Privacy Policy

Toolhub is operated by David Schlüter, Berwickstraße 13, 76661 Philippsburg, Germany ("we", "us"). You can reach us at d.schlueter1011@gmail.com.

We collect the following personal data when you use Toolhub:

• Account data — your name and email address, collected when you create an account via Clerk. We store your Clerk user ID in our database to link your account.
• Profile & invoice data — optional freelancer profile details you enter (name, company name, street address, ZIP/city, tax ID, payment terms, invoice numbering settings).
• Usage data — tools, catalogs, tool types, and customer selections you create inside the app.
• Customer / client data — personal data about your clients that you enter (name, email, street address, ZIP/city, tax ID). See section 3.
• Billing data — Stripe customer ID, subscription ID, price ID, subscription status, and billing period. We do not store full card details; these are held by Stripe.
• Analytics data — pseudonymous page-view and usage metrics via Vercel Web Analytics (no cookies; see section 8).
• Historical waitlist data — email addresses collected during our pre-launch waitlist. The waitlist is closed; remaining addresses are kept only until deleted on request or purged, and are not used for marketing.

When you store information about your clients in Toolhub, you act as the data controller for that client data. We act as your processor and process it only to provide the Service.

You are responsible for having a valid legal basis to collect and upload your clients' personal data (e.g. contract with the client) and for informing them as required by applicable data protection law. Do not enter client data you are not entitled to process.

• To provide and operate the Toolhub service (Art. 6(1)(b) GDPR — contractual necessity)
• To manage your subscription and process payments (Art. 6(1)(b) GDPR)
• To process client data you enter, on your instructions as controller (Art. 6(1)(b) / Art. 28 GDPR)
• To understand how the website and app are used and improve the service (Art. 6(1)(f) GDPR — legitimate interest)
• To comply with legal obligations, e.g. tax and commercial record-keeping (Art. 6(1)(c) GDPR)

We use the following third-party processors:

• Clerk — authentication — your account data is stored and managed by Clerk, Inc. clerk.com/privacy
• Stripe — payments — billing data is processed by Stripe, Inc. / Stripe Payments Europe, Ltd. stripe.com/privacy
• Vercel — hosting — our application runs on Vercel infrastructure in the EU (Frankfurt). vercel.com/legal/privacy-policy
• Vercel Web Analytics — cookieless, privacy-oriented website analytics provided by Vercel. vercel.com/docs/analytics/privacy-policy

Some processors (notably Clerk and Stripe) may process data in the United States or other countries outside the EU/EEA. Where required, transfers rely on appropriate safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses (SCCs).

We retain your account and usage data for as long as your account is active. You can delete your account yourself at any time via the Clerk account menu in the app: open your profile (User button) → Manage account → Delete account.

When your Clerk account is deleted, we automatically delete your Toolhub account and associated app data (tools, catalogs, customers, selections, and freelancer profile) via a verified webhook. Active Stripe subscriptions linked to the account are cancelled. Stripe may retain payment and invoice records as required by law; we do not keep a separate copy of card details.

You may also email us at d.schlueter1011@gmail.com to request deletion or erasure. We will process such requests without undue delay and at the latest within 30 days.

If you are in the EU/EEA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing or request restriction
• Data portability
• Lodge a complaint with your local supervisory authority

To exercise any of these rights, email us at d.schlueter1011@gmail.com. You may also lodge a complaint with the supervisory authority for Baden-Württemberg (LfDI Baden-Württemberg) or your local EU data protection authority.

We use only technically necessary cookies for session management via Clerk. We do not use advertising or tracking cookies.

We use Vercel Web Analytics, which does not set cookies. It collects pseudonymous page-view metrics (e.g. pages visited, referrer, device/browser type) using a short-lived hash derived from the request. This helps us understand traffic and improve the service.

We may update this policy from time to time. Material changes will be notified via email or an in-app notice. The "Last updated" date at the top of this page reflects the latest revision.