Privacy Policy

We collect information in the following ways:

Information you give us directly

• Account information: your name, email address, company name, and password (stored as a one-way hash).
• Tool and operational data: tools, job sites, crew members, QR code assignments, check-in/check-out history, and maintenance flags you enter into the Service.
• Photos: images you upload of tools or job sites for identification, condition, or maintenance purposes.
• Billing information: payment details are collected and processed directly by our payment processor (see Section 4) — we do not store full card numbers on our servers.
• Communications: messages you send to our support team.

Information we collect automatically

• Usage data: pages visited, features used, approximate timestamps, and error events.
• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Cookies: see Section 6.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate users and protect accounts.
• Process payments, send invoices, and manage subscriptions.
• Send transactional emails (account confirmations, password resets, billing receipts, important service notices).
• Send product updates and announcements when you have opted in.
• Respond to support requests and communicate with you about your account.
• Diagnose technical problems and improve the Service.
• Comply with legal obligations and enforce our Terms of Service.

Where required (for example, under GDPR for users in the European Economic Area or UK), we process personal information under one or more of the following bases: performance of a contract with you, your consent, our legitimate interests in running and improving the Service, and compliance with legal obligations.

We do not sell your personal information. We share it only as described below.

Service providers

We rely on a small number of trusted third parties to operate the Service. Each is contractually bound to handle data only on our instructions:

• Stripe — payment processing and subscription billing.
• Resend — transactional and product email delivery.
• Amazon Web Services (AWS) and Cloudflare — application hosting, database hosting, file storage, and content delivery.

Legal and safety

We may disclose information if required by law, subpoena, or court order; to protect the rights, property, or safety of ToolTally, our users, or others; or to investigate fraud or security incidents.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify affected users before any transfer takes place.

We retain account and operational data for as long as your account is active. If you delete your account, we delete or anonymize associated personal information within 30 days, except where we are legally required to retain it (for example, billing records for tax purposes, typically retained for seven years).

Backups are retained on a rolling basis and may contain deleted data for up to 60 days before being overwritten.

We use essential cookies to keep you signed in and to maintain your session. These cookies are required for the Service to function and cannot be disabled without breaking core functionality.

We do not currently use third-party advertising or cross-site tracking cookies. If we add analytics in the future, this policy will be updated and we will provide appropriate disclosures and controls.

You can, at any time:

• Access, update, or correct your account information from within the Service.
• Export your tool and operational data on request.
• Delete your account from your account settings, or by contacting us at privacy@tooltally.app.
• Unsubscribe from non-essential marketing email at any time via the unsubscribe link in those emails. Transactional and account emails cannot be unsubscribed while your account is active.

Depending on where you live, you may have additional rights under laws such as the GDPR or California Consumer Privacy Act (CCPA), including the right to object to processing, restrict processing, or lodge a complaint with a supervisory authority. We will honor these rights to the extent required by law.

We use industry-standard safeguards — encryption in transit (HTTPS), encryption at rest for stored data, hashed passwords, access controls, and audit logging — to protect your information. No system is perfectly secure, however; if you believe your account has been compromised, contact us immediately.

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

ToolTally is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States.

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or through the Service before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

If you have questions about this Privacy Policy or your information, contact us at:

Gerald James LLC dba ToolTally
privacy@tooltally.app