Privacy Policy

1. Scope and operator

This Policy explains how Toolsbywork processes information when you browse the site, submit a SaaS product through Add My Tool, or purchase a placement. Toolsbywork does not offer user accounts. The service operator can be contacted by direct message at @novembernine_ on X.

2. Information we process

• Submission data: tool name, submitted and final website address, selected job category, maker-reported price, optional icon, and optional companion tools.
• Website inspection and derived data: public page title, description, limited page text, redirect destination, safety decision, site summary, AI-generated job-category matches, and placement composition.
• Payment and contact data: for paid placements, Polar may provide the payer email, order and Checkout identifiers, amount, currency, and payment status. Toolsbywork does not receive or store full payment-card details.
• Security and technical data: request headers and a keyed or one-way digest derived from an IP address for short-lived abuse prevention. Raw IP addresses are not stored in the Toolsbywork submission database, although infrastructure providers may process network logs under their own retention rules.
• Consent records: the Terms version accepted, acceptance time, and the request to begin paid analysis immediately after payment confirmation.

3. Why we use this information

We use the information to:

• inspect, moderate, classify, publish, and expire submitted tool placements;
• match paid tools to relevant job categories and prepare their public placement;
• create Checkout, confirm payment, prevent duplicate processing, and keep transaction records;
• enforce one-time free-placement eligibility and block unsafe or abusive submissions;
• secure, debug, maintain, and defend the service; and
• respond to access, correction, deletion, and other privacy requests.

Depending on the law that applies, these activities rely on steps requested before a contract, performance of a contract, legitimate interests in operating and protecting the service, legal obligations, or consent where consent is required.

4. Public information

Add My Tool is a public-placement service. If a submission passes review, its tool name, final website link, icon, maker-reported price, selected category, AI-matched categories, and placement copy may be visible to anyone and indexed or copied by third parties. Do not submit confidential information, personal profiles, passwords, API keys, private documents, or data that you are not authorized to publish.

5. Automated processing and AI

Toolsbywork uses automated website inspection and AI-assisted moderation, categorization, and placement preparation. Submitted fields, public website excerpts, and an optional icon may be sent to the configured AI processor. A result may be rejected or held from publication when the safety decision is uncertain. AI placement is editorial automation; it does not make decisions about employment, credit, housing, insurance, or another similarly significant personal matter.

6. Service providers and international processing

We use providers only as needed to operate the service:

• Supabase: database and icon storage. The current project is hosted in Canada Central.
• Vercel: web hosting, server functions, network delivery, and, when configured, AI Gateway.
• Google: Gemini processing when the direct Google AI route is configured.
• Polar: hosted Checkout, payment processing, order records, and receipts.
• X: the contact channel you choose when opening a direct message.

These providers may process information in countries outside your own. Their contractual terms and legally recognized transfer mechanisms apply to their processing. Toolsbywork does not sell personal information or share it for cross-context behavioral advertising.

7. Retention

• Public placement ends at the expiration time associated with the purchased or free plan.
• Rate-limit IP digests expire after 24 hours; one-time challenge digests expire within 15 minutes and are removed during subsequent security maintenance.
• Submission identity, moderation, and safety records may be retained after public placement ends to enforce one-free-placement eligibility, prevent abuse, resolve disputes, and document why a site was accepted or rejected.
• Payment, consent, and webhook records are retained for the period reasonably necessary for accounting, tax, fraud prevention, chargebacks, dispute resolution, and applicable law.
• We delete or de-identify information when it is no longer needed for those purposes, or after a verified deletion request unless a lawful retention reason applies.

8. Your choices and rights

Depending on your location, you may have rights to know or access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent where consent is the basis, and complain to a privacy authority. Toolsbywork does not discriminate for exercising an applicable privacy right. See the Data Rights page for the no-login request process.

9. Security

We use server-side validation, restricted database access, row-level security, signed payment webhooks, limited uploads, abuse controls, and pre-publication inspection. No Internet service can guarantee absolute security. Please do not send sensitive data in an X direct message.

10. Children

The service is for people who can lawfully submit business information and enter the relevant transaction. It is not directed to children, and we do not knowingly request information from children.

11. Changes and contact

We may update this Policy when the service or law changes. The version date above identifies the current notice. For privacy questions, send a direct message to @novembernine_ on X.