Privacy Policy
1. Who is responsible
Toolfyt is a product operated by Rasas Digital, which is the data controller for the limited processing described below. Contact: privacy@toolfyt.app.
2. The data we never receive
To be concrete about the scope of this policy, the following never reaches us:
- the contents of any invoice, quotation or service agreement you compose;
- any text you paste into the prompt cleaner, JSON/CSV converter, or QR generator;
- the numbers you enter into the gateway calculator or engagement calculator;
- your client names, addresses, tax identifiers, bank details or payment links;
- any file you export.
These are processed entirely within your browser and are not transmitted, logged or retained by us. There is no upload endpoint in the Service.
3. What is stored on your device
The Service uses your browser's local storage for a small number of preferences and, if you use them, your own drafts. This data stays on your device; it is not synced to us and cannot be read by us.
| Key | Purpose | Retention |
|---|---|---|
| toolfyt.v1.theme | Your light/dark preference. | Until you clear site data. |
| toolfyt.v1.state | Your Pro entitlement flag, saved version history, and tool settings. | Until you clear site data. |
| toolfyt.v1.invoice.doc | The invoice document currently in the builder, so a refresh does not lose it. | Until you clear site data. |
| toolfyt.v1.gateway.cfg | Your gateway calculator inputs. | Until you clear site data. |
You can erase all of it at any time by clearing site data for this domain in your browser settings. Because we hold no copy, there is nothing for us to delete on your behalf.
4. Cookies
The Service sets no cookies of its own and runs no tracking pixels. Third-party resources loaded by the page (see section 6) may set their own cookies under their own policies.
5. Payments
Pro subscriptions are sold and processed by Paddle Software Ltd, acting as merchant of record. When you purchase, Paddle collects the information needed to complete the transaction — typically your name, email address, billing address, payment details and tax identifiers — and processes it under Paddle's own privacy policy.
We receive only a confirmation that a subscription is active, and the email address associated with it, so that we can provide support. We never see or store your card details. Card data is entered directly into Paddle's PCI-compliant checkout and does not pass through our pages.
Paddle may also process your data as an independent controller for fraud prevention and to meet its own legal obligations, including tax reporting.
6. Third-party resources the page loads
Loading a page involves fetching resources from other providers. Their receipt of your IP address and user agent is inherent to serving a web request; we do not share anything further with them, and none of them receive your tool content.
| Provider | Purpose | When |
|---|---|---|
| Google Fonts | Serves the Inter and JetBrains Mono typefaces. | On page load. |
| Cloudflare | Hosts and delivers the site. | On page load. |
| Paddle | Checkout, payment and tax compliance. | Only when you open the upgrade dialog or complete a purchase. |
| cdnjs (Cloudflare) | Optional PDF rendering library for the invoice preview pane. | Only when the invoice builder renders a preview. |
7. Analytics and advertising
We use no analytics service, no telemetry, no session recording and no advertising or retargeting technologies. We do not build behavioural profiles, and we do not sell or share personal data with anyone.
8. Legal bases (UK/EU GDPR)
Where the GDPR applies, we rely on: performance of a contract to provide the Service and support your subscription; legitimate interests in keeping the Service secure and functioning; and consent where you have given it, which you may withdraw at any time. Paddle relies on its own legal bases as merchant of record.
9. International transfers
We do not transfer your tool content anywhere. Where Paddle processes payment data internationally, it does so under its own safeguards, which are described in its privacy policy.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to lodge a complaint with your supervisory authority.
In practice, most of these rights are already satisfied by architecture: your tool data is on your device and we hold no copy, so clearing your browser's site data is the deletion. For the limited data we do hold — a support email address and subscription status — write to privacy@toolfyt.app and we will respond within 30 days. For payment data, contact Paddle directly.
11. Children
The Service is intended for business and professional use and is not directed at children. We do not knowingly collect personal data from anyone under 16.
12. Security
The site is served over TLS. Because there is no backend database, there is no store of user content to breach. If we ever became aware of a security incident affecting personal data we control, we would notify affected individuals and any relevant authority as required by law.
13. Changes to this policy
We will update the Last updated date above when this policy changes. Material changes will be drawn attention to on the site.