Updated October 27, 2026
Process is a ThoughtBubble app for exploring and creating generative art. You can browse public artwork without an account. Contact [email protected] with privacy questions or requests to access or delete your account data.
When you sign in with Google, Process receives your Google account identifier, verified email address, and available profile information such as your name and picture. We use this information to authenticate you and create your Process account. Google sign-in does not request access to Gmail, Drive, contacts, or YouTube content. Google access tokens used for sign-in are not retained. Password sign-in stores a password hash, not your password.
We store your profile, artwork, drafts, creation prompts and conversations, job history, likes, and reports to provide the app. Published artwork, your creator handle, display name, and public profile information are visible to other visitors. Your account email and private drafts are not included in public profiles.
An administrator can connect an X or Instagram account to prepare and publish Process artwork videos. We request account identity and publishing permissions, store the verified account identifier and username, and encrypt access and refresh tokens on the server. We use these credentials to renew the connection, upload artwork videos, publish captions and links, and retain provider receipts to prevent duplicate posts. Tokens are not included in public pages or returned to the browser. Placeholder mode prepares videos and captions without sending them to social services.
The administrator can pause publishing or disconnect an account in the admin panel. Disconnecting deletes the saved connection credentials and pending authorization states from Process. You can also revoke Process in the social provider's own connected-app settings. Posts already published on X or Instagram remain there until removed through that service.
Process uses YouTube API Services when an administrator separately connects a YouTube channel. The connection requests permission to view the YouTube account and upload videos; Process uses the read permission to verify the channel and upload receipts. Process encrypts the access and refresh tokens and upload-session information on its server, and stores the video metadata and provider receipts needed to review uploads and prevent duplicate posts. Process sends an approved video and its selected title, description, audience and privacy settings to YouTube. Process does not sell YouTube API data or share it with advertisers. Google handles the YouTube connection under the Google Privacy Policy.
The administrator can disconnect YouTube in the Process social publishing page. Process asks Google to revoke the authorization and removes stored tokens, video metadata, upload sessions and YouTube provider receipts as soon as possible, including when confirmation is delayed; a published status remains to prevent automatically replaying the same draft. Process periodically checks the authorization and removes associated YouTube data when access has been revoked or can no longer be verified. Stored YouTube provider receipts and upload sessions are removed within 30 days. You can also revoke Process access in Google security settings. To request deletion or ask about the connection, contact [email protected]. Revoking access does not remove videos already uploaded to YouTube; manage those videos through YouTube.
Google handles Google sign-in. Cloudflare and our hosting infrastructure deliver the application. When you use AI creation, your prompts, artwork code, and related generation context may be sent to the configured AI model provider and the rendering service to generate and check your artwork. Avoid including confidential information in creation prompts. These services also handle information according to their own privacy policies.
Process uses essential cookies to maintain your session and protect Google sign-in and social account connection flows. Operational records, security rate limits, and server backups support reliability and abuse prevention. Account and artwork data remain stored while needed to provide the service; contact us to request deletion. Deleted data may remain in backups until those backups expire.
You can browse without signing in, edit your profile, sign out, and request account or data deletion by emailing [email protected]. Include the Process account email or connected social username so we can locate the records and verify the request. Do not send passwords or access tokens. Publishing makes an artwork available through its public link, which others may copy or share. We do not sell Google account data or use Google sign-in information for advertising.