Privacy Policy
Last updated: Nov 12, 2026
1. Who is responsible
The controller of your personal data is Natalia Aksenenko, IČO 22474650, Českobrodská 942, 198 00 Praha 9 - Hostavice, Czech Republic. For any privacy question write to toolformapp@gmail.com.
2. What we collect
When you sign in with Google we receive your name, email address and profile picture link. We store the projects you create: text, settings, versions and preview images. For orders we store the order id, amount, currency, status and the Paddle transaction reference. Our hosting provider also processes technical data such as your IP address in request logs for security and operation. Card details are collected by Paddle only; we never receive them.
3. Why we use it
We use this data to sign you in and keep your session, to store your projects and to generate and deliver your files (performance of the contract); to process orders, refunds and accounting records (contract and legal obligation); and to protect the Service against abuse and keep it running (legitimate interest). We do not sell your data, show ads or profile you.
4. Who else handles it
We use Cloudflare for hosting, database and file storage, Google for sign-in, and Paddle for payments, taxes and invoicing. Paddle acts as an independent controller of the payment data it collects, under its own privacy policy. Where the law requires, we may also share data with professional advisers and with authorities.
5. Cookies and local storage
We use only strictly necessary cookies: a session cookie that keeps you signed in and short-lived cookies used during Google sign-in. We do not use analytics or advertising cookies. An unsaved draft of your model is kept in your browser's local storage on your own device. Paddle's hosted checkout is a separate site and may set its own cookies under Paddle's policies.
6. How long we keep it
Account, project and order data are kept while your account exists; order records are kept as long as accounting law requires. Generated STL files are kept for 30 days. Sessions expire automatically. To have your account and data deleted write to toolformapp@gmail.com; we delete everything except records we must keep by law.
7. Security
Data is sent over HTTPS, session tokens are stored only as hashes and access to our systems is limited to what is needed to run the Service. No system is perfectly secure, so we cannot guarantee absolute security.
8. Transfers outside the EEA
Our providers may process data outside the EEA and the UK. Where they do, the transfer relies on safeguards such as an adequacy decision or the European Commission's standard contractual clauses.
9. Your rights
You can ask for access to, correction, deletion or restriction of your data and for a copy of it, and you can object to processing based on legitimate interest, by writing to toolformapp@gmail.com. You may also complain to your data protection authority; in the Czech Republic this is the Office for Personal Data Protection (ÚOOÚ, www.uoou.gov.cz). We reply to requests within one month.
10. Children
The Service is not intended for children under 16.
11. Changes
We may update this policy; the date at the top shows the latest version.