Privacy Policy

Information We Collect

At Tools ZSTechLabs, we are committed to protecting your privacy. Most of our tools process data entirely in your browser, meaning that data never reaches our servers at all.

When you create an account, subscribe to a paid plan, or otherwise interact with the site, we may collect:

• Account information — name, email address, and (if you sign up with a password) a securely hashed password
• Profile information you choose to add — bio, website, location
• Billing information, handled by our payment processor Paddle (see "Payments" below) — we do not receive or store your card details
• Usage data — which tools you use, file metadata (name, size, type) for tools that require server-side processing, and IP address for abuse prevention and rate limiting
• Communications you send us, such as support requests

Cookies & Analytics

We use Google Analytics, Microsoft Clarity, and Ahrefs Analytics to understand how the site is used, and these set cookies in your browser. A consent banner lets you accept or decline these before they load — declining doesn't affect how the tools work. Strictly necessary cookies (for example, keeping you signed in) are not affected by this choice.

Payments

Paid subscriptions are processed by Paddle.com Market Limited, our payment provider and Merchant of Record. Paddle handles your card details, receipts, applicable sales tax/VAT, and is the seller you're transacting with for billing purposes — we never see or store your full card number. Paddle's own privacy policy governs how they handle your payment data. We receive your subscription status and billing history (amounts, dates, plan) from Paddle to manage your account.

Email Delivery

Account emails (verification, password reset) are sent via SMTP or Resend, depending on configuration. We log delivery metadata (recipient hash, timestamp, status) for abuse prevention, but not the content of the email itself.

How We Use Your Information

• Provide and maintain our services, including authentication and tool processing
• Process payments and manage subscriptions through Paddle
• Communicate with you about your account or in response to support requests
• Improve our tools and user experience
• Detect and prevent abuse, and enforce rate limits

Data Security

Passwords are hashed with bcrypt, API keys are stored as SHA-256 hashes rather than in plaintext, and SMTP credentials are encrypted at rest. We implement rate limiting and server-side validation to guard against abuse of tools that make outbound network requests.

Your Rights

From your account settings, you can:

• Export your data — download a JSON copy of your profile, tool history, saved items, presets, files, and billing history
• Delete your account — permanently deletes your profile and associated data; identifying fields on retained analytics logs are scrubbed rather than tied to your deleted account
• Correct inaccurate profile data directly in your settings

Depending on your location, you may also have the right to object to certain processing or request data portability in a different format — contact us using the details below.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@zstechlabs.com.