Privacy
Short version: the tools run on your device and send nothing. We don't track you, set no cookies for anonymous use, and store no personal data unless you choose to leave it with feedback. India DPDP / GDPR / CCPA-aligned. See the controls behind these claims on Trust & privacy.
What we collect
- Using a tool: nothing. Client tools process your input in your browser and make no first- or third-party network calls. No account, no cookies, no analytics.
- Sending feedback (optional): the note you type, the tool it's about, and — only if you add it — your email/name, stored in a separate contacts table so we can reply. That's it.
- BYOK AI tools: when you paste your own provider key, your prompt + key transit our server only to reach that provider; they are never stored, logged, or cached here.
Your rights (DSR)
You can ask us to access, correct, or delete any feedback/contact you submitted, or get it in portable form. Request it through the request form or the security/contact channel in security.txt. We aim to respond within 30 days. There is nothing to delete for anonymous tool use — we never had it.
Retention & processors
Feedback + optional contacts are kept only as long as useful to act on them, then removed. Sub-processors (Vercel, Supabase, your chosen BYOK AI provider) are listed on Trust & privacy. The feedback database is migrating to ashr.work.
Compliance posture
GDPR / UK GDPR / CCPA / India DPDP-aligned; row-level security; encrypted in transit and at rest. No security certification is claimed — the roadmap is VAPT → ISO 27001 → SOC 2, and none is claimed before the report is in hand. A named grievance officer will be published here before public launch. Questions or a complaint: security.txt.