Privacy Policy

1. Data We Collect

We collect different types of data depending on how you use the platform:

2. Use of Phone Number

Your phone number is used to:

• verify your account
• send login codes (OTP)
• send important service-related notifications (e.g. critical updates)

We do not use your phone number for marketing without your explicit consent. We do not sell your personal data.

3. Messaging and Communication

Messages sent through the platform are stored until you delete them individually or until you delete your account. We process messages to:

When you edit a message, only the latest version is kept and the recipient is shown an "edited" indicator. When you delete a message you sent, your own view hides it and the recipient sees a "This message was deleted" placeholder. The original record may still remain stored temporarily in our systems for security, moderation, and legal purposes.

4. Third-Party Services

We use trusted third-party providers to operate the platform:

• Supabase – database, authentication, and storage (data is encrypted)
• Twilio – SMS verification (OTP login codes)
• Google Places API – location autocomplete
• Google Translate API – content translation (text may be processed by Google)
• Formspree – contact form handling

These providers process data in accordance with GDPR and applicable data protection standards.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data storage and transmission (HTTPS/TLS)
• Secure authentication using OTP
• Access restricted to authorized personnel only
• Use of secure tokens for session management

6. Sharing of Data

• Profile information (name, photos, videos, services, location) is visible to other users
• Phone numbers are only visible if you choose to share them
• Verified platform administrators may proactively contact you for support, moderation, or operational purposes. Such messages are clearly marked with a "Tool Admin" badge in conversations so you can trust they come from an official platform account
• Data may be shared with authorities if legally required
• Aggregated, anonymized data may be used for analytics

7. User Rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and personal data
• Object to certain types of processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact: info@tool-connect.com

8. Data Retention

• Account data is stored while your account is active
• Upon account deletion, personal data is removed immediately
• Messages are stored until you delete them individually or delete your account; after deletion they may remain temporarily in our systems for security and moderation purposes
• Support requests may be stored for up to 2 years
• Some anonymized data may be retained for analytics and service improvement

9. Cookies and Local Storage

• We use local storage to maintain login sessions and preferences
• We use analytics tools (Google Analytics) only with your consent
• We do not use advertising tracking cookies

For full details on our cookie usage, please see our Cookie Policy.

10. International Data Transfers

Some of our service providers (e.g. Supabase, Google, Twilio) may process data outside the European Economic Area (EEA). These providers comply with GDPR-approved safeguards such as Standard Contractual Clauses.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Users will be notified of significant changes via the app or email. Continued use of the platform means acceptance of the updated policy.

For any questions regarding this Privacy Policy: info@tool-connect.com