Privacy Policy: How We Protect Your Files

1. Who Operates ToolKB

ToolKB (https://toolkb.in) is built and operated by independent software developer Abhigyan Saikia, based in the Republic of India.

This Privacy Policy explains how ToolKB handles information when you visit our website, utilize our browser-based utilities, create an optional account, or purchase a subscription. If you have any privacy inquiries or statutory requests, contact us directly at support@toolkb.in.

2. Core Principle: 100% Client-Side File Processing

Your files never leave your device.

Unlike traditional web converters that require uploading your photos or documents to a remote cloud server, ToolKB executes all processing algorithms locally within your web browser using HTML5 Canvas, Web Workers, WebAssembly (WASM), and client-side JavaScript.

When you select a photo, signature, PDF, or document:

• The file is read strictly into your computer or smartphone local volatile memory.
• Algorithms (such as binary bisection for exact-KB compression, format transcoding, or PDF manipulation) run inside your browser.
• Generated outputs are delivered directly to your device via browser download handlers.
• ToolKB does not operate an upload backend, does not receive your files over the network, and possesses zero copies of your data.

3. Account Authentication and Subscription Telemetry

ToolKB may be used as a guest without creating an account. For users who choose to register or upgrade to Pro or Business subscriptions, we collect and process specific account information:

• Authentication (Clerk): When you create an account or sign in using email or Google OAuth, Clerk processes your email address, name, and login credentials. Clerk manages your authentication session securely and never accesses your local tool files.
• Payment Processing (Razorpay): When you start a subscription or 7-day trial, Razorpay processes your payment details, card or UPI AutoPay mandate tokens, and transaction receipts. ToolKB receives and stores only transaction references, subscription identifiers, and mandate status. We never receive or store your raw debit card numbers, credit card numbers, or UPI PINs.
• Database and Quota Counters (Supabase Postgres): We maintain an account profile record in Supabase storing your user identifier, active subscription plan (Free, Pro, or Business), subscription start and renewal dates, and daily usage counters (number of downloads performed per tool category per day). Daily usage counters reset automatically at midnight Indian Standard Time (Asia/Kolkata). No file names, photos, or file contents are ever recorded.
• Guest Usage Device Identifier: If you use ToolKB as a guest without logging in, a pseudonymous random string is stored in your browser localStorage. This identifier is sent solely with download validation requests to enforce fair daily guest limits (e.g. 3 image compressions per day) and contains zero personal information.

4. Tool-by-Tool Processing Matrix

The table below discloses the technical processing environment for every tool category on ToolKB:

5. Information We Actually Collect

The information collected by ToolKB is strictly limited to technical hosting operations, voluntary accounts, and aggregate metrics:

• Account Profiles (Registered Users): Your email address and authentication identifier provided via Clerk, plus your subscription status and subscription identifier in Supabase.
• Usage Counter Records: Daily integer download counts per category (e.g. 5 compressions today) linked to your user ID or pseudonymous guest device ID.
• Aggregate Usage Telemetry (Google Analytics 4): Standard aggregated analytics evaluating page popularity and device type. File sizes are coarsened into broad buckets (such as "< 100KB" or "1MB - 5MB"). File names, document text, invoice items, candidate details, and photo contents are never sent to analytics.
• Technical Hosting Logs: Standard HTTP request logs generated by Vercel edge servers containing IP addresses, user-agent strings, and request timestamps, utilized strictly for infrastructure security and denial-of-service defense.
• Voluntary Correspondence: Support emails sent to support@toolkb.in are retained solely to address customer inquiries or technical bug reports.

6. Third-Party Service Providers

ToolKB engages trusted infrastructure partners to operate our platform:

• Vercel Inc. (United States): Cloud hosting, edge network, and serverless runtime.
• Clerk Inc. (United States): Authentication provider managing user login, security tokens, and sessions.
• Razorpay Software Private Limited (India): Payment aggregator managing checkout, subscription recurring billing, and RBI-compliant e-mandates.
• Supabase Inc. (AWS Mumbai Region): Cloud PostgreSQL database storing user plan state, subscription metadata, and daily usage counters.
• Google LLC (Google Analytics 4): Aggregate web performance measurement.
• Buy Me a Coffee: Optional external creator support page. Clicking this external link navigates to their platform subject to their terms.

We do not sell personal data, license user profiles to data brokers, or deploy behavioral retargeting advertising networks.

7. Data Retention and Account Deletion

• User Files and Documents: 0 seconds. All files exist only in volatile browser memory during your active session and vanish when you close the tab.
• Local Browser Drafts: Invoices or menu drafts stored in your browser LocalStorage remain until manually cleared. IndexedDB workflow items expire automatically after 30 minutes.
• Registered User Accounts: You can delete your account at any time directly from the Account Dashboard (`/account`). Account deletion permanently removes your profile and usage rows in Supabase and deletes your user record in Clerk.
• Payment Records: Billing transactions and invoices are maintained in Razorpay in accordance with applicable Indian tax and financial accounting regulations.

8. Legal Compliance and Privacy Frameworks

ToolKB adheres to established privacy principles under Indian and international law:

• Digital Personal Data Protection Act, 2023 (DPDP Act 2023, India): ToolKB processes account data based on user consent and contract necessity for providing paid subscriptions. Because your files remain on your device, ToolKB does not ingest or store personal data from your documents.
• Information Technology Act, 2000 and 2021 Intermediary Rules: The statutory Grievance Officer for ToolKB is Abhigyan Saikia, reachable at support@toolkb.in.
• General Data Protection Regulation (GDPR / UK GDPR): For European visitors, account and telemetry processing relies on legitimate interests and contractual necessity. You have rights of access, correction, and erasure.
• California Consumer Privacy Act (CCPA / CPRA): We do not sell or share personal information.

9. Your Privacy Rights

You have the right to inspect what account details are associated with your profile, request corrections, or permanently delete your account. To delete your account and profile records immediately, visit your Account Dashboard or email support@toolkb.in.

10. Children Privacy

ToolKB provides general-purpose educational and productivity utilities. We do not knowingly collect, solicit, or store personal data from children under applicable age thresholds (including under 18 years under the DPDP Act 2023 without parental consent).

11. Security Disclosures

We employ Content Security Policies (CSP), subresource integrity, strict transport security (HSTS), and cryptographic webhook signatures to protect our application environment. For comprehensive technical details, review our Security Page.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect new features or regulatory requirements. The "Last updated" date at the top indicates the most recent revision.