Privacy Policy

TechToolkit ("we", "us", "our") operates techtoolkit.net and related subdomains. This policy explains what data we collect, why we collect it, and what rights you have over it.

1. What we collect

Account data

When you register, we collect your name, email address, and a hashed password (or your Google account identifier if you use Google sign-in). We never store your plain-text password.

Usage data

We log which tools you use, how many credits you consume, and the timestamp of each action. This is used to enforce credit limits and to show you your usage history.

Payment data

Payments are handled entirely by Stripe. We never see or store your card details. We receive confirmation of successful payments and your Stripe customer ID.

Technical data

We store standard server logs (IP address, browser, pages visited) for security and abuse prevention. IP addresses used for rate limiting are stored as one-way hashes and are not linked to your account.

Cookies

We use a single session cookie (required for login) and optional analytics/advertising cookies. See our Cookie Policy for details.

2. How we use your data

• To provide and improve the service
• To send transactional emails (password resets, receipts)
• To detect and prevent abuse, fraud, or security threats
• To display relevant advertising to free-plan users (via Google AdSense)

We do not sell your data to third parties. We do not use your data for automated decision-making that produces legal effects.

3. Data retention

Account data is kept for as long as your account is active. Usage logs older than 12 months are automatically purged. If you delete your account, all personal data is deleted within 30 days except where we are legally required to retain it (e.g. billing records for 7 years under Spanish tax law).

4. Your rights (GDPR)

If you are based in the EU/EEA, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest

To exercise any of these rights, email us at support@techtoolkit.net. We will respond within 30 days.

5. Third-party services

Service	Purpose	Privacy policy
Stripe	Payment processing	stripe.com/privacy
Google OAuth	Sign-in with Google	policies.google.com
Google AdSense	Ads (free plan only)	policies.google.com
Groq	AI tool inference	groq.com/privacy-policy
Hostinger	Hosting & infrastructure	hostinger.com

6. Security

We use HTTPS, bcrypt password hashing, prepared SQL statements, CSRF tokens on all forms, and rate limiting on authentication endpoints. No system is 100% secure — if you discover a vulnerability, please disclose it responsibly to support@techtoolkit.net.

7. Children

TechToolkit is not directed at children under 16. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

8. Changes to this policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The date at the top of this page reflects the latest revision.

9. Contact

Questions? Email support@techtoolkit.net or visit our contact page.