Legal

Privacy Policy

Last updated: 9 July 2026

This policy explains what data toollens (toollens.ai) collects, why, and the choices you have. The short version: we collect what's needed to run the product, we don't sell your data, and analytics are cookieless.

1. What we collect

  • Account data — name, username, email, country, optional profession/interests, and a password hash (or your Google account identity if you sign in with Google).
  • Content you create — reviews, ratings, posts, comments, saved tools, submitted tools, plans you share.
  • Technical data — standard server logs (IP, user agent) kept briefly for security and abuse prevention.
  • Analytics — privacy-friendly, cookieless aggregate analytics (Cloudflare Web Analytics): page views and performance, with no cross-site tracking and no personal profiles.

2. Cookies & local storage

We use a small number of strictly functional items: your sign-in session token and a theme preference cookie (light/dark). No advertising or tracking cookies.

3. How we use data

  • To operate the Service: your account, your saved tools, your reviews and posts.
  • To send transactional email (verification codes). No marketing email without your explicit opt-in.
  • To keep the Service safe: abuse prevention and debugging.

4. Who processes your data

Infrastructure providers that process data on our behalf:

  • Cloudflare — hosting/CDN and cookieless analytics.
  • Amazon Web Services — application server (EU region).
  • Supabase — database hosting.
  • Google — only if you choose "Sign in with Google".

We do not sell or rent personal data to anyone.

5. Public content

Your profile (name, username, avatar), reviews, ratings, and community posts are public by design. Saved tools are visible on your profile only to you.

6. Retention & deletion

Account data is kept while your account exists. To delete your account and associated personal data, use the account settings or email us — we'll complete deletion within 30 days, except where retention is legally required.

7. Your rights

Wherever you are, you can request access to, correction of, or deletion of your personal data by emailing jishnu@oushvaa.com. If you're in the EU/UK, these are your GDPR rights; equivalents apply under India's DPDP Act and similar laws.

8. Children

The Service is not directed at children under 13, and we don't knowingly collect their data.

9. Changes & contact

We'll update the date above when this policy changes. Questions: jishnu@oushvaa.com. See also our Terms of Service.