Privacy Policy

1. What we collect

When you create an account, we collect:

• Your name and email address
• Your password (stored as a secure one-way hash — we cannot read it)
• Your IP address (used for security, session management, and approximate location analytics)
• Your browser/device type (user agent) for session records
• Any data you enter into tools (invoices, clients, billing info) — this is stored on our server so you can access it from any device
• Feedback messages you voluntarily submit

2. How we use it

• To provide and maintain the service
• To identify you when you log in
• To detect abuse, spam, or security threats
• To understand which countries our users are from (approximate, based on IP)
• To send you transactional emails (e.g. password reset)
• To notify us (the admin) when someone signs up or submits feedback

3. What we don't do

• We do not sell your data to anyone
• We do not show you advertisements
• We do not share your data with third parties except as required by law
• We do not track you across other websites
• We do not collect your age, gender, or demographic information

4. IP address & location

Your IP address is logged when you log in or use the service. We use a third-party service (ipapi.co) to convert IP addresses into approximate city/country information for our internal analytics dashboard. This lookup is done server-side and the result is only visible to the site administrator.

IP geolocation is approximate and may show your ISP's location rather than your physical location. VPN users will show the VPN server's location.

5. Cookies & sessions

We use a single session cookie (tk_session) to keep you logged in. This cookie:

• Is marked HttpOnly (JavaScript cannot read it)
• Is marked Secure (only sent over HTTPS)
• Expires after 30 days of inactivity
• Contains only a random token — no personal data

We do not use advertising cookies or third-party tracking cookies.

6. Data storage

All data is stored on servers hosted by Hostinger in their data centers. Your invoicing data (clients, invoices, billing history) is stored in our database and associated with your account. You can delete your account at any time from your dashboard, which permanently removes all your data.

7. Data retention

• Account data: kept until you delete your account
• Session records: kept for 30 days, then automatically expired
• Login attempt logs: cleared after 24 hours
• Feedback: kept indefinitely for quality improvement, with no personal data required

8. Your rights

You can:

• Access your data by logging into your dashboard
• Delete your account and all associated data from your dashboard settings
• Request a copy of your data by contacting us
• Request correction of inaccurate data

9. Children

ToolsMingo is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.

10. Changes to this policy

We may update this policy occasionally. We'll update the date at the top of this page. Continued use of the service after changes means you accept the updated policy.