Privacy Policy
Learn how we collect, use, and protect your personal data in compliance with GDPR and Polish law.
Last updated: September 23, 2025
This Privacy Policy explains how toolfio.com ("we," "our," or "us") collects, uses, and protects your information when you use our website toolfio.com (the "Service").
1. Data Controller
Data Controller: toolfio.com
Website: toolfio.com
Email: hello@toolfio.com
Jurisdiction: European Union (Poland)
2. Information We Collect
2.1 Analytics Data
We use Simple Analytics to understand basic website usage. This service collects only anonymized, aggregated data including page views and general traffic patterns. No personal information, cookies, or user tracking is involved.
2.2 Contact Information
When you contact us via email (hello@toolfio.com) or submit your platform for consideration, we may collect your email address and any information you provide in your message. This information is used solely to respond to your inquiry or process your submission.
2.3 Auto-Submit Service Data
If you use our auto-submit service, we collect information necessary to submit your product to directories, including your product details, website URL, and contact information. This data is used solely to provide the service you requested.
2.4 Payment Information
Payment processing for our auto-submit service is handled by Stripe, Inc. We do not store your payment information on our servers. Stripe's privacy policy applies to payment data processing.
3. Legal Basis for Processing
We process your data based on the following legal grounds:
- Legitimate Interest: For analytics data to improve our website
- Contract: To provide auto-submit services you requested
- Consent: For marketing communications (with opt-out option)
- Legitimate Interest: To respond to your inquiries and process platform submissions
4. How We Use Your Information
We use the collected information to:
- Provide and maintain our directory service
- Process auto-submit service requests
- Review and evaluate platform submissions
- Respond to your inquiries and support requests
- Improve our website content and user experience
- Analyze website traffic and usage patterns
- Send marketing communications (with your consent)
- Ensure website security and prevent abuse
- Comply with legal obligations
5. Data Sharing and Third Parties
5.1 Third-Party Services
Simple Analytics: Privacy-first analytics service, GDPR compliant, data processed in the European Union, no personal data sharing.
Privacy Policy: https://simpleanalytics.com/privacy
5.2 Stripe Payment Processing
For auto-submit service payments, we use Stripe, Inc. as our payment processor:
- Stripe processes your payment information securely
- We do not store your payment details on our servers
- Stripe's privacy policy applies to payment data
- We only receive confirmation of successful payments
5.3 Directory Listings
When you use our auto-submit service, we may share your product information with third-party directories as part of the submission process. We only share information necessary for the submission and do not sell or rent your data.
6. Data Retention
We retain your data for the following periods:
- Analytics data: Retained by Simple Analytics for 26 months in anonymized form
- Contact information: Retained until you request deletion or for 2 years after last contact
- Auto-submit service data: Retained for 3 years for service delivery and support
- Platform submissions: Retained indefinitely for directory maintenance
7. Your Rights Under GDPR
As a data subject in the European Union, you have the following rights:
- Right of Access (Article 15): Request information about your personal data
- Right to Rectification (Article 16): Correct inaccurate personal data
- Right to Erasure (Article 17): Request deletion of your personal data
- Right to Restrict Processing (Article 18): Limit how we process your data
- Right to Data Portability (Article 20): Receive your data in a structured format
- Right to Object (Article 21): Object to processing based on legitimate interests
To exercise any of these rights, please contact us at hello@toolfio.com. We will respond within 30 days.
8. Cookies and Tracking
Our website does not use cookies for tracking or analytics. Simple Analytics operates without cookies. The only cookies that may be set are essential technical cookies required for website functionality.
9. International Data Transfers
Our website and analytics are hosted within the European Union to ensure GDPR compliance. We do not transfer personal data outside the EU/EEA without appropriate safeguards.
10. Data Security
We implement appropriate security measures including:
- HTTPS encryption for all data transmission
- Regular security updates and monitoring
- Limited access to personal data
- Secure hosting infrastructure
- Regular backups with encryption
11. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.
12. Supervisory Authority
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the supervisory authority:
Polish Data Protection Authority (UODO)
Urząd Ochrony Danych Osobowych
ul. Stawki 2, 00-193 Warsaw, Poland
Website: https://uodo.gov.pl
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
Changes are effective immediately upon posting. We encourage you to review this Privacy Policy periodically.
14. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: hello@toolfio.com
Website: toolfio.com
Subject Line: "Privacy Policy Inquiry"
We will respond to all privacy-related inquiries within 30 days as required by GDPR.
Privacy-First Commitment
At toolfio.com, we are committed to protecting your privacy. We use privacy-first analytics, do not track individual users, and only collect the minimum data necessary to provide our services. Your trust is important to us, and we strive to be transparent about our data practices.