Privacy Policy

ToolXTool is operated by ToolXTool Ltd. For questions about this policy, contact us at support@toolxtool.com.

Account data: Your name, email address, organisation membership, role, and authentication status.

Workspace data: Assets, tools, locations, bookings, transfers, material stock, issues, maintenance records, and audit history that you or your team create within ToolXTool.

Uploaded files: Photos of assets and materials that you choose to upload. Photos are stored in your organisation's scoped storage area and are not shared with other organisations.

Device and camera access: The mobile app requests camera access for QR/barcode scanning and photo upload. This access is used solely to provide scanning and photo features and is not used for any other purpose.

Usage data: We may collect basic usage and error information to help us identify issues and improve the product during beta.

We use your data to provide ToolXTool's inventory, tool tracking, booking, transfer, scanning, material, and maintenance workflows.

We do not sell your data to third parties.

ToolXTool uses third-party infrastructure providers to operate the product, including services for hosting, database, authentication, file storage, and email. These providers process data on our behalf under their own security and privacy commitments.

We do not share your data with third parties for advertising or marketing purposes.

ToolXTool may use an error monitoring service to capture technical error reports, including device or browser type, app version, page or screen, and diagnostic details. This helps us identify and fix bugs. We do not intentionally capture passwords, authentication tokens, uploaded file contents, or other sensitive user data in error reports.

We retain your data for as long as your account is active. If you request deletion of your account, we will remove your personal data from active systems. Some records, such as audit logs and backup snapshots, may be retained for a limited period for security and operational reasons.

Organisation and workspace data may be retained until an organisation owner or administrator requests deletion. See Account Deletion for the process.

ToolXTool uses row-level security on all database tables, meaning your organisation's data is isolated from other organisations at the database layer. Data is transmitted over HTTPS. File storage is scoped per organisation.

No security measure is perfect. During beta, you should not upload data that is sensitive beyond what is appropriate for a pilot deployment.

You may request a copy of your data or request deletion of your account at any time by contacting us at support@toolxtool.com.

We may update this policy as the product evolves. We will update the effective date at the top of this page. Continued use of ToolXTool after a policy change constitutes acceptance of the updated policy.