Privacy Policy

Overview

ToolmetryAI ("we", "our", or "us") values your privacy and is committed to protecting the personal information you entrust to us. This Privacy Policy explains what information we collect when you use our AI-powered platform, how we use and protect that information, and the rights you have regarding your data. ToolmetryAI provides a suite of AI tools including document generators, image processing utilities, text analyzers, code assistants, and other AI-driven features powered by models such as Google Gemini and OpenRouter.

By accessing or using ToolmetryAI, you agree to the data practices described in this Privacy Policy. If you do not agree with these practices, please discontinue use of the platform. We encourage you to review this policy periodically to stay informed about how we protect your information.

This policy applies to all ToolmetryAI services, including our website, web application, and any related tools or features. It does not apply to third-party websites or services that may be linked from our platform. For questions or concerns about this policy, contact us at support@toolmetry.pro.

Information We Collect

We collect only the information necessary to operate, maintain, and improve ToolmetryAI. The data we collect falls into four primary categories, each serving a specific operational purpose.

Account Information: When you sign in using Google Authentication (Google OAuth), we collect your name, email address, and basic profile information provided by your Google account. This information is essential for creating and managing your account, personalizing your experience, and communicating with you about your account or our services. We do not collect passwords from third-party authentication providers. After authentication, we set a JWT-based cookie (_tmt) on your device to maintain your session — you do not need to re-authenticate on every page visit.

Usage and AI Tool Information: When you use our AI tools — such as document generators, image processing features, text summarizers, code generators, or other utilities — we collect information about your tool activity, including the prompts you submit, the parameters you configure, and the generated outputs you receive. Your prompts and uploaded files (such as images or documents for processing) are transmitted to AI providers like Google Gemini and OpenRouter to produce the requested results. We store a record of your generation history so you can access previous outputs and manage your usage credits.

Technical Information: We automatically collect certain technical data when you visit or interact with the platform, including your browser type and version, operating system, device type, IP address, referring URL, and pages viewed. This information is collected through standard HTTP headers, cookies, and analytics tools like Vercel Analytics and Google Analytics. Technical information helps us diagnose issues, optimize performance, and understand aggregate usage patterns. Additionally, Google AdSense may collect technical information through advertising cookies for the purpose of serving personalized advertisements.

Communication Information: When you contact us via email, support forms, or other channels, we collect the information you provide in those communications, including your name, email address, and the content of your message. This data is used solely to respond to your inquiry and improve our support services.

How We Use Information

We use the information we collect for the following purposes essential to operating and improving ToolmetryAI.

Service Delivery: Your account information and usage data are used to provide, maintain, and personalize our AI tools and services. This includes processing your prompts through AI models, delivering generated content such as documents, images, code, and text analyses, managing your credit balance and generation history, and ensuring tools function correctly for your account.

Platform Improvement: We analyze usage patterns, tool performance metrics, and aggregated user behavior to identify bugs, improve existing features, develop new AI tools, and optimize platform responsiveness. Usage data helps us understand which tools are most valuable and where we should focus development efforts.

Security and Abuse Prevention: We monitor usage data and technical information to detect and prevent fraudulent activity, unauthorized access, abuse of platform resources, and violations of our Terms of Service. This includes rate limiting, identifying suspicious account behavior, and protecting against automated scraping or exploitation.

Communication: We use your email address to send service-related notifications such as account verification, password reset instructions, billing receipts, and critical platform updates. We may also send occasional product announcements or feature updates, which you can opt out of at any time.

Advertising: We display advertisements through Google AdSense to support the free tier of our platform. Google AdSense may use cookies and similar technologies to collect information about your browsing activity on our site and across the web to serve personalized advertisements. This helps us generate revenue to offer free access to many of our AI tools. You can opt out of personalized advertising at any time through your cookie preferences, Google Ad Settings, or industry opt-out mechanisms.

We do not sell your personal information to third parties under any circumstances. However, we do share certain information with Google through Google AdSense for the purpose of ad personalization and measurement, as described in the Advertising and Data Sharing sections of this policy.

Client-Side Processing: Where technically feasible, we process data directly in your browser rather than on our servers. Many of our utility tools — such as JSON formatters, password generators, word counters, and image compressors — perform all computations locally on your device. This means your data never leaves your browser and is never transmitted to our servers or any third party. Tools that require server-side processing (such as AI-powered generators) clearly indicate this, and we handle your data securely and with minimal retention when server processing is necessary.

Your Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or any jurisdiction that implements the General Data Protection Regulation (GDPR), you have specific rights regarding your personal data. We are committed to facilitating these rights and responding to requests in a timely manner.

Right of Access: You have the right to request a copy of the personal data we hold about you. Upon receiving a verified request, we will provide you with a comprehensive summary of your data, including the categories of data collected, the purposes for which it is processed, and the third parties with whom it is shared. We aim to fulfill access requests within 30 days of receipt.

Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request corrections. You can update certain account information directly through your account settings. For other corrections, contact us at support@toolmetry.pro and we will address your request within 30 days.

Right to Erasure: You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when processing is unlawful. We will comply with erasure requests within 30 days, except where retention is required by law or necessary for the establishment, exercise, or defense of legal claims.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider without hindrance.

Right to Object and Restrict Processing: You may object to certain types of data processing, including processing based on legitimate interests or processing for direct marketing purposes. You may also request restriction of processing in certain circumstances, such as when you contest the accuracy of your data. This includes the right to object to the processing of your data for personalized advertising through Google AdSense.

To exercise any of these rights, contact us at support@toolmetry.pro with a clear description of your request. We will verify your identity before processing your request and respond within 30 days. In complex cases, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reasons for it.

Third-Party Services

We share information only with service providers who are essential to operating ToolmetryAI. We do not sell, rent, or trade user data for advertising or any other commercial purpose. Each third-party service is carefully selected and required to maintain appropriate security and privacy standards.

Vercel: Our platform is hosted on Vercel's infrastructure, which processes requests, serves web pages, and collects performance and analytics data. Vercel may collect IP addresses, request headers, and performance metrics. Vercel's privacy practices are governed by their Privacy Policy at vercel.com/legal/privacy-policy.

MongoDB Atlas: Our primary database is hosted on MongoDB Atlas, which stores user account data, generation history, credit balances, and preferences. MongoDB Atlas employs encryption at rest and in transit. Their privacy policy is available at mongodb.com/legal/privacy-policy.

Google Authentication: We use Google OAuth for user sign-in. During the authentication flow, Google shares your name and email address with us. Google may set cookies during the sign-in process. We do not receive your Google password.

AI Providers (Google Gemini and OpenRouter): When you use our AI tools, your prompts and any uploaded content (text, images, or documents) are transmitted to these AI providers for processing. The generated outputs are then returned to you through our platform. These providers process your inputs according to their own data handling policies. We encourage you to review the privacy policies of Google AI and OpenRouter for details on how they handle data. We do not send your personal account information (such as your password or payment details) to AI providers — only the prompts and content necessary to fulfill your generation requests.

Dodo Payments: For processing payments related to premium plans and credit purchases, we use Dodo Payments as our payment processor. Dodo Payments collects and processes payment information including billing details and transaction records in accordance with applicable payment security standards. We do not store your full credit card or payment instrument details on our servers.

Google AdSense: We use Google AdSense to display advertisements on our platform. Google AdSense sets advertising cookies (__gads, __gpi, IDE, NID, DSID) on your device to serve ads based on your browsing activity and interests. Google may collect and process information about your visits to ToolmetryAI and other websites for the purpose of ad personalization and measurement. This information may include your IP address, cookie IDs, pages viewed, and interactions with advertisements. Google's use of your data for advertising purposes is governed by Google's Privacy Policy at policies.google.com/privacy and its advertising policies at policies.google.com/technologies/ads. You can manage your ad personalization preferences at adssettings.google.com or opt out of interest-based advertising through the Network Advertising Initiative at networkadvertising.org/choices.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Our retention practices are designed to minimize data storage while ensuring operational continuity.

Active Account Data: While your account is active, we retain all data necessary to provide our services, including your profile information, generation history, credit balance, and preferences. This data is essential for the ongoing operation of your account and the AI tools you use.

Generation History: Records of your AI tool usage, including prompts and generated outputs, are retained for the duration of your active account so you can access previous generations. If you delete individual generation records, they are removed from active systems within 30 days. Backup copies may persist for up to 90 additional days before being permanently purged.

Account Deletion: If you request account deletion, we will remove your personal information from active systems within 30 days. Some data may persist in encrypted backups for up to 90 additional days for disaster recovery purposes, after which it will be permanently deleted. We may retain certain anonymized or aggregated data that cannot be used to identify you personally.

Legal and Compliance Retention: We may retain certain information beyond the standard retention periods when required by applicable law, regulation, or legal process, or when necessary for the establishment, exercise, or defense of legal claims. In such cases, the retained data will be processed only for the specific legal or compliance purpose.

Advertising Data: Google AdSense cookies set on your device are subject to Google's retention policies. You can manage or delete these cookies at any time through your browser settings or Google Ad Settings.

Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, misuse, alteration, disclosure, or destruction. Our security practices are regularly reviewed and updated to address emerging threats and industry best practices.

Infrastructure Security: Our platform is hosted on Vercel, which provides enterprise-grade security including DDoS protection, TLS encryption for all connections, and SOC 2 Type II compliance. Data at rest in MongoDB Atlas is encrypted using AES-256 encryption, and all data in transit is protected using TLS 1.2 or higher.

Application Security: We implement authentication safeguards, session management controls, and input validation to protect against common web vulnerabilities. Access to user data is restricted to authorized personnel on a need-to-know basis, and all access is logged and monitored.

AI Data Handling: Prompts and generated content transmitted to AI providers are sent over encrypted connections. However, once data is transmitted to third-party AI providers, it is subject to their respective security and data handling practices. We recommend avoiding the inclusion of highly sensitive personal information in AI prompts.

While we strive to protect your information using commercially reasonable measures, no method of electronic transmission or storage is completely secure. By using ToolmetryAI, you acknowledge that there are inherent risks associated with any online service, and you agree that we cannot guarantee absolute security against all potential threats.

International Transfers

ToolmetryAI operates globally and utilizes service providers whose infrastructure may be located in various countries. When you use our platform, your information may be transferred to and processed in countries other than your own, including the United States, India, and other jurisdictions where our service providers operate.

We take steps to ensure that international data transfers are conducted in compliance with applicable data protection laws. When transferring data from the EEA or other regions with data protection regulations, we rely on appropriate safeguards such as standard contractual clauses approved by the European Commission, or other legally recognized transfer mechanisms.

Our key service providers process data as follows: Vercel processes hosting data primarily in the United States and other global regions; MongoDB Atlas stores database information in cloud regions that may span multiple countries; Google AdSense processes advertising data in the United States and other regions as part of Google's global infrastructure; and AI providers like Google Gemini and OpenRouter process prompts and generation requests in their respective data centers, which may be located in the United States or other regions.

By using ToolmetryAI, you acknowledge and consent to the transfer of your information to these countries and jurisdictions. If you have questions about specific data transfers, contact us at support@toolmetry.pro.

Children's Privacy

ToolmetryAI is not intended for use by children under the age of 13, and we do not knowingly collect personal information from children under 13. Our AI tools, including document generators, code assistants, and image processing utilities, are designed for use by adults and are not directed at children.

If we become aware that a child under 13 has provided us with personal information — for example, through the Google sign-in process or by using our AI tools — we will take steps to delete that information from our systems within a reasonable timeframe. We will also take appropriate measures to prevent further collection of data from that individual.

If you are a parent or guardian and believe that your child has provided personal information to ToolmetryAI, please contact us immediately at support@toolmetry.pro with the relevant details. We will promptly investigate and take appropriate action to remove the information and prevent future collection.

For users between the ages of 13 and 18, we recommend parental guidance when using AI-powered tools. The content generated by our AI models may not always be appropriate for younger users, and we encourage parents to monitor their children's use of online services.

Contact

For all privacy-related questions, concerns, data access requests, or complaints, please contact our designated privacy contact at support@toolmetry.pro. We take all privacy inquiries seriously and are committed to addressing your concerns promptly and thoroughly.

When submitting a data request, please include sufficient information to verify your identity, such as the email address associated with your ToolmetryAI account and a description of the specific right you wish to exercise. This helps us protect your data from unauthorized disclosure.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For EEA residents, this would be the data protection authority in your member state. For UK residents, this would be the Information Commissioner's Office (ICO). For California residents, complaints can be filed with the California Attorney General's office.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, legal requirements, or industry standards. When we make material changes to this policy, we will update the "Last Updated" date at the bottom of this page and, where appropriate, provide additional notice through the platform or by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of ToolmetryAI after any changes to this policy constitutes your acceptance of the updated terms.

In cases where we make significant changes that materially affect how we process your personal data, we will provide more prominent notice, which may include email notifications or in-platform alerts, and we may seek your consent where required by applicable law. If you do not agree with the updated policy, you may request deletion of your account and data by contacting us at support@toolmetry.pro.

Advertising

ToolmetryAI displays advertisements on its platform through Google AdSense to support the free tier of our service. Google AdSense is an advertising service provided by Google LLC that serves personalized and non-personalized ads on our platform.

When you visit ToolmetryAI, Google AdSense may set the following advertising cookies on your device:

• __gads — Used to identify signed-in users and track ad interactions. Duration: 2 years. • __gpi — Used for ad personalization and tracking user preferences across sites. Duration: 2 years. • IDE — Google DoubleClick cookie used for ad targeting, frequency capping, and reporting. Duration: 1 year. • NID — Stores user preferences and enables personalized ad delivery. Duration: 6 months. • DSID — Used for ad targeting and measurement across Google services. Duration: 2 weeks.

These cookies enable Google to collect information about your browsing behavior on our site and across the web, including pages visited, time spent, and interactions with ads. This information is used to display advertisements that are relevant to your interests and to measure the effectiveness of advertising campaigns. Google may share this data with its advertising partners for ad targeting and measurement purposes.

We implement Google Consent Mode on our platform, which communicates your consent choices to Google. When you decline advertising cookies through our Cookie Consent banner, we set the ad_storage parameter to "denied," which restricts Google AdSense from setting advertising cookies and limits ad personalization.

Opt-Out Mechanisms: You have several options to opt out of personalized advertising:

1. Cookie Consent Banner: Decline advertising cookies through our Cookie Consent banner by selecting "Essential Only" or customizing your preferences. 2. Google Ad Settings: Visit adssettings.google.com to manage your ad personalization preferences across all Google services. 3. Network Advertising Initiative (NAI): Visit networkadvertising.org/choices to opt out of interest-based advertising. 4. Digital Advertising Alliance (DAA): Visit optout.aboutads.info to opt out of interest-based advertising. 5. Browser Settings: Block third-party cookies or clear existing advertising cookies through your browser settings.

Please note that opting out of personalized advertising does not remove ads entirely — you may still see non-personalized ads that are not based on your browsing history. For more information about how Google uses data for advertising, visit policies.google.com/technologies/ads.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights are in addition to any rights you may have under the GDPR or other applicable privacy laws.

Right to Know: You have the right to request, up to twice per year, detailed information about the personal data we have collected about you in the preceding 12 months. This includes the categories of data collected, the specific pieces of data, the business or commercial purposes for collection, and the categories of third parties with whom we share your data. We will respond to verified requests within 45 days.

Right to Delete: You can request that we delete your personal information, subject to certain exceptions permitted by law (such as data needed to complete transactions, detect security incidents, or comply with legal obligations). Upon receiving a verified deletion request, we will delete your personal information from our records and direct our service providers to do the same within 45 days.

Right to Opt-Out: You have the right to opt out of the sale of your personal information. ToolmetryAI does not sell personal information as that term is defined under the CCPA. However, we do share information with Google through Google AdSense for the purpose of targeted advertising, which may be considered a "sale" or "sharing" under certain interpretations of the CCPA/CPRA. You have the right to opt out of this targeted advertising by: (1) declining advertising cookies through our Cookie Consent banner; (2) visiting Google Ad Settings at adssettings.google.com; (3) using the Network Advertising Initiative opt-out page at networkadvertising.org/choices; or (4) using the Digital Advertising Alliance opt-out page at optout.aboutads.info.

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. This means we will not deny you services, charge different prices, provide a different level of service, or suggest that you will receive different treatment based on your exercise of these rights.

Right to Limit Use of Sensitive Personal Information: Under the CPRA, you have the right to limit the use and disclosure of your sensitive personal information. ToolmetryAI does not collect or process sensitive personal information as defined by the CPRA beyond what is strictly necessary for providing our services.

To exercise your CCPA/CPRA rights, contact us at support@toolmetry.pro or support@toolmetry.pro. We will respond to verified requests within 45 days, or 90 days for complex requests, as permitted by law.

Do Not Track Signals

Some browsers offer a Do Not Track (DNT) feature that signals to websites that you do not want to be tracked. Because there is no universally accepted standard for how websites should respond to DNT signals, ToolmetryAI currently does not alter its data collection practices when a DNT signal is detected. This is consistent with the approach taken by most major websites and online services.

However, we provide alternative mechanisms for managing your tracking preferences. Our Cookie Consent banner, which appears when you first visit the platform, allows you to selectively enable or disable analytics and advertising cookies. You can access and update your cookie preferences at any time through the platform's settings or by clearing your browser cookies to trigger the consent banner again.

You can also manage cookies directly through your browser settings. Most modern browsers allow you to block third-party cookies, clear existing cookies, and configure preferences for specific websites. For Google Analytics specifically, you can install the opt-out browser add-on at tools.google.com/dlpage/gaoptout. For Google AdSense, you can manage your ad personalization preferences at adssettings.google.com or use the NAI opt-out page at networkadvertising.org/choices.

We are committed to transparency about our tracking practices and will continue to monitor developments in DNT standards. If a consensus standard for DNT is established in the future, we will evaluate our practices and may update our response to DNT signals accordingly.

Data Minimization

ToolmetryAI follows data minimization principles, collecting only the personal information that is necessary and proportionate for the specific purposes described in this Privacy Policy. We do not collect data indiscriminately or for unspecified purposes.

When you use our AI tools, we collect only the data required to process your request — your prompt input and any files you upload for processing. We do not access or collect data from your device beyond what is needed for the specific tool you are using. Generation history is stored so you can retrieve previous outputs, but you have the ability to delete individual records at any time.

We apply the principle of purpose limitation, meaning that data collected for one stated purpose is not repurposed for an unrelated use without your consent. For example, technical data collected for platform performance monitoring is not used for marketing profiling beyond what is necessary for advertising purposes through Google AdSense.

We regularly review our data collection practices to ensure they remain aligned with data minimization principles and remove any data that is no longer necessary for its original purpose.