Your data stays yours.

Who we are

Toolcrow (“Toolcrow”, “we”, “us”) is a service that lets you turn small tools you build with AI into working, shareable links, private by default. This policy covers the Toolcrow website and app at www.toolcrow.app and the tools (“drops”) you host with it. If you have any questions, email hello@toolcrow.app.

What we collect

• Account information. When you sign up we store your email address and an automatically assigned username. If you sign in with Google, we receive your email address and basic profile information from Google to create and secure your account.
• Content you create. The code and files of the tools you deploy (your HTML, CSS and JavaScript), their titles, descriptions, tags and settings.
• Data your tools save. Data a tool saves for one visitor stays in that visitor’s own browser and never reaches our servers. Only when a tool explicitly saves shared data (data every user of that tool should see) do we store it: in the Google Sheet you connected, or otherwise in Toolcrow’s built-in database, scoped to that tool and hosted in the EU. We only store your tool’s data output if you build it that way, and you can ask us to delete it at any time.
• Usage data. Aggregated product analytics (for example which pages are visited) so we can improve the product. Our default analytics are privacy-friendly and cookieless; we additionally use Google Analytics, which only sets cookies once you agree in our cookie banner. You can decline, and you can change your choice at any time. We do not run advertising trackers, we do not record session replays, and analytics do not run on the pages where your published tools are served.
• Communications. Messages you send us, feedback you submit, and invitation emails you ask us to send on your behalf.

How we use your data

We use your data only to run and improve Toolcrow: to create and secure your account, to host and serve the tools you publish, to send the emails you ask us to send, to power optional AI features you trigger, and to understand product usage in aggregate. We do not sell your personal information, and we do not use it for advertising.

How we handle Google Workspace and Drive data

Connecting Google Drive is entirely optional. You only grant access if you choose to connect a tool to your own Google Drive so that submissions from that tool can be written into a spreadsheet you control. When you do, the following applies:

• The scope we request. We request only the drive.file scope. This is the narrowest Google Drive scope: it grants access only to the specific files you create or explicitly open with Toolcrow. We cannot see, list or read any of your other Google Drive files.
• What we do with it. We use this access for a single purpose: to append the submissions collected by your tool as new rows into the Google Sheet you created or picked through Toolcrow. Nothing else.
• How we store it. The access and refresh tokens that let us do this are encrypted at rest and stored per tool, isolated from your published content. You can disconnect at any time from the tool’s settings, and you can revoke Toolcrow’s access from your Google Account permissions page.
• How we delete it. Disconnecting the connector immediately deletes the stored Google tokens for that tool. If you delete a connected tool, or ask us to delete your account, the associated Google tokens are removed as well. You can request deletion of any Google data we hold at any time by emailing hello@toolcrow.app. Rows already written into your own spreadsheet live in your Google Drive and remain under your control; you can edit or delete them there yourself.

Limited Use. Toolcrow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not use it to train generalized AI or machine-learning models. We only use it to provide and improve the connector feature you turned on.

Where your data is stored

Your account and content are stored in our database and file storage, hosted on Supabase in the European Union (eu-west-1). The application is served through Vercel. We rely on a small number of trusted service providers who process data only on our behalf and under their own security and privacy commitments:

• Supabase — database, authentication and file storage.
• Vercel — application hosting and delivery.
• Resend — sending the invitation emails you request.
• PostHog (EU) — privacy-friendly, aggregated product analytics.
• Google — sign-in, website analytics (Google Analytics), and, if you connect it, the Drive integration described above.
• An AI provider — only when you trigger an AI feature, the necessary input is sent to our AI provider to generate a response.

How we protect it

All traffic uses HTTPS. Sensitive secrets, including the Google Drive tokens above, are encrypted at rest. Access to your account and content is protected by row-level security so that people can only reach what they are allowed to. There is a fuller, plain-language walkthrough of our safeguards on our security page.

Data retention and deletion

We keep your account and content for as long as your account is active. You can delete any tool you have made, and you can ask us to delete your account and associated data by emailing hello@toolcrow.app. Disconnecting Google Drive removes the stored tokens for that tool.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to certain processing. To exercise any of these, contact us at hello@toolcrow.app and we will respond.

Children

Toolcrow is not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we will update the date at the top of this page. Continued use of Toolcrow after a change means you accept the updated policy.

Contact

Questions about privacy or this policy? Email hello@toolcrow.app and we will get back to you.