iLoveToolkit

Privacy Policy

Last updated: August 1, 2026

At iLoveToolkit, your privacy is not an afterthought — it's built into how we design every feature. This policy explains what data we collect, why we collect it, and how we protect it. We've written it in plain language so you don't need a lawyer to understand it.

No adsNo data sellingFiles auto-deletedGDPR compliant

1. Information we collect

We collect only what's necessary to provide the service.

Account information. When you create an account, we collect your name and email address. If you sign in via Google or Facebook, we receive your name, email, and profile photo from that provider.

Usage data. We collect anonymised information about how you use the tools — which tools are accessed, file types processed (not the file contents), and general usage patterns. This helps us improve the product.

Files you upload. Files you upload are processed in memory and are not stored on our servers beyond the session window (2 hours for free accounts, 24 hours for Pro). We do not read, analyse, or share your file contents.

Payment information. Payments are handled by Stripe. We never see or store your full card number. We store only the last four digits and card brand for your reference.

2. How we use your information

We use your information to:

  • Provide, maintain, and improve the iLoveToolkit service
  • Send transactional emails (account confirmation, password reset, file-ready notifications)
  • Send product update emails if you opt in — you can unsubscribe at any time
  • Detect and prevent abuse, fraud, or misuse
  • Respond to support requests
  • Comply with legal obligations

    • We do not sell your personal data to third parties. We do not use your data for advertising profiling.

    3. File privacy & processing

    Your files are private. When you upload a file:

  • It is transferred over an encrypted HTTPS connection
  • It is processed in an isolated environment and never shared with other users
  • It is automatically deleted after your session window ends (2 hours free / 24 hours Pro)
  • Our staff cannot access your file contents

    • If you use a cloud storage integration (Google Drive, Dropbox), we request only the minimum permissions needed to read and write the specific file you select. We do not scan your entire Drive or Dropbox.

    4. Cookies & tracking

    We use a minimal set of cookies:

    Essential cookies are required for the service to function (session management, CSRF protection). These cannot be disabled.

    Analytics cookies (optional) help us understand aggregate usage patterns using privacy-friendly analytics. No personal data leaves our systems. You can disable these in your browser or by declining the cookie banner.

    We do not use third-party advertising cookies or cross-site tracking.

    5. Sharing with third parties

    We share data only with trusted service providers who help us operate the product:

  • Stripe — payment processing
  • Postmark — transactional email delivery
  • Cloudflare — DDoS protection and CDN

    • Each provider is contractually obligated to protect your data and use it only for the purpose we specify. We do not share data with data brokers or ad networks.

    6. Your rights

    Depending on where you live, you may have the following rights:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate data
  • Deletion — request deletion of your account and associated data
  • Portability — export your data in a machine-readable format
  • Objection — object to certain types of processing

    • To exercise any of these rights, visit your account settings or email us at privacy@ilovetoolkit.com. We will respond within 30 days.

    7. Data retention

    We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain it (e.g., billing records for 7 years under tax law).

    Uploaded files are deleted automatically after your session window. Deleted files cannot be recovered.

    8. Security

    We take security seriously. Our measures include:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Regular third-party security audits
  • Strict access controls — only essential personnel can access production systems
  • Automated anomaly detection and alerting

    • No system is 100% secure. If you discover a vulnerability, please report it to security@ilovetoolkit.com.

    9. Children's privacy

    iLoveToolkit is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

    10. Changes to this policy

    We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or via an in-app banner. Continued use of the service after changes constitutes acceptance of the updated policy.

    11. Contact us

    For privacy-related questions, contact us at:

    iLoveToolkit Privacy Team

    privacy@ilovetoolkit.com

    Or write to us via the contact form on our website.

    Questions? Contact us or read our Terms of Service.