Privacy Policy
Last updated:
Who we are
Toolswitch is operated by Frameskip Labs Limited, a company incorporated in Hong Kong. Contact: support@toolswitch.dev.
What we collect
- You can sign in with a Google account or with a one-time code or sign-in link sent to your email. With Google sign-in, we receive your email address, your name and your Google account ID from Google; we do not store your profile picture. With email sign-in, we receive your email address.
- We collect your interface language and the time and version of the Privacy Policy and Terms you accepted.
- Some features may be paid or use trial credits. When you use them, we keep records of the tool calls you make (which tool, time, cost). Trial credits are provided by us and do not involve Stripe. If you pay, the payment is processed by Stripe and we keep the payment records; we do not receive or store your full card number.
What we do not collect
Sign-in sessions do not store your IP address or device information. We do not use analytics or advertising trackers.
How we use your information
- To sign you in and keep you signed in, including sending sign-in codes and links to your email.
- To provide the tools you use and to bill paid features.
- To keep the service secure and prevent abuse.
- To respond when you contact us.
Security
Connections use HTTPS. One-time codes and sign-in links are stored only as hashes and expire after 10 minutes. To prevent abuse of email sign-in, we store SHA-256 hashes of the email address and of your IP address in Redis for at most 24 hours. Email addresses are masked in application logs. Server logs rotate automatically, with a few files of limited size per service.
Service providers
- Google provides sign-in if you choose to sign in with Google; Google tells us your email address and name.
- Alibaba Cloud provides hosting. Our servers are in the United States.
- Sign-in emails are delivered by Alibaba Cloud Direct Mail or Resend, depending on the recipient's email domain.
- treg (treg.to, United States) provides the tool catalog and forwards the tool calls you make, together with the inputs you submit, to the upstream tool providers.
- Stripe processes payments if you pay for a feature.
We do not sell your personal information.
International transfers
Your data is stored on servers in the United States and may be processed by the providers above in other countries.
How long we keep data
Account data is kept until you delete your account. Session records expire after 7 days. Before each deployment we take a database backup; we keep the five most recent backups, so deleted data may remain in a backup until it is rotated out.
Deleting your account
You can delete your account at any time from the Account page after signing in (Account → Delete account). This deletes your account, sessions and your linked Google sign-in. Where we must keep financial records, we keep them in anonymized form. You can also contact us at support@toolswitch.dev.
Your rights
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to and correction of your personal data.
If you are in the European Union: we process your data to perform our contract with you (providing the service) and on the basis of our legitimate interests (keeping the service secure and preventing abuse). You have the right to have your data deleted (you can delete your account yourself, see above) and to receive a copy of your data; you can request a copy by emailing us. You also have the right to lodge a complaint with your local data protection authority.
To exercise these rights, contact us at support@toolswitch.dev.
Children
The service is not directed at children under 16.
Changes to this policy
We may update this policy. The date above shows the latest version, and you accept the current version each time you sign in.
Contact
Questions: support@toolswitch.dev.