Privacy Policy

ToolHubBase ("we", "us", "our") operates toolhubbase.com and is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the rights you have regarding your data.

1 Overview

ToolHubBase is an online toolkit platform offering AI-powered tools such as image upscaling, data conversion, and format validation. To provide these services, we may collect limited personal information. This policy applies to all visitors and registered users of the platform.

2 Data We Collect

2.1 Information You Provide

• Google Account data — When you sign in with Google, we receive your name, email address, and profile picture via Google OAuth 2.0. We do not receive your Google password.
• Payment information — When you purchase credits, Stripe collects your payment details. We only receive a confirmation token and the last 4 digits of your card. We never store full card numbers.

2.2 Information Collected Automatically

• Usage data — Which tools you use, timestamps, and credit consumption logs.
• Log data — Server logs including IP address, browser type, referring URL, and error logs. Retained for up to 30 days.
• Cookies — Session cookies, preference cookies, and anonymous guest-tracking cookies. See our Cookie Policy for details.

2.3 Information We Do NOT Collect

• We do not store uploaded files after processing is complete.
• We do not collect sensitive personal data (health, biometric, financial account numbers).
• We do not build advertising profiles.

3 How We Use Your Data

• 🔐 Authentication — To identify you when you log in and link your credit balance to your account.
• 💳 Payments — To process credit purchases and issue refunds via Stripe.
• ⚙️ Service delivery — To run tools, track credit consumption, and enforce usage quotas.
• 📊 Analytics — To understand which tools are popular and improve the platform (using anonymized, aggregated data).
• 📧 Communication — To send transactional emails (e.g. purchase confirmations). We do not send marketing emails without explicit consent.
• 🛡️ Security — To detect and prevent abuse, fraud, and unauthorized access.

Legal basis (GDPR): Contract performance, legitimate interests, and consent where required.

4 Data Sharing

We do not sell, rent, or trade your personal data. We share data only with the following trusted third parties:

• Stripe — Payment processing. Stripe Privacy Policy
• Google — Authentication (OAuth) and Analytics (anonymized). Google Privacy Policy
• Cloudflare — DDoS protection, CDN, and SSL. Cloudflare Privacy Policy
• Replicate — AI model inference for image processing tools. Files are processed in-memory and not retained. Replicate Privacy Policy

We may disclose data if required by law, court order, or to protect the rights and safety of ToolHubBase users.

5 Data Retention

• Account data — Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Order & credit records — Retained for 7 years for accounting and legal compliance.
• Uploaded files — Deleted immediately after processing. Not stored.
• Server logs — Retained for up to 30 days, then automatically purged.
• Guest usage logs — Retained for 30 days, linked only to a random cookie identifier.

6 Your Rights

Regardless of your location, you have the following rights regarding your personal data:

To exercise any of these rights, email us at [email protected]. We respond within 30 days.

7 GDPR — EU & EEA Users

If you are located in the European Union or European Economic Area, additional rights apply under the General Data Protection Regulation (GDPR):

• The data controller is ToolHubBase (contact: [email protected]).
• We process data under Article 6(1)(b) (contract performance), 6(1)(f) (legitimate interests), and 6(1)(a) (consent where applicable).
• You have the right to lodge a complaint with your local data protection authority (DPA).
• Where we transfer data outside the EEA, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

8 CCPA — California Users

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know — What categories of personal information we collect and why.
• Right to delete — Request deletion of your personal information.
• Right to opt-out of sale — We do not sell personal information. No opt-out is required.
• Non-discrimination — Exercising your rights will not affect your access to our services.

To submit a CCPA request, email [email protected].

9 Security

We implement industry-standard technical and organizational measures to protect your data:

• All data in transit is encrypted via TLS/HTTPS (Cloudflare SSL).
• Payment data handled exclusively by Stripe (PCI DSS Level 1 certified).
• Database access restricted to authorized personnel with audit logging.
• Passwords (admin accounts) are hashed using bcrypt.

10 Children's Privacy

ToolHubBase is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it promptly.

11 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

• A notice on our website for at least 30 days before taking effect.
• An in-app notification for registered users.

The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

12 Contact Us

For any privacy-related questions, data requests, or complaints: