Privacy Policy

1. Information we collect

We collect only the information needed to provide, secure, and improve ToolsPad.

• Account and workspace information: email address, display name, authentication details, workspace membership, role, and preferences.
• Content you provide: notes, tasks, forms, submissions, testimonials, business and customer details, estimates, invoices, pages, QR destinations, files, and related settings.
• Public interactions: information submitted through a published form, testimonial request, document link, page, or QR redirect.
• Technical and security information: IP address, browser and device details, request metadata, timestamps, error diagnostics, and security events.
• Communications: support messages and transactional-email delivery information.

2. How we use information

We use information to operate the service, authenticate users, enforce workspace permissions, deliver requested content and notifications, prevent abuse, diagnose failures, provide support, and improve reliability. We do not sell personal information or use workspace content for third-party advertising.

3. Service providers

ToolsPad uses carefully scoped providers to operate the service:

• Cloudflare for global hosting, databases, object storage, queues, security, and delivery.
• Supabase for managed authentication.
• Google when you choose Google sign-in.
• Emailit for transactional email.
• Sentry for privacy-limited error monitoring and diagnostics.

These providers process information only to deliver their contracted services and under their own applicable terms and privacy commitments.

4. Cookies and session storage

We use essential, secure session and anti-forgery storage to keep you signed in, protect account actions, and preserve the workspace you selected. ToolsPad does not require advertising cookies. Public pages may use limited operational storage for abuse prevention and reliable delivery.

5. Sharing and public content

We share information with service providers as described above, when you direct us to publish or send it, when workspace permissions allow teammates to access it, or when required to protect users, enforce the law, or respond to a valid legal process. Content you publish through forms, pages, testimonial walls, documents, or QR destinations may be visible to anyone with the relevant public link.

6. Retention, deletion, and security

We retain information while your account or workspace is active and as reasonably needed for service operation, security, dispute resolution, and legal obligations. Product controls let authorized users delete or export supported records. Backups and security logs may remain for a limited period before scheduled deletion.

We use encrypted transport, restricted access, tenant isolation, server-side permission checks, signed links where appropriate, and monitoring. No online service can guarantee absolute security, so please use a unique password and promptly report suspected misuse.

7. Your choices and rights

You may review and update profile information, export supported workspace content, revoke sessions, or request access, correction, or deletion by contacting us. Depending on where you live, additional privacy rights may apply. We will verify requests before acting to protect the account and other users.

8. International processing and children

ToolsPad is delivered through global infrastructure, so information may be processed outside your country with appropriate provider safeguards. The service is intended for businesses and is not directed to children under 13. Please do not submit a child’s personal information without a lawful basis and appropriate consent.

9. Changes and contact

We may update this policy as ToolsPad evolves. Material changes will be communicated through the service or an appropriate account channel. Questions or privacy requests can be sent to contactus@toolspad.com.