Privacy Policy

1. Information we collect

We collect only the information needed to provide, secure, and improve ToolsPad.

• Account and workspace information: email address, display name, authentication details, workspace membership, role, and preferences.
• Content you provide: notes, tasks, forms, submissions, testimonials, business and customer details, estimates, invoices, pages, QR destinations, files, and related settings.
• Public interactions: information submitted through a published form, testimonial request, document link, page, or QR redirect.
• Technical and security information: IP address, browser and device details, request metadata, timestamps, error diagnostics, and security events.
• Communications: support messages and transactional-email delivery information.

2. How we use information

We use information to operate the service, authenticate users, enforce workspace permissions, deliver requested content and notifications, prevent abuse, diagnose failures, provide support, and improve reliability. We do not sell personal information or use workspace content for third-party advertising.

Account and payment administration

When your ToolsPad account is created, we record its creation time and the approximate country, region, city and timezone supplied by Cloudflare for that request, where available. These network-based estimates are not proof of residence. Authorised ToolsPad administrators can review account and workspace details, successful payments, and available acquisition information to operate the business and understand signup sources. This can include accepted workspace invitations, member referrals, and attribution from published ToolsPad properties. Optional browser-based campaign attribution continues to follow the choices described below. Private operational notification emails to authorised administrative recipients can contain the account name, email, workspace, approximate signup location, available source information, and payment amount and currency. These owner notifications do not send your account email or workspace content to Google.

3. Service providers

ToolsPad uses carefully scoped providers to operate the service:

• Cloudflare for global hosting, databases, object storage, queues, security, and delivery.
• Supabase for managed authentication.
• Google for optional Google sign-in, Google Analytics measurement across ToolsPad’s own website and member app, and Google Ads conversion measurement using the consent controls explained below.
• Stripe for paid-plan checkout, invoices, tax details and payment-method management. ToolsPad does not store card numbers.
• Emailit for transactional email.
• Sentry for privacy-limited error monitoring and diagnostics.

These providers process information under their applicable service terms and privacy commitments. Learn how Google uses information from sites and apps that use its services.

4. Cookies, analytics and advertising measurement

Essential storage

Secure session and anti-forgery storage keeps you signed in, protects account actions and preserves your selected workspace. Following a member referral link also preserves its referral code in session-only browser storage, for no longer than 24 hours or the browser session, so the referring member can receive credit when you sign up. This does not enable optional analytics storage. A preference cookie records your analytics and advertising choices, their time and notice version across toolspad.com and app.toolspad.com for up to 180 days. These essential functions do not depend on accepting optional measurement.

Google Analytics and Google Ads

We use GA4 to understand site and app usage and Google Ads to measure completed account signups and successful paid subscriptions or upgrades, including whether advertising leads to those outcomes. We use Advanced Consent Mode: Google tags load with optional storage permissions denied by default. Before you choose, and if you reject optional cookies, Google may receive limited cookieless measurement and consent-status signals. These can include event information, timestamps, browser information and network information such as an IP address available when a request is received. Google uses these signals for measurement and modelling; cookieless does not mean that no information is transmitted.

Optional analytics and advertising cookies are enabled only according to your separate choices. With permission, Google’s first-party analytics cookies (such as _ga) help measure visits, and advertising cookies (such as _gcl) help connect an ad interaction to a conversion across our website and member app. Advertising click identifiers may include gclid, gbraid and wbraid. With analytics permission, ToolsPad also keeps first and most recent campaign details in browser storage for up to 90 days and can associate those campaign details with your new account to understand acquisition. We do not enable personalized advertising, Google Signals or enhanced conversions that send customer email addresses or email hashes.

What conversion events contain

A completed signup sends an opaque conversion reference. A paid conversion sends an opaque invoice reference, the amount actually paid including charged tax, and its currency (currently INR or USD). These references help avoid counting the same event more than once. Our conversion parameters do not include your name, account email, payment-card details, authentication tokens or workspace content. When advertising storage is allowed, we also store receipt references in your browser to suppress repeat events.

Member analytics remove URL query strings and mask long record identifiers before page locations are sent. ToolsPad does not use workspace content for advertising, and customer-published pages are not automatically added to ToolsPad’s Google Analytics property. See Google’s explanation of its data use for its processing and safeguards.

Changing your mind

Rejecting optional cookies does not prevent account creation, billing or use of the product. Withdrawing permission stops the corresponding optional storage and clears ToolsPad-controlled Google measurement cookies and advertising receipt storage where accessible; limited cookieless signals may continue as described above. Withdrawal does not undo processing that already occurred. Browser privacy controls can further restrict requests and storage. If you are not comfortable with the processing described in this policy, you may choose not to use ToolsPad and contact us about your information.

5. Sharing and public content

We share information with service providers as described above, when you direct us to publish or send it, when workspace permissions allow teammates to access it, or when required to protect users, enforce the law, or respond to a valid legal process. Content you publish through forms, pages, testimonial walls, documents, or QR destinations may be visible to anyone with the relevant public link.

6. Retention, deletion, and security

We retain information while your account or workspace is active and as reasonably needed for service operation, security, dispute resolution, and legal obligations. Product controls let authorized users delete or export supported records. Backups and security logs may remain for a limited period before scheduled deletion.

We use encrypted transport, restricted access, tenant isolation, server-side permission checks, signed links where appropriate, and monitoring. No online service can guarantee absolute security, so please use a unique password and promptly report suspected misuse.

7. Your choices and rights

You may review and update profile information, export supported workspace content, revoke sessions, or request access, correction, or deletion by contacting us. Depending on where you live, additional privacy rights may apply. We will verify requests before acting to protect the account and other users.

8. International processing and children

ToolsPad is delivered through global infrastructure, so information may be processed outside your country with appropriate provider safeguards. The service is intended for businesses and is not directed to children under 13. Please do not submit a child’s personal information without a lawful basis and appropriate consent.

9. Changes and contact

We may update this policy as ToolsPad evolves. Material changes will be communicated through the service or an appropriate account channel. Questions or privacy requests can be sent to contactus@toolspad.com.