Privacy Policy

• All tool computations run client-side, in your browser.
• We don't run analytics trackers, fingerprinters, or third-party advertising pixels by default.
• AI features use a Bring-Your-Own-Key (BYOK) model. Your API keys live only in your browser's localStorage.
• AI requests go directly from your browser to the provider you chose — we never see them.
• Granular consent controls let you toggle analytics, ads, affiliate links, and AI-key persistence individually.

The data controller for MyToolyard is VectorScale AI. For any privacy-related enquiry or to exercise your rights, email hello@VectorScaleAI.in.

If you use MyToolyard on behalf of an organisation, that organisation is a joint controller for the data it directs into the Service.

We aim to collect as little as possible. Concretely:

Things we never collect

• Tool inputs (text, files, calculations) — they never leave your browser unless you explicitly use an AI tool that sends them to your chosen provider.
• Your AI API keys, prompts, or AI responses.
• Third-party advertising or cross-site tracking identifiers.
• Biometric data, precise location, or device fingerprints.

Things we may collect

• Account data (only if you sign in): email, display name, and any preferences you save.
• Content you publish on the public Blog or Wishlist.
• Aggregate, non-identifying request logs from our hosting provider for security and abuse prevention (source IP, path, status code, user-agent).
• Support correspondence if you email us.

• Contract — creating and running your optional account, saving your drafts and preferences.
• Legitimate interest — operating a secure Service, preventing abuse, and improving tool quality with aggregate data.
• Consent — analytics, advertising, affiliate identifiers, and persistent AI-key storage (managed via the cookie settings).
• Legal obligation — responding to lawful requests and complying with statutory obligations.

For convenience, we use the browser's localStorage for:

• Theme preference (light / dark).
• Selected AI provider and model.
• BYOK API keys, namespaced as mty_key_* (only if the AI persistence category is enabled).
• Tool drafts, view-mode preferences, and recently-used items.
• GDPR / cookie consent state (mty_consent_v2).

You can clear everything at any time from your browser's site-data settings, or reset your consent from the Cookie settings dialog in the footer.

MyToolyard does not run a hosted AI inference service for you. When you use an AI tool:

1. You paste a provider key into the in-app Settings.
2. The key is saved to localStorage on your device.
3. Your browser sends the request directly to the provider's API.
4. We never proxy, store, or observe the key, the prompt, or the response.

If you uninstall the site, change browser, or clear storage, the keys disappear with it.

Features like Dashboard, Launchpad, Favorites and Wishlist require sign-in. We store only what you explicitly create:

• Bookmarks and launch groups.
• Favorited tools.
• Wishlist entries and votes.
• Drafts you save server-side.

You may delete your account at any time from the dashboard; we erase your row-level data within 30 days.

• Local storage — until you clear browser data or reset consent.
• Account data — for the lifetime of the account, plus 30 days after deletion for backup expiry.
• Support emails — up to 24 months for troubleshooting and audit trail.
• Aggregate access logs — up to 30 days for security and abuse prevention.
• Legal or regulatory records — as long as required by applicable law.

We rely on a small number of vendors to run the site:

• Hosting & database — used to serve pages and persist account-only data (data stored in the region configured by the platform).
• AI providers (your choice) — OpenAI, Anthropic, Google, Groq, OpenRouter. Their terms apply to the data you send them.
• Email delivery — for transactional messages (sign-in, password reset).
• Google AdSense — only if you opt in to advertising cookies.

We never sell personal data and we don't share it for advertising purposes.

Where personal data is transferred outside the EEA / UK, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses (SCCs) plus supplementary measures such as encryption in transit and at rest. When you use AI tools, your prompts go directly to your chosen provider and are subject to that provider's data-transfer terms.

• HTTPS/TLS 1.2+ for every request, HSTS enabled.
• Encryption at rest for account data (managed by our hosting provider).
• Row-Level Security (RLS) on every database table.
• Principle of least privilege for admin roles, stored in a separate table with a security-definer check.
• No secrets in source; publishable keys only in the browser bundle.
• Regular dependency scanning and CI checks.

If a personal-data breach is likely to result in a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware, as required by GDPR Art. 33-34.

MyToolyard does not use your personal data for automated decisions with legal or similarly significant effects. AI tool output is generated by third-party providers under your control and is informational only — it is not applied to you as a decision by us.

MyToolyard is a general-audience site and is not directed at children under 13 (or the equivalent age in your jurisdiction). We do not knowingly collect personal data from children.

Depending on where you live, you may have the right to:

• Access, correct, or export the personal data we hold about you.
• Request deletion ("right to be forgotten").
• Object to or restrict processing.
• Withdraw consent at any time.
• Opt out of the "sale" or "sharing" of personal information (California) — MyToolyard does not sell or share personal information for cross-context behavioural advertising.
• Lodge a complaint with your local supervisory authority (e.g. your national DPA in the EEA, the ICO in the UK).

To exercise any of these, email us at hello@VectorScaleAI.in. We respond within 30 days.

Questions, requests, or concerns? Reach the privacy team at hello@VectorScaleAI.in. We aim to respond within 5 business days.