Privacy Policy

This Privacy Policy explains what personal data Tools Hub 4U collects when you use our website or buy from us, why we collect it, how long we keep it and the choices you have. We keep data collection to the minimum needed to deliver and support your order.

1. Data we collect

• Identity and contact details: your name (if you give it), your Gmail/email address and, optionally, your WhatsApp or phone number.
• Order details: the tool and plan you bought, the price, your order code and delivery status.
• Payment proof: the payment screenshot you upload, the transaction ID, amount, date/time, sender name/account and the payment method used. We never receive your card numbers, PINs or wallet passwords.
• Payment confirmations we receive: SMS or email alerts sent to our own account by our bank or wallet provider, used to match your payment.
• Support messages: anything you send us through the contact form, email or WhatsApp.
• Technical data: IP address, approximate location derived from it, device type, browser, pages visited and timestamps, collected automatically for security and to run the website.

2. How we collect it

Directly from you when you fill in the checkout, upload a screenshot, use the contact form or message us; automatically through server logs and cookies when you browse; and from our own bank/wallet account when a payment arrives.

3. Why we use your data

• Processing your order and delivering access to the address you provide.
• Verifying payments by matching your screenshot and transaction ID with the money received in our account.
• Customer support, including replying to your messages and resolving delivery problems.
• Fraud prevention: detecting edited or reused screenshots, duplicate transaction IDs and abusive behaviour.
• Legal obligations, such as keeping basic transaction records.
• Improving the website through aggregated, non-identifying statistics.

We do not use your data for third-party advertising and we do not send marketing emails unless you ask for them.

4. AI-based screenshot verification

To verify payments quickly, the screenshot you upload is processed by an AI vision service that reads the transaction ID, amount, date and account names from the image. The extracted values are then checked by our system (and by our team when the result is unclear). The screenshot is sent to the AI provider only for this purpose, over an encrypted connection, and is not used by us to train AI models. The AI provider processes the image under its own terms and privacy policy. Please avoid including unrelated personal information in your screenshot; crop it to the payment confirmation.

5. Who we share data with

We share only what is necessary, and we never sell your personal data:

• AI / payment-verification providers: the payment screenshot, to read it (see section 4).
• Email service providers: your email address and order details, to send order confirmations, invitations and replies.
• Messaging providers (for example WhatsApp or Telegram): your contact details and order summary, so our team can be notified and reply to you.
• Tool providers: only the email address needed to invite you or activate your plan, and only for the tool you bought.
• Hosting and infrastructure providers that store and run our website and database.
• Authorities, where required by law or to investigate fraud.

6. Storage and security

Your data is stored in a protected database. Payment screenshots are stored privately and are never shown publicly. API keys and integration secrets are encrypted at rest. Access to the admin panel is limited to authorised staff with individual logins, optional two-factor authentication and an audit log of changes. Connections to our website use HTTPS. No online service is completely secure, but we work to protect your data with appropriate technical and organisational measures.

7. How long we keep data

• Order and payment records (including screenshots): up to 12 months after the plan ends, to handle support, replacements and disputes, then deleted or anonymised.
• Contact-form messages: up to 12 months after the conversation ends.
• Server logs: up to 90 days.
• Fraud records (for example banned transaction IDs or contacts): as long as needed to prevent repeat abuse.

8. Cookies

We use only essential cookies and similar storage: a session cookie for admin login, and small browser-storage items that remember your progress in checkout. We do not use advertising cookies. You can block cookies in your browser, but checkout and admin login may then not work.

9. Your rights

You can ask us at any time to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data (for example a mistyped email address, before delivery);
• delete your data, where we no longer need it for an active order, support or legal reasons;
• object to a particular use of your data.

Send your request through the Contact page from the email address used for your order so we can verify your identity. We respond within a reasonable time, normally within 14 days.

10. Children's privacy

Our services are intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Third-party links

Our website links to third-party tools and services. Their privacy practices are their own; please read their policies before using them.

12. Changes to this policy

We may update this policy as our services or the law change. The "Last updated" date shows the current version. Significant changes will be highlighted on this page.

13. Contact

For privacy questions or requests, use the Contact page or WhatsApp us from any page.