Skip to main content
My Toolyard
Back to MyToolyard
Regional compliance

GDPR Compliance

For visitors in the EU, EEA and UK

Last updated 28 July 2026

This page explains how MyToolyard handles personal data under the EU General Data Protection Regulation (GDPR) and equivalent UK law.

Data controller

The controller for personal data processed on MyToolyard is VectorScale AI. Contact: hello@VectorScaleAI.in.

What we collect

  • None by default for tool usage. Tools run in your browser; we do not log inputs or outputs.
  • Local storage (on your device, not sent to us): theme, selected AI provider/model, BYOK API keys, drafts, and consent state.
  • Account data (only if you sign in): email and any data you create in Dashboard, Launchpad or Wishlist.
  • Aggregate access logs for security and abuse prevention.

Lawful bases (Art. 6 GDPR)

  • Performance of a contract — for sign-in features you opt into.
  • Legitimate interest — to operate, secure and improve the site.
  • Consent — for non-essential cookies/storage (see the consent banner and cookie settings).
  • Legal obligation — where required by applicable law.

Your rights (Art. 15-22)

You have the right to:

  • Access, rectify, erase, restrict, port, and object to processing of your personal data.
  • Withdraw consent at any time (via the cookie settings dialog).
  • Not be subject to a decision based solely on automated processing that produces legal effects — we don't do this.
  • Lodge a complaint with your local supervisory authority.

To exercise any of these, email hello@VectorScaleAI.in. We respond within 30 days.

International transfers

When you sign in, account data is stored with our hosting provider. AI inference happens with the provider you've configured (e.g. OpenAI in the US) — we rely on Standard Contractual Clauses and provider commitments for those transfers. You are responsible for ensuring you have a valid basis to send your prompts to that provider.

Data retention

Local storage stays until you clear it. Account data persists until you delete it or request account deletion. Aggregate access logs are retained for up to 30 days.

Security

We apply appropriate technical and organisational measures (Art. 32): HTTPS everywhere, encryption at rest for account data, Row-Level Security on all database tables, and role-based access controls with least-privilege defaults.

Contact

Privacy contact: hello@VectorScaleAI.in.