Privacy Policy

This Privacy Policy describes how ToolsGravity ("we", "us", or "our") handles information when you visit toolsgravity.com, use any of our free online tools, or subscribe to our Pro plan (collectively, the "Service").

We built ToolsGravity on a single principle: your files belong to you. Some of our tools run entirely inside your browser and upload nothing at all. The rest send your file over an encrypted connection to our own processing servers, which do the work and then delete it — we keep no copies, our staff never browse your files, and nothing is used for training or advertising. Every tool page tells you which of these applies before you upload anything. This policy explains exactly what we collect, when, and how you can control it.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use.

What we do NOT collect

• Copies of your files. Content processed by our browser-based tools never leaves your device at all. Content sent to our processing servers is deleted as soon as the operation finishes — we retain no copies, and it is never used for training, analytics, or advertising.
• Your output. Anything you generate — resized images, compressed PDFs, paraphrased text — is returned to you and then deleted from our servers. We do not keep a library of your results.
• Browsing history outside this site. We have no visibility into what you do elsewhere on the web.
• Biometric or sensitive personal identifiers beyond what's strictly necessary to provide the Service.

What we do collect

• Anonymous usage analytics: Aggregated data about which tools are used, page load times, and approximate region (country-level), collected via Google Analytics 4. This data is not tied to your identity and is used only to understand usage patterns and improve the Service.
• Account information (Pro users only): If you create a Pro account, we collect your email address, billing details (handled by our payment processor — see the Third-Party Services section), and subscription status. We do not see or store your full payment card number.
• Operational metadata for AI features: When you use an AI-powered tool (e.g. background removal, paraphrasing), the relevant input is sent to a third-party AI provider over an encrypted connection. We do not retain a copy of this input on our servers — see AI-Powered Features.
• Technical logs: Standard web server logs (IP address, user agent, request path, timestamp) are retained for up to 30 days for security and abuse prevention. These logs are automatically purged afterward.

We use the limited information we collect to:

• Operate, maintain, and improve the Service
• Process Pro subscriptions and provide customer support
• Detect, prevent, and respond to fraud, abuse, security incidents, or violations of our Terms of Service
• Comply with legal obligations, court orders, and lawful requests from authorities
• Send transactional emails to Pro users (billing receipts, security alerts) — we do not send marketing emails without your explicit consent

We do not sell, rent, or trade your personal information to any third party for marketing purposes, ever.

Our tools fall into three groups, and every tool page states which group it belongs to before you upload anything:

• In your browser. Text tools, developer utilities and a few image tools run entirely client-side, using Web APIs such as Canvas, the File API and Web Crypto. Nothing is uploaded — these keep working with your connection switched off once the page has loaded.
• On our own servers. Most PDF and image tools send your file over an encrypted HTTPS connection to processing services we run ourselves. We use real engines (Stirling-PDF and sharp/libvips) because they produce materially better results than a browser can. Your file is processed and then deleted immediately; it is never passed to a third party.
• Via an AI provider. Tools marked with an "AI" badge send your input to a third-party AI API. It is deleted after processing and is not used to train models.

For browser-based tools, your file stays in the tab's memory and is discarded as soon as you close or navigate away. For the other two groups, retention is limited to the duration of the operation itself.

If you are working with something genuinely confidential and would rather nothing left your device, prefer a tool marked as running in your browser.

A small subset of our tools require AI inference that cannot reasonably run in a browser (e.g. background removal, large-context paraphrasing). For these:

• Input is transmitted over HTTPS to our chosen AI provider (typically Google Gemini or comparable enterprise-grade APIs).
• Inputs are not retained by us — we use a stateless proxy that forwards your request and returns the result.
• Our AI providers operate under their own data-processing agreements. Per current Google Gemini API terms, your prompts and outputs are not used to train Google's models.
• Free-tier users are rate-limited per IP to prevent abuse; Pro users get higher quotas.

If you would prefer to avoid all server-side processing, every AI tool has a local-only alternative listed under the "Related Tools" section.

We use the following limited cookie/storage technologies:

Strictly necessary

• Session tokens (Pro users only) to keep you signed in
• Local storage for tool preferences (theme, last-used settings) — never leaves your device
• CSRF tokens to protect form submissions from cross-site request forgery

Analytics (opt-out available)

• Google Analytics 4 cookies (_ga, _ga_*) — anonymized, used for aggregated usage statistics

Advertising (when enabled)

• Google AdSense cookies — only when ads are explicitly enabled in your region. You can opt out at adssettings.google.com.

You can clear or block these cookies via your browser settings. Doing so may impair some functionality but will not prevent you from using the core tools.

We partner with a small number of vetted third-party providers to operate the Service:

• Vercel — Web hosting and edge delivery. See Vercel's Privacy Policy.
• Google Analytics — Anonymous usage statistics. See Google's Privacy Policy.
• Google Gemini / Vertex AI — AI inference for marked tools. Inputs are not used for model training under current API terms.
• Razorpay — Payment processing for subscriptions and credit purchases. We never see your full card number. See Razorpay's Privacy Policy.
• Google AdSense (where enabled) — Advertising. See Google's ad policy.

We do not authorize these providers to use your information for any purpose other than providing services to ToolsGravity.

We protect the limited data we hold using industry-standard measures:

• TLS 1.3 encryption for all data in transit
• Encryption at rest for any stored Pro account data
• Role-based access controls — only authorized engineers can access production systems, and only when troubleshooting
• Regular security audits of dependencies and infrastructure
• Bug bounty program — we welcome responsible disclosure of vulnerabilities at security@toolsgravity.com

No system is 100% secure, however. If we ever detect a breach that may affect your information, we will notify you within 72 hours of discovery as required by GDPR and similar regulations.

Depending on your jurisdiction, you have certain rights regarding your personal information. ToolsGravity honours these rights globally, regardless of where you live:

• Right to access — Request a copy of any personal data we hold about you
• Right to rectification — Correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — Delete your account and associated data
• Right to portability — Receive your data in a machine-readable format
• Right to object — Object to certain types of processing, including direct marketing
• Right to restrict processing — Limit how we use your data
• Right to withdraw consent — Where processing is based on consent

Region-specific protections

• European Economic Area (EEA), UK, Switzerland: GDPR and UK-GDPR rights apply. You may lodge a complaint with your local supervisory authority.
• California, USA: CCPA/CPRA rights apply, including the right to know, delete, correct, and opt out of sale (we don't sell data).
• Brazil: LGPD rights apply.
• Other regions: We extend the same baseline rights to all users worldwide.

To exercise any right, email hello@toolsgravity.com. We will respond within 30 days.

ToolsGravity is not directed at children under 13 (or under 16 in the EEA, and the applicable minimum age in other jurisdictions). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@toolsgravity.comand we will delete it immediately.

Our servers are located in multiple regions to provide fast, reliable service. When you use our Service, your data may be transferred to and processed in countries outside your country of residence.

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable
• Adequacy decisions for countries deemed to provide adequate protection
• Your explicit consent in specific circumstances

We retain personal information only as long as needed to fulfil the purpose for which it was collected:

• Anonymous analytics: 14 months (Google Analytics default)
• Server logs: 30 days
• Pro account data: Retained while your account is active. After cancellation, we delete personal data within 90 days, except where retention is required by law (e.g. tax records).
• Email correspondence: Up to 2 years from last contact, for context on follow-up support requests.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

• Minor changes (typos, clarifications) take effect immediately upon posting.
• Material changes (e.g. new data types collected) will be announced via a banner on the site and, for Pro users, an email notice at least 30 days before they take effect.

We always display the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy, please reach out:

• Email: hello@toolsgravity.com
• Security disclosures: security@toolsgravity.com
• Mailing address: Available on request — we're a fully remote team

For EEA residents, you also have the right to contact your local data protection authority directly.