Privacy Policy

This policy explains how SaTekk LLC ("we," "our," or "us") collects, uses, and protects your personal data when you use tooldoor.app, and the rights you have over that data. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

1. Who we are

ToolDoor is operated by SaTekk LLC, a company incorporated in the State of Wyoming, United States (Wyoming, United States). For any privacy question or to exercise your rights, contact privacy@satekk.com.

2. What we collect and why

We collect only what a given feature needs. The table below lists each purpose, the data involved, and our legal basis under GDPR Article 6.

• Account & sign-in — your name, email, hashed password, and (if you use Google sign-in) your Google profile name, email, and picture. Used to create and secure your account. Legal basis: performance of our contract with you.
• Payments — if you subscribe, your billing details are collected and processed by Stripe. We store only your Stripe customer and subscription identifiers and plan status, never your card number. Legal basis: performance of a contract.
• Usage & security data — which tool you used, input/output sizes, timing, success/failure, and your IP address. Used to enforce fair-use limits, prevent abuse, and debug problems. Legal basis: our legitimate interest in keeping the service reliable and secure.
• Files you process — files you upload are held only in memory (or transient temporary storage) for the moment it takes to process them and are deleted immediately afterward. We do not retain, read, or share them.
• Support messages — if you email us or use the contact form, we receive your name, email, and message. Legal basis: our legitimate interest in answering you.
• Advertising & analytics cookies — only if you opt in. See our Cookie Policy. Legal basis: your consent, which you can withdraw at any time.

3. Cookies and consent

Strictly necessary cookies (your sign-in session, security, and a record of your cookie choices) are always active because the site cannot work without them. Advertising and analytics cookies are optional and are never set until you agree — for visitors in the EEA, UK, and Switzerland we enforce this with Google Consent Mode, so nothing non-essential runs without opt-in. You can change or withdraw your choice any time via the "Cookie settings" link in the footer. Full detail is in our Cookie Policy.

4. Who we share it with (processors)

We do not sell your personal data. We share it only with the service providers that operate ToolDoor on our behalf, each bound to protect it:

• Railway — application hosting and our database.
• Stripe — payment processing (privacy).
• Google — Google sign-in (OAuth) and, only with your consent, AdSense advertising and Google Analytics 4 measurement (privacy).
• Cloudflare — DNS and network security for parts of our infrastructure.
• Resend — delivery of support and account emails.

We may also disclose data where required by law.

5. International transfers

We are based in the United States and several of our processors are located there, so your data may be transferred outside the EEA/UK. Where that happens, transfers are protected by appropriate safeguards — such as the European Commission's Standard Contractual Clauses or a provider's certification under the EU-US Data Privacy Framework. You may contact us for more detail on the safeguards in place.

6. How long we keep it

We keep account data for as long as your account is active. Usage and security logs are kept for up to 90 days. If you delete your account, we remove your personal data within 30 days, except where we must retain limited records to meet a legal obligation (for example, tax records for payments). Uploaded files are never kept beyond the moment of processing.

7. Your rights

Under the GDPR and UK GDPR you have the right to:

• Access — get a copy of your data. Signed-in users can download it instantly from the dashboard.
• Rectify — correct inaccurate or incomplete data.
• Erase — delete your account and data, self-service from the dashboard.
• Port — receive your data in a machine-readable format (our export is JSON).
• Restrict or object — limit or object to processing based on legitimate interests.
• Withdraw consent — turn off optional cookies at any time, without affecting prior lawful use.

To exercise any right, use the dashboard tools or email privacy@satekk.com. You also have the right to lodge a complaint with your local data protection authority — in the EEA, your national supervisory authority; in the UK, the Information Commissioner's Office (ico.org.uk).

8. California residents

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to opt out of its sale. We do not sell personal information.

9. Children

ToolDoor is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

10. Security

We use industry-standard measures: encryption in transit, hashed passwords (bcrypt), revocable API keys, and access controls. No method is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a qualifying breach as the law requires.

11. Changes

We may update this policy and will change the "Last updated" date above. Material changes will be highlighted on this page.