Privacy Policy

1. Data we collect

• Account data: email, supplied name, authentication identifiers, preferences, plan, and account dates. Clerk handles passwords, sign-in methods, verification, and sessions.
• Job data: uploaded files, filenames, types and sizes, selected tool, instructions and settings, outputs, status, progress, errors, timestamps, credit cost, and limited diagnostics.
• Billing data: Stripe customer/subscription identifiers, purchase status, plan, pack, invoice or checkout references, and transaction records. Stripe-not Tool 33-handles full payment-card details.
• Support data: messages, attachments, and information you send support.
• Technical data: IP address, browser/device information, timestamps, requested pages, referral data, session identifiers, and security or diagnostic events processed in ordinary server logs.

2. How we use data

• Provide, authenticate, operate, troubleshoot, and secure the Service.
• Accept uploads, run requested tools, deliver outputs, show progress, and return credits for failed jobs.
• Process purchases, subscriptions, and credits; prevent duplicate grants; and keep transaction records.
• Respond to support and communicate about accounts, transactions, security, or material changes.
• Detect abuse, maintain reliability, comply with law, enforce agreements, and handle legal claims.

3. AI processing

Tool 33 owns and operates the computing hardware used for AI inference that produces tool deliverables. Uploaded files, instructions, and contents are not sent to OpenAI, Google, Anthropic, or another third-party AI model provider for that processing.

We do not use Input or Output to train AI models. Hosting and storage providers still process data as described here so the website, account, upload, and delivery systems work.

4. Providers and other disclosure

We may also disclose data to comply with valid legal process, protect users or the Service, investigate fraud/security, enforce agreements, or complete a corporate transaction with appropriate protections.

We do not sell personal data. With your consent, Google processes measurement and advertising data under its terms. Consent Mode communicates whether analytics storage, advertising storage, advertising user data, and ad personalization are granted or denied.

• Clerk: authentication, session management, identity verification, and account features.
• Stripe: hosted checkout, payments, subscriptions, fraud prevention, and billing records.
• Vercel: web application hosting and request, network, and diagnostic processing.
• Neon: managed PostgreSQL hosting for account, ledger, job-metadata, and transaction records.
• Amazon Web Services: S3 object storage for uploaded files and generated outputs.
• Google: consent-controlled Analytics and Ads measurement, including page paths, campaign/click identifiers, device and interaction data, and funnel events such as signup, job creation, successful jobs, and purchases. We do not send uploaded files, filenames, prompts, or outputs to Google.

5. File and record retention

• Source files: deletion is attempted immediately after success or failure. A storage lifecycle removes any remaining source object within approximately one day, including abandoned uploads or cleanup failures.
• Outputs: downloadable for up to seven days, then removed by application cleanup with an approximately seven-day storage lifecycle backstop. Signed download links expire sooner.
• Job records: after the output period, file references, instructions/settings, output references, progress notes, and errors are scrubbed and job events removed. A minimal record may remain for account history, credits, security, and transaction integrity.
• Account, credit, subscription, and transaction records: kept while needed for the account and afterward for accounting, fraud prevention, disputes, compliance, and enforcement. Legally required financial records may be retained longer.
• Support and security records: kept only as reasonably necessary for their purpose or a legal obligation.

6. Your choices and rights

You can change some account data in the account interface and delete an individual job from its job page, removing its record, events, and stored files. Email support@42tools.com to request access, correction, deletion, portability, restriction, or another right available where you live.

We may verify identity and retain data where law permits or requires it. Authorized agents may submit requests where applicable. If we deny a request, appeal by replying. You may complain to your privacy or data-protection authority.

7. Cookies

We and Clerk use cookies or similar storage necessary for authentication, security, preferences, and core operation. Stripe may use similar technology on hosted checkout for payment and fraud prevention. Blocking necessary cookies may prevent sign-in or checkout.

Google Analytics and Google Ads tags load with optional storage, advertising user data, and ad personalization denied by default. If you accept measurement, these tags may store or read identifiers and measure page visits, campaign attribution, successful jobs, and purchases. Rejecting keeps those consent signals denied. You can change your choice at any time through Privacy choices in the footer.

8. Security and international processing

Safeguards include authenticated access, scoped credentials, signed time-limited file URLs, direct browser-to-storage uploads, and deletion routines. No system is completely secure, and we cannot guarantee absolute security.

Tool 33 is a US company. Data may be processed in the United States and provider locations with different laws. Where required, we use an appropriate international-transfer mechanism.

9. Children, changes, and contact

The Service is not directed to children under 13, and our Terms require age 18. We do not knowingly collect data from children under 13.

We may update this Policy by posting a revision and new effective date, with additional notice where required.

Privacy questions and requests may be sent to support@42tools.com or mailed to Tool 33 LLC, 1007 N Orange St., 4th Floor, Suite 5908, Wilmington, Delaware 19801, New Castle County, United States.