Privacy Policy

Information we collect

Account information. When you sign in with Google, we receive your Google account ID, name, and email address as returned by Google. We use these to identify your workspace and sync your saved collections, history, and settings.

Content you process. Traditional calculators (BMI, mortgage, loan, retirement, and all VitalCalc tools) process your input entirely in your browser. The values you enter never leave your device. PDF tools marked Local process files in your browser; when an AI summarize or cloud step is enabled, the relevant content is sent to the configured provider only after you grant explicit AI consent.

Usage data. We collect aggregated, anonymized analytics about which tools are used and errors encountered, so we can improve reliability. We do not sell or rent this data.

Cookies and local storage. We use a minimal set of cookies and local storage entries: a session cookie when you are signed in, an AI consent preference, a cookie consent choice, and your theme/appearance preference. See the Cookies section below.

How we use your information

To provide the tools and features you request, including saving your workspace history and collections to your account.

To operate AI steps that you explicitly enable, sending only the content required for that step to the configured AI provider.

To maintain the security and integrity of the service, detect abuse, and comply with legal obligations.

We do not use your information to train AI models, and we do not sell or rent your personal data to third parties.

AI consent and data processing

Toolars labels every step as Local, Cloud, or AI. Steps marked Local never transmit your data. Steps marked AI or Cloud require your explicit consent before any content is sent to a provider.

Your AI consent choice is recorded per workspace. You can review and revoke AI consent at any time from Settings → Privacy & AI. Revoking consent disables AI and cloud steps until you re-enable them.

Cookies

Toolars uses the following categories of cookies and local storage:

Strictly necessary. The signed session cookie (when signed in) is required for authentication and cannot be disabled.

Preferences. Your AI consent choice, cookie consent choice, and appearance preference are stored locally so the site remembers them on your next visit.

Analytics. Optional, anonymized analytics run only if you accept them in the cookie consent banner. You can withdraw analytics consent at any time.

You can clear preferences and analytics storage at any time using your browser settings or from Settings → Privacy & AI.

Data retention

We retain your account information and workspace data for as long as your account is active. If you delete your account, we remove your personal data within 30 days.

AI consent and run logs are retained to provide an auditable record of your consent choices, as required for accountability under GDPR Article 7(1). You can export these logs from Settings → Privacy & AI.

Your privacy rights

Depending on your location, you may have the following rights over your personal data:

Access. Request a copy of the personal data we hold about you.

Rectification. Ask us to correct inaccurate or incomplete data.

Erasure. Request deletion of your personal data (the 'right to be forgotten').

Restriction and objection. Ask us to restrict or stop processing your data.

Data portability. Receive your data in a structured, machine-readable format.

Withdraw consent. Withdraw your AI, analytics, or cookie consent at any time without affecting processing carried out before withdrawal.

To exercise any of these rights, contact us at the address below. We respond within 30 days. If you are in the European Economic Area, United Kingdom, or California, these rights are guaranteed under the GDPR and CCPA respectively.

International data transfers

When you enable an AI or cloud step, your content may be processed by providers located outside your country of residence, including the United States. We rely on standard contractual clauses and provider data processing agreements to ensure appropriate safeguards for such transfers.

Children's privacy

Toolars is not directed at children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The 'last updated' date at the top reflects the most recent change. Material changes will be highlighted on the site at least seven days before they take effect.

Contact us

If you have questions about this Privacy Policy or want to exercise your data rights, email privacy@toolars.app. Include 'Privacy Request' in the subject line.