, and reliability.
• Send service messages (e.g., account, security, transactional).
• Comply with legal obligations.
• With your consent where required: send newsletters or marketing; measure and improve ads.

How we share personal data

We share data with service providers (processors) who help us run the Services, including cloud hosting (Vercel, Railway), Firebase (authentication and data storage), analytics (PostHog), AI providers (such as OpenAI, Anthropic, and OpenRouter), payment processors, and email providers. They may process information only for purposes necessary to provide the Services. We may also share data:

• with your direction (e.g., carousels you choose to make public),
• to comply with law, prevent fraud/security incidents, or protect rights,
• in a merger, acquisition, or asset transfer (with notice where appropriate).

We do not sell, rent, or trade personal data.

Service data in Carouse (your content)

When you add content to Carouse, we process it on your behalf and give you tools to access your data, share carousels via public links, and request deletion.

You are responsible for the links you submit and are responsible for respecting the rights of the sources you carousel.

Storage & retention

We keep personal data only as long as needed for the purpose collected, to provide the service, or to meet legal/record-keeping duties. When no longer needed, we delete or de-identify it.

If your subscription expires or is cancelled, Carouse may retain account data for up to sixty (60) days to facilitate account reactivation and data export. After this period, information may be permanently deleted or anonymized.

Deleting your data

You may request deletion of your account and associated personal information by contacting privacy@carouse.app. Upon receiving a valid request, we will delete or anonymize your personal information within a reasonable period and generally within thirty (30) days, unless a longer retention period is required by law, security obligations, fraud prevention, accounting purposes, or legitimate business interests.

Security

We use TLS encryption in transit and encryption of sensitive credentials at rest, and apply technical and organizational measures (access controls, least-privilege, logging, backups, authentication mechanisms) to protect data. No method is 100% secure; we work to continually improve.

Data breaches

If a breach occurs that is likely to result in harm, we will notify affected users and, where required, the relevant authority promptly, with details of our response.

International transfers

Your information may be processed and stored in countries other than your country of residence where our service providers operate. Where required, we take reasonable steps to ensure appropriate safeguards are in place.

Your rights

Subject to law, you may have rights to access, correct, delete, object/opt-out, withdraw consent, and complain. We will respond within a reasonable time; if we need more than 30 days, we'll let you know why.

How to exercise your rights: email privacy@carouse.app.

Region-specific information

United States

We aim to apply a consistent baseline aligned with state privacy laws (e.g., CA, CO, CT, DE, FL, IN, IA, MT, OR, TN, TX, UT, VA). US users may have rights to know/access, delete, correct, non-discrimination, and, for sensitive data, to limit use/disclosure.

• Shine the Light (CA): request our practices about sharing with third parties for their direct marketing.
• COPPA: we do not market to children under 13.
• CAN-SPAM/TCPA: opt-out of emails/SMS anytime.

Canada & Mexico

We follow PIPEDA (Canada) and LFPDPPP (Mexico). Users may withdraw consent, request access/correction/deletion/deactivation, or submit a complaint to their privacy authority.

Australia

We align with the Privacy Act and Australian Privacy Principles. You may request access, correction, deletion, portability, objection, and withdrawal of consent, and complain to OAIC.

Children

Our services are not directed to children. You must be at least 18 years old to use Carouse. We do not knowingly collect personal data from children.

Changes to this policy

If we change this policy, we'll update the “Last updated” date and post the new version here. Your continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

Contact & grievance redressal

If you have questions or concerns, contact our Grievance Officer:

• Privacy: privacy@carouse.app(use “Grievance Officer” or “Data Protection” in the subject)
• Support: support@carouse.app