Privacy Policy

Information We Collect

Personal Information

When you create an account with useToolCraft, we collect:

• Email address: Required for account management, authentication, and communication
• Name: From OAuth providers (Google/GitHub) or provided by you for personalization
• Profile information: Optional additional details to improve recommendations
• Authentication data: Secure tokens from third-party OAuth providers

Usage Information

• Search queries: Your AI tool search history to provide personalized recommendations
• Tool interactions: Which tools you view, save, or implement
• Implementation progress: Your progress through tool implementation guides
• Subscription data: Billing information and subscription status

Technical Information

• Device information: Browser type, operating system, device identifiers
• Usage analytics: Privacy-friendly, cookieless page analytics (Plausible) and optional Google Analytics — no personal data in event payloads
• Performance data: Error logs and performance metrics to improve our service
• Cookies: Essential cookies for functionality; Plausible does not use tracking cookies

How We Use Your Information

We use your information to:

• Provide our services: Deliver personalized AI tool recommendations and implementation guidance
• Account management: Maintain your account, preferences, and subscription
• Personalization: Improve recommendations based on your search history and preferences
• Communication: Send service updates, security alerts, and support messages
• Billing: Process payments and manage subscriptions
• Analytics: Understand usage patterns to improve our platform
• Security: Detect and prevent fraud, abuse, and security threats
• Legal compliance: Meet regulatory requirements and legal obligations

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following limited circumstances:

Service Providers

• Payment processors: Stripe for subscription and payment processing
• Email service: Resend for transactional emails and notifications
• Database hosting: Supabase for secure data storage
• Analytics: Anonymized usage data for service improvement

Legal Requirements

• When required by law, regulation, or legal process
• To protect our rights, property, or safety
• To prevent fraud or security threats
• With your explicit consent

Data Security and Protection

We implement industry-standard security measures to protect your personal information:

• Encryption: All data transmitted and stored is encrypted using industry-standard protocols
• Access controls: Strict access controls and authentication for our systems
• Regular audits: Security assessments and vulnerability testing
• Secure infrastructure: Hosted on secure, compliant cloud platforms
• Data minimization: We collect only necessary data and delete it when no longer needed

Data Retention

We retain your personal information only as long as necessary:

• Account data: Retained while your account is active
• Search history: Retained for 2 years or until account deletion
• Billing records: Retained for 7 years for tax and legal compliance
• Analytics data: Anonymized and retained for 2 years
• Support communications: Retained for 3 years

Your Privacy Rights (GDPR)

Under GDPR and other privacy laws, you have the following rights:

Additional Rights

• Right to restrict processing: Limit how we use your data
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing communications
• Right to lodge a complaint: File a complaint with your data protection authority

International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for countries with equivalent data protection laws
• Appropriate safeguards and security measures

Cookies and Tracking

We use cookies and similar technologies:

• Essential cookies: Required for basic functionality (cannot be disabled)
• Analytics cookies: Help us understand how you use our platform (optional)
• Preference cookies: Remember your settings and preferences

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our platform. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Information