Privacy Policy

1. Who we are

ToolZoneX (https://toolzonex.com) is run by Punit Bharadwaj, an individual based in Bengaluru, Karnataka, India. In this policy, “we” and “us” mean Punit Bharadwaj. We decide how the personal data described here is used, so we are its data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), and its controller under the EU and UK GDPR where those laws apply.

Contact for anything in this policy, including privacy requests and grievances: punit@toolzonex.com. Punit Bharadwaj handles these personally and also acts as grievance officer.

2. What we collect and why

When you contact us

The contact form asks for your email address and message (both required), and optionally your name and a subject. It adds the time you sent it. We use this only to read and reply to your message. The form sends it to a Google Apps Script we control. That script saves it in a Google Sheet in our Google account and emails a copy to our ToolZoneX mailbox, which is hosted on Microsoft 365. If you email us directly instead, we receive whatever your email contains, in the same mailbox.

The form may use Cloudflare Turnstile to block automated spam. Turnstile checks signals from your browser (including your IP address) to tell people from bots. It doesn’t use this to track you across sites.

When you use the tools

Calculators, converters, generators, text tools and most PDF and image tools run in your browser. Numbers you enter, text you paste and files you open are processed on your own device and are not sent to us. This includes health figures, salary and loan amounts, and any photos you use with the Face Shape Detector.

A few tools save data in your browser so it’s still there next time. It stays on your device and we can’t see it:

• Your light or dark theme choice.
• Text you type into the Online Notepad.
• AI Pomodoro sessions, settings and focus history.

AI Pomodoro can use your camera to measure focus, but only if you switch that feature on and allow camera access. The video is analysed in your browser. It is never recorded or sent anywhere.

Tools that use outside services

These tools contact another company’s server. That service receives your IP address and normal browser details, and anything else listed below. It handles that data under its own privacy policy.

Advertising

We show ads through Google AdSense. Google and its partners use cookies and similar identifiers to serve ads, limit how often you see them, measure them and detect fraud. Where allowed, they also personalise ads based on your visits to this and other websites. Google receives your IP address and browser details for this. See how Google uses information from sites that use its services and our Cookie Policy. You can turn off personalised ads at any time in Google My Ad Center.

Analytics

We use Cloudflare Web Analytics to count page views. It doesn’t use cookies and doesn’t track you across websites. It records things like the page, the referring site, browser type and country. We don’t use Google Analytics. If that changes, we’ll update this policy first and ask for consent where the law requires it.

Hosting and security

The site is served through Cloudflare. Like any web host, Cloudflare processes your IP address and request details (such as the page requested and your browser) to deliver pages and protect the site from attacks and abuse.

3. Our legal basis

India (DPDP Act): we process contact-form data with your consent. You give it by ticking the box on the form, and you can withdraw it at any time (see Your rights). Emails you send us directly are data you’ve given us voluntarily for a specific purpose: getting a reply.

EEA and UK (GDPR): we reply to your messages on the basis of your consent and our legitimate interest in answering questions about the site. Advertising cookies rely on your consent, collected through Google’s consent message. Security processing by our host relies on our legitimate interest in keeping the site safe.

4. How long we keep data

• Contact messages, and our replies, are deleted 12 months after our last exchange with you. They’re deleted sooner if you ask, or if you withdraw consent, unless the law requires us to keep them.
• Data saved in your browser stays until you clear it. You control this, not us.
• Google, Microsoft, Cloudflare and the services in the table above keep data under their own policies.

5. Who we share data with

We don’t sell your personal data, and we don’t share contact messages with anyone for marketing. Data reaches:

• Google, which stores contact-form messages for us in Google Sheets, and runs AdSense.
• Microsoft, which hosts our email (Microsoft 365).
• Cloudflare, our host and spam protection.
• The services named in Tools that use outside services, only when you use those tools.
• Authorities, if the law requires it, or to protect our rights or someone’s safety.

US state privacy laws: some US states treat advertising cookies as “sharing” personal information for targeted advertising. To opt out of personalised ads from Google, use Google My Ad Center. We don’t currently respond to “Do Not Track” or Global Privacy Control browser signals.

6. Where data is processed

We’re based in India, and our providers (Google, Microsoft, Cloudflare and the services listed above) run servers in many countries, including the United States. So your data may be processed outside your country. Where the GDPR applies, Google, Microsoft and Cloudflare use recognised transfer safeguards, such as the European Commission’s standard contractual clauses.

7. Your rights

Depending on where you live, you can ask us to:

• tell you what personal data we hold about you, how we use it, and who we’ve shared it with;
• correct, complete or update it;
• delete it;
• stop using it, or restrict how we use it (EEA/UK);
• give you a copy in a portable format (EEA/UK);
• withdraw your consent. This is as easy as giving it, and doesn’t affect what we did before;
• record a nominee who can exercise these rights if you die or become unable to (India).

Email punit@toolzonex.com with the subject “Privacy request”, from the address you used to contact us so we can find your messages. We’ll reply within 30 days. To change your advertising cookie choices, use the button in our Cookie Policy.

8. Complaints and grievances

If you’re unhappy with how we handle your data, email punit@toolzonex.com with the subject “Grievance” first. We’ll respond within 30 days.

If that doesn’t resolve it, you can complain to:

• the Data Protection Board of India, once you’ve used our grievance process (DPDP Act);
• your local data protection authority, if you’re in the EEA;
• the Information Commissioner’s Office (ico.org.uk), if you’re in the UK.

9. Children

ToolZoneX is a general-audience site. It isn’t aimed at children, and we don’t knowingly collect personal data from anyone under 18 without a parent’s or guardian’s consent. If you’re under 18, please ask a parent or guardian before using the contact form. If you think a child has sent us personal data, email us and we’ll delete it.

The Alphabet Learning Tool is designed for a parent or teacher to use with a child, and collects nothing.

10. Security

The whole site uses HTTPS. Contact messages are stored only in our own Google and Microsoft 365 accounts, and only Punit Bharadwaj can access them. No system is perfectly secure. If a breach affects your personal data, we’ll tell you and the relevant authorities as the law requires.

11. Changes to this policy

If we change how we handle personal data, we’ll update this page and the date at the top first. For significant changes, we’ll also post a notice on the site. If a change needs fresh consent, we’ll ask for it.

12. Contact

Punit Bharadwaj, Bengaluru, Karnataka, India. Email: punit@toolzonex.com. For other ways to reach us, see the contact page.