Privacy Policy

Effective Date: 19 May 2026
Last Updated: 19 May 2026

ToolsPivot.com ("ToolsPivot", "we", "us", "our") respects your privacy. This Privacy Policy explains, in plain language, what data we collect, why we collect it, who we share it with, and what control you have over it.

By using ToolsPivot.com you agree to the practices described here. If you do not agree, please don't use the Service.

1. What We Collect

A. Information You Give Us Directly

• Tool inputs — text, URLs, files, images, keywords you paste into our tools to produce a result.
• Account info — if you create an account: email address, username, password (always stored as a salted bcrypt hash, never in plain text), and optional profile fields (avatar, bio, social links).
• Newsletter email — if you subscribe to our newsletter, your email address.
• Contact messages — anything you send us via the Contact form.
• Comments — content you post on our blog (via the comment system).
• Payment details — if you buy a premium plan, payment processing is handled by our payment provider; we do not store your full card number.

B. Information We Collect Automatically

• Log data — IP address, browser type, device type, operating system, referring URL, the pages you visit, time spent, search terms you enter on our site, and tool usage events.
• Cookies and similar technologies — small files stored in your browser. See section 5 below for a full list.
• Security events — failed login attempts, IPs that hit rate limits, and CSRF/security check failures (used only to block abuse).
• Admin audit logs — if you are an admin/editor/author user, every action you take in the admin panel is logged (who, what, when) for accountability.

2. How AI Tools Handle Your Data

Some of our tools use Artificial Intelligence. The data flow differs by tool:

If a tool sends data to an external provider, we use HTTPS and the data is processed under that provider's policy (links in section 6).

3. Why We Collect It

• To deliver the tools — process your input and return a result.
• To improve our Service — analyze which tools and pages are most used, fix bugs, plan new features.
• To prevent abuse — rate limiting, brute-force protection, blocking bots and DDoS.
• To personalize — remember your language, theme, and tool preferences.
• To communicate — respond to support requests and (if you opted in) send newsletters.
• For billing — if you have a premium plan.
• To comply with law — respond to lawful requests and protect our rights.

4. Who We Share It With

We do not sell your personal data. We share it only with:

A. Service providers we use to run ToolsPivot

• Cloudflare — CDN, DDoS protection, edge caching. Cloudflare may see your IP and request metadata. (privacy policy)
• Our hosting provider — runs our servers.
• Google AdSense — serves the ads you see on tool pages. AdSense uses cookies to personalize ads. (privacy policy)
• Google Analytics / Google Tag Manager — anonymized usage statistics. (privacy policy)
• Google Custom Search API — powers the Plagiarism Checker.
• OpenAI / OpenRouter — process AI tool inputs (only for the AI tools listed in section 2). (OpenAI, OpenRouter)
• Payment processor — handles billing for premium plans.
• Email delivery service (SMTP provider) — sends transactional emails and newsletters.
• OAuth providers — if you sign in with Google, Facebook, or Twitter, those providers verify your identity and share your basic profile (name, email, profile picture).

B. Legal requirements

We may disclose information if required by valid legal process (subpoena, court order) or to protect our legal rights, safety, or property.

C. Business transfers

If ToolsPivot is sold, merged, or acquired, your data will transfer to the new owner under this same policy.

5. Cookies — Full List

A cookie is a small text file your browser stores. Here are the cookies we actually set:

Your control: The cookie banner at the bottom of every page lets you accept or reject non-essential cookies. If you decline, we still set the essential ones because the site cannot function without them. You can also clear cookies any time in your browser settings.

6. Data Retention

• Tool inputs/outputs — not stored after the result is returned (with the exceptions noted in section 2).
• Account data — kept while your account is active. Deleted within 30 days of account deletion request.
• Newsletter subscribers — kept until you unsubscribe (every newsletter contains an unsubscribe link).
• Logs (IP, request data) — typically 30-90 days, then deleted or anonymized.
• Failed login attempts — auto-pruned after 30 days.
• Admin activity log — retained for 1 year for audit purposes.
• Billing records — kept as long as legally required (typically 7 years for tax/accounting).

7. How We Protect Your Data

• Encryption in transit — every page on toolspivot.com is served over HTTPS (TLS).
• Password hashing — passwords stored using bcrypt with per-user salt; legacy MD5 hashes are silently re-hashed to bcrypt on next successful login.
• Brute-force protection — 5 failed admin logins within 10 minutes triggers a 30-minute IP lockout.
• CSRF protection — every admin form and JSON endpoint requires a per-session anti-forgery token.
• File upload sanitization — SVGs are stripped of <script>, inline event handlers, and javascript: URLs before being saved.
• Activity audit — every admin action is logged with user, IP, and timestamp.
• Access controls — role-based permissions (Administrator / Editor / Author) limit what each admin can do.

No system is 100% secure. If we ever experience a breach affecting your personal data, we will notify affected users and applicable authorities as required by law.

8. Your Rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix data that's inaccurate.
• Deletion ("right to be forgotten") — ask us to delete your account and associated data.
• Portability — request your data in a machine-readable format.
• Restrict / object — limit or object to certain types of processing.
• Withdraw consent — opt out of marketing and re-decide on cookies any time.
• Lodge a complaint — with your local data protection authority (EU/UK residents).

These rights apply under regulations including the EU's GDPR, the UK GDPR/DPA 2018, California's CCPA/CPRA, India's DPDP Act 2023, and similar laws in other jurisdictions.

To exercise any right, email marketing@toolspivot.com from the address associated with your account. We respond within 30 days.

9. International Data Transfers

ToolsPivot operates from India. By using the Service, you understand that your data may be transferred to and stored on servers in India, the United States (where many of our service providers operate), and other countries. We rely on standard contractual clauses and the providers' own compliance frameworks where applicable.

10. Children

ToolsPivot is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please email us so we can delete it.

11. Third-Party Links

Our site links to external websites (tools we recommend, related resources, articles). We are not responsible for the privacy practices of those sites. Read their privacy policies before sharing information with them.

12. Do Not Track

Some browsers send a "Do Not Track" signal. We honor your choice in our cookie banner (the "Reject" button disables analytics and advertising cookies). We do not currently respond to browser-level DNT signals because there is no industry-standard interpretation.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent change. Significant changes will be highlighted on the site for at least 14 days. Continued use of the Service after a change means you accept the updated policy.

14. Contact Us

Questions, requests, or complaints?

Email: marketing@toolspivot.com
Postal: Ward No. 1, Nehuta, P.O. Kusha, P.S. Dobhi, Gaya, Bihar, 824220, India

This Privacy Policy is written in plain language to be easy to understand. If anything is unclear, please reach out — we'll explain it.