Privacy Policy

1. Who We Are

ToolGrid operates the ToolGrid platform and is the data controller for personal information processed through our website, accounts, billing, and support channels, except where stated otherwise (for example, when you sign in with Google or Facebook, those providers also act as independent controllers for the data they collect).

Privacy questions and requests: contact@toolgrid.io.

2. Information We Collect

Depending on how you use the Services, we may collect:

• Account information: name, email address, password (hashed), profile details, subscription plan, credits balance, favorites, and team membership where applicable.
• Authentication data: if you use Google or Facebook sign-in, we receive basic profile information from that provider (such as name, email, and provider user ID) as permitted by your account settings with them.
• Tool and content data: inputs you submit to tools that require server-side processing (for example uploaded files, URLs, text, or prompts). This does not apply to every tool — see Section 3.
• Payment and billing data: subscription status, transaction references, and billing history. Payment card details are collected and processed by Paddle, our Merchant of Record — we do not store full card numbers on our servers.
• Usage and activity data: tools used, feature interactions, embed session events, credit consumption, error logs, and similar operational data.
• Technical data: IP address, browser type, device type, operating system, referral source, and approximate location derived from IP.
• Communications: information you submit through our contact form, support requests, newsletter signup, or email correspondence.
• Cookie and similar technology data: as described in our Cookie Policy.

3. How Tool Data Is Handled

ToolGrid offers many tools with different data flows. Do not assume that all processing happens only in your browser. Each tool page describes its behavior; the general categories below apply:

When you use embedded or white-label tools on a third-party website, that publisher may also collect data from visitors on their site. See Section 12.

4. How We Use Your Information

We use personal information to:

• Provide, operate, maintain, and improve the Services and individual tools
• Create and manage accounts, authenticate users, and enforce plan limits
• Process subscriptions, payments, refunds, and billing support through Paddle
• Deliver server-side and AI tool results you request
• Send service-related communications (account, billing, security, product updates)
• Respond to contact, support, and newsletter requests
• Monitor performance, debug errors, prevent fraud and abuse, and protect security
• Measure aggregated usage and improve user experience (including analytics)
• Display advertising to eligible free and community users (see Section 8)
• Comply with legal obligations and enforce our Terms

5. Legal Bases for Processing (EEA, UK, and Switzerland)

Where the GDPR or similar laws apply, we rely on the following legal bases depending on the activity:

• Contract: providing the Services, accounts, tool processing you request, and billing for paid plans.
• Legitimate interests: security, fraud prevention, product improvement, aggregated analytics, and limited marketing about ToolGrid, balanced against your rights.
• Consent: non-essential cookies where required, optional marketing communications, and certain optional features — you may withdraw consent at any time.
• Legal obligation: tax, accounting, regulatory requests, and record-keeping.

6. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies for authentication, preferences, analytics, and (for eligible users) advertising. Details, vendor names, and your choices are in our Cookie Policy. When you first visit, our cookie banner lets you accept all cookies, choose essential only, or customize analytics and preference cookies.

7. Accounts and Authentication

You may register with email and password or sign in with Google or Facebook where enabled. OAuth sign-in is subject to those providers' privacy policies. We store account credentials and profile data needed to operate your account, apply subscription entitlements, sync favorites, and provide team features where available.

8. Subscriptions and Payments

Paid plans, credits, and contributions are processed by Paddle, which acts as Merchant of Record for applicable transactions. Paddle collects payment and billing information directly and shares transaction status and customer identifiers with us so we can activate your plan. Manage subscriptions and invoices through Paddle's customer portal where available. See our Refund Policy and Terms of Service.

9. Advertising

We may show Google AdSense advertisements to visitors on free and community plans. Paid subscribers, lifetime users, business plan users, and white-label embed visitors generally do not see ToolGrid platform ads. Ad partners may use cookies and similar technologies to serve and measure ads. You can learn more in our Cookie Policy and through Google's ad settings at adssettings.google.com.

10. Analytics

We use Google Analytics to understand how visitors use ToolGrid (for example pages viewed, tools opened, and general traffic patterns). Google may process IP addresses and device identifiers. You can opt out via our cookie banner, browser settings, or Google's browser add-on where available.

11. AI-Powered Features

Certain tools use AI models, including Google Gemini, to generate or transform content. When you use those features, your inputs and outputs may be processed on our servers and transmitted to the AI provider to fulfill your request. AI outputs may be inaccurate; do not submit confidential, regulated, or highly sensitive personal data unless you have assessed the risk. AI processing may be subject to the provider's terms and privacy policy in addition to this policy.

12. Embed, White-Label, and Third-Party Sites

ToolGrid tools can be embedded on third-party websites under community, business, or white-label plans. When a visitor uses an embedded tool:

• ToolGrid may process technical data, tool inputs (for server-side tools), and embed session data to deliver the tool and enforce licensing.
• The website owner that embeds ToolGrid ("Publisher") is responsible for providing appropriate privacy notices to their visitors and obtaining any consents required on their site.
• White-label publishers configure branding and verified domains in the dashboard. Learn more in our resources.

13. Newsletter and Contact Forms

Our newsletter signup and contact page use embedded Google Forms. Information you submit is processed by Google and received by ToolGrid to respond to you or send updates you request. Do not include unnecessary sensitive data in free-text fields.

14. How We Share Information

We do not sell your personal information. We share information only as needed to operate the Services:

• Service providers and subprocessors that host, process, bill, analyze, advertise, or support the Services (listed below)
• Authentication and AI providers when you choose those features
• Legal and safety when required by law, court order, or to protect rights, safety, and security
• Business transfers in connection with a merger, acquisition, or asset sale, subject to this policy
• With your direction or consent

Subprocessors and key third parties

• Google LLC — Google Analytics, Google AdSense, Google Sign-In, Google Forms (contact and newsletter), and Google Gemini (AI-powered tools). Privacy policy
• Meta Platforms, Inc. — Facebook Login (optional sign-in). Privacy policy
• Paddle.com Market Limited — Subscription checkout, billing, and customer portal (Merchant of Record). Privacy policy
• Trustpilot A/S — Review widget and trust signals on our website. Privacy policy

We may also use infrastructure and hosting providers to operate our website and API. We require service providers to protect personal information consistent with this policy and applicable law.

15. International Data Transfers

ToolGrid is operated from the United States and may process data in the U.S. and other countries where we or our providers operate. If you are in the EEA, UK, or Switzerland, your data may be transferred to countries that may not provide the same level of protection. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and provider contractual commitments. Contact us for more information about transfer mechanisms.

16. Data Retention

We retain personal information only as long as necessary for the purposes described above:

• Account data: for the life of your account and a reasonable period afterward for backup, dispute resolution, and legal compliance.
• Server-processed tool files: typically for the duration needed to complete processing and deliver results; we aim to delete or overwrite transient uploads promptly unless longer retention is required for security, debugging, or legal reasons.
• Billing records: as required by tax and accounting laws, often several years.
• Analytics and logs: for limited periods aligned with operational needs, then aggregated or deleted.
• Marketing and newsletter data: until you unsubscribe or ask us to delete it.

17. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and secure development practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

18. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Restrict or object to certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

Account deletion: you may request deletion of your ToolGrid account and associated personal data by emailing contact@toolgrid.io from the address linked to your account. We will verify your request and respond within the timeframe required by applicable law. Some information may be retained where legally required or for legitimate business purposes (for example completed transaction records).

California residents (CCPA/CPRA)

California residents have additional rights, including the right to know categories of personal information collected, the right to delete (subject to exceptions), and the right to correct inaccurate information. We do not sell personal information as defined by California law. We do not discriminate against you for exercising privacy rights. To submit a request, email contact@toolgrid.io.

19. Children's Privacy

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

20. Third-Party Links and Services

The Services may link to third-party websites, tools, or content. We are not responsible for their privacy practices. Review the privacy policies of any third-party service you use, including OAuth providers, Paddle, Google, Meta, and sites that embed ToolGrid tools.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and revise the "Last updated" date. Material changes may also be communicated by email or in-product notice where appropriate. Continued use after changes become effective constitutes acknowledgment of the updated policy.

22. Contact Us

For privacy questions, rights requests, or concerns, contact us at contact@toolgrid.io or visit our contact page.