Privacy Policy

1. The short version

The tools run inside your browser. The images, PDFs and text you open in them are processed on your own device and are never uploaded to us — there is no copy of your file on our servers to lose, sell or hand over. What we do hold is the small amount of information needed to run an account: who you are, which plan you are on, and which tools have been opened.

2. What we collect

Account details

Your name, email address and a hashed version of your password, plus the avatar and short bio you choose to add. Passwords are stored as one-way hashes, so nobody here can read yours.

Plan and billing records

Your current plan, the date it runs to, whether auto-renew is on, and a record of each payment: the plan bought, the amount, the billing cycle and the last four digits of the card, plus the payment provider's reference for an auto-renew mandate. Full card numbers, UPI PINs and bank details never reach our servers — they are handled by our payment provider, which also holds the mandate itself.

Usage records

Each time a tool is used we store the tool's name, your account (if you are signed in), your IP address and the time. This is what produces the usage counts shown on the tool cards, and it is how we spot abuse such as automated hammering of a single tool.

Session data

To keep you signed in, our database holds a session record containing a session identifier, your IP address, your browser's user-agent string and the time you were last active.

3. What we never collect

• The contents of any file you open in a tool — images, PDFs, documents, audio.
• The text you paste into the counters, converters, formatters or generators.
• The passwords, QR codes, hashes or other output the generators produce for you.

All of that stays in your browser's memory and is gone when you close the tab. The AI background remover is no exception: it downloads its model into your browser and runs it there.

4. Why we use it

• To create your account, sign you in and keep you signed in.
• To decide which tools your plan unlocks.
• To take payment, issue invoices and honour refunds.
• To show the usage counters and understand which tools deserve more work.
• To send account and billing notices — for example, that a plan is active or about to lapse.
• To protect the service against abuse, fraud and automated traffic.

5. Cookies, analytics and advertising

Besides the cookies that sign-in requires, we use Google Analytics to count visits and see which pages and tools are used. It sets its own cookies (_ga and _ga_*) and sends Google the page address, your browser and device details, an approximate location derived from your IP address and how you move between pages. Opting out on the Do Not Sell or Share page switches off Google signals and ad personalisation for your visits. It never sees the files or text you use in a tool.

The site shows no adverts, so no advertising cookie is ever set. The Cookie Policy lists each cookie in full.

6. Who else sees your data

We do not sell your data, and we do not share it for anyone else's marketing. It reaches only:

• Our payment provider — to take payment and issue refunds.
• Our hosting and email providers — because they run the servers and deliver our notices.
• Google Analytics — the visit statistics described in section 5.
• A public authority — only where the law actually requires it of us.

7. How long we keep it

• Account details: until you ask us to delete the account.
• Usage records: retained while the account is open, and used only in aggregate afterwards.
• Invoices and payment records: kept as long as tax and accounting law requires, even after an account closes.
• Session records: cleared when the session expires or you sign out.

8. Your rights

You can ask us for a copy of the data we hold on you, ask us to correct it, or ask us to delete your account and everything attached to it apart from the invoice records we are legally obliged to keep. Write to hello@hubtoolify.com from the address on the account and we will reply within 48 hours.

9. Security

Traffic is served over HTTPS, passwords are stored only as hashes, and access to the production database is restricted. No system is perfect, so if a breach ever affects your data we will tell you and the relevant authority without undue delay.

10. Children

The service is not directed at children under 13, and we do not knowingly create accounts for them. If you believe a child has registered, write to us and we will remove the account.

11. Changes to this policy

When this policy changes we update the effective date at the top of the page, and we notify account holders in-app if the change is a material one. Continuing to use the service after that means you accept the revised policy.

12. Contact

Joginder Singh, Ludhiana, Punjab. Email hello@hubtoolify.com.