Tooldar does not sell personal information and does not use company records for targeted advertising. We use data to operate, secure, support, and bill for the service.
Scope and who controls company records
This Privacy Policy applies to Tooldar websites, applications, support, and related services. A company that creates or uses a Tooldar workspace controls the operational records entered by its authorized users. Tooldar processes those records to provide the service. Individual account holders control their own sign-in information, subject to company recordkeeping and legal requirements.
Information we collect
- Account information: name, email address, password credential, email-verification status, passkey public credentials, memberships, and assigned role. Tooldar does not receive or store a face, fingerprint, or device PIN.
- Company information: company name, locations, settings, team roster, invitations, device assignments, subscription selection, and entitlements.
- Operational records: tools, stock, packages, scans, custody movements, issue reports, service records, notes, suppliers, costs, labels, photos, notifications, and immutable history needed for accountability.
- Technical and security information: session identifiers, device/browser information, timestamps, request and error logs, authentication attempts, and security events.
- Billing and communications: subscription state, plan and payment status from Stripe, support requests, and messages sent through Tooldar. Payment-card details are entered with and handled by Stripe, not stored by Tooldar.
How we use information
We use information to authenticate users; enforce company and role boundaries; operate scanning, custody, stock, package, reporting, notification, export, and deletion features; process subscriptions; prevent fraud and abuse; troubleshoot failures; provide support; improve reliability; meet legal obligations; and protect Tooldar, customers, and users.
How information is shared
Company information is visible only to authorized members according to their Tooldar role. A Worker is limited to identification and reporting functions; higher roles receive only their approved operational or administrative access.
We disclose information to service providers only as needed to operate Tooldar, including infrastructure and hosting providers, Cloudflare services, Stripe for subscriptions and payments, and an email-delivery provider for verification, recovery, invitations, notifications, and support. We may also disclose information when required by law, to protect rights or safety, in a business transfer with appropriate safeguards, or at the direction of the company controlling the workspace.
Tooldar does not sell personal information or share it for cross-context behavioral advertising.
Sessions, cookies, and analytics
Tooldar uses essential session technology to keep users signed in, remember the active company, secure account actions, and provide installable-app behavior. We may use limited operational measurements to understand reliability and feature use. Tooldar does not currently use advertising cookies or third-party behavioral advertising.
Retention, exports, and deletion
We retain account and company data while the applicable account or workspace is active and as needed for service, security, billing, dispute resolution, and legal obligations. Every user can export portable account data. Company Owners can export the company workspace and stored media.
Account and company deletion requests include a 30-day cancellation period. After that period, Tooldar removes active data when ownership, billing, fulfillment, retention, and legal-hold safeguards permit. Shared company history may be anonymized when deleting one account so the company audit trail remains accurate. A non-reversible email fingerprint may be retained to prevent repeated free trials without retaining the original email address.
Residual copies may remain temporarily in restricted disaster-recovery systems until routine provider or backup expiration. They are not used for ordinary business and may be retained longer when law, fraud prevention, a dispute, payment reconciliation, an open order, or a legal hold requires it.
Security
Tooldar uses access controls, one-way password hashing, verification, rate limits, tenant isolation, role authorization, protected sessions, signed payment webhooks, and audited operational history. No internet service can guarantee absolute security. Customers are responsible for protecting credentials, choosing appropriate roles, removing former workers, and promptly reporting suspected unauthorized access.
Your choices and privacy rights
Depending on where you live, you may have rights to access, correct, export, delete, or restrict certain personal information and to appeal a denied request. Tooldar provides account and company export and deletion controls inside the application. You may also contact support@tooldar.com. We may verify identity and authority before completing a request and will not discriminate for exercising applicable privacy rights.
Children, location, and transfers
Tooldar is a workplace service and is not directed to children under 18. The service is operated from the United States, and information may be processed in the United States and other locations used by our service providers, subject to their contractual and legal safeguards.
Changes and contact
We may update this policy as Tooldar, its providers, or legal requirements change. The effective date will be updated, and material changes may also be announced in the application or by email. Questions and privacy requests may be sent to support@tooldar.com.