Privacy Policy

ToolsThat.Work ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

We collect several types of information from and about users of our Service:

2.1 Account Information

When you create an account, we collect:

• Name
• Email address
• OAuth authentication data from third-party providers (Google, LinkedIn, X/Twitter)

2.2 Payment Information

When you purchase a paid subscription, payment information is processed by our payment processor, Stripe. We do not store your full credit card details on our servers. Stripe may collect:

• Credit card or payment method details
• Billing address
• Transaction history

2.3 Calculator and Tool Data

To provide you with a better experience and allow you to recover your work, we store:

• Inputs you enter into our calculators and tools
• Results and calculations you generate
• Saved configurations and preferences

2.4 Usage Data

We automatically collect information about how you interact with the Service, including:

• Features and tools you use
• Pages visited and time spent
• Session information
• Interactions and events tracked through PostHog (anonymously)

2.5 Device and Browser Information

We collect technical information about your device:

• IP address
• Browser type and version
• Device type and operating system
• Screen resolution and viewport size
• Referrer URL

We use the collected information for the following purposes:

• To provide and maintain the Service: Process your account registration, authenticate your identity, and deliver the features and functionality you request
• To save your work: Store your calculator inputs and results so you can access them later
• To process payments: Handle subscription billing and payments through Stripe
• To improve the Service: Analyze usage patterns and user behavior to enhance features and user experience
• To communicate with you: Send service updates, technical notices, security alerts, and support messages
• To send marketing communications: Send newsletters, promotional content, and product updates via ConvertKit (you can opt out at any time)
• To ensure security: Detect, prevent, and address technical issues, fraud, and violations of our Terms of Service
• To comply with legal obligations: Meet legal and regulatory requirements

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who help us operate the Service:

• Stripe: Payment processing (credit card information, billing details)
• PostHog: Anonymous analytics and event tracking (usage data, behavioral analytics)
• ConvertKit: Email marketing and newsletters (email addresses, names)
• Vercel: Hosting and infrastructure (all data stored on the platform)
• OAuth Providers (Google, LinkedIn, X): Authentication services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, privacy, safety, or property
• Prevention of fraud or security threats

4.3 Business Transfers

If ToolsThat.Work is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

We use cookies and similar tracking technologies to track activity on our Service and store certain information.

5.1 Essential Cookies

These cookies are necessary for the Service to function properly. They enable core functionality such as:

• User authentication and session management
• Security features
• Basic Service functionality

5.2 Analytics Cookies

We use PostHog for anonymous analytics to understand how users interact with the Service. PostHog tracking is anonymized and does not identify individual users. This helps us:

• Understand which features are most popular
• Identify areas for improvement
• Track overall usage patterns

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy.

Specific retention periods:

• Account data: Retained while your account is active
• Calculator inputs: Retained to allow you to recover your work
• After account deletion: We retain your data for 30 days to allow for account recovery, then permanently delete it
• Legal requirements: Some data may be retained longer if required by law (e.g., financial records for tax purposes)
• Anonymous analytics: Anonymized usage data may be retained indefinitely for statistical purposes

You have the following rights regarding your personal information:

7.1 Account Deletion

You can request deletion of your account and all associated data at any time by contacting us at support@toolsthat.work. Your data will be retained for 30 days (to allow for account recovery) and then permanently deleted.

7.2 Marketing Opt-Out

You can opt out of marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Updating your email preferences in your account settings
• Contacting us at support@toolsthat.work

Note that even if you opt out of marketing communications, we will still send you essential service-related emails (e.g., account notifications, security alerts).

7.3 Access and Correction

You can access and update most of your personal information through your account settings. If you need assistance accessing or correcting your data, contact us at support@toolsthat.work.

7.4 Do Not Track

Some browsers support "Do Not Track" (DNT) signals. We respect DNT signals and will not track users who have DNT enabled.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

• Encryption of data in transit using SSL/TLS
• Secure authentication via OAuth providers
• Regular security audits and updates
• Restricted access to personal information on a need-to-know basis
• Payment processing through PCI-compliant provider (Stripe)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@toolsthat.work, and we will delete that information from our systems.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@toolsthat.work.

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us at support@toolsthat.work. We will respond to your request within 30 days.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification to the address associated with your account

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.