Privacy policy

ToolkitDeck is run by Clustaco Limited. This page explains what we collect when you use it, why, and what you can ask us to do with it. The short version: we collect what it takes to run your account and the tools, we do not sell it, and there are no advertising trackers.

What we collect

• Your account: your name, email address and a scrambled (hashed) copy of your password. We cannot read your password.
• Your work: the files you upload and the documents you create, so the tools can work on them.
• How you use the tools: which tools you open, the actions you take in them and any errors you meet, to apply your plan’s limits and to see where the tools need to get easier. We record that an action happened, never what you typed or uploaded. These records are kept for 90 days, then only as totals that say nothing about you.
• Visits to our website: which pages are visited, the site you came from, your country, the kind of device and browser, how long a page was read and what was searched for. We count visitors with a code made from your connection and browser that changes every day and cannot be reversed, so we can’t follow anyone from one day to the next, and we keep no address and no browser details. Nothing is stored on your device for this. You can switch it off below.
• Billing: your plan, its status, what you paid and when, and the reference numbers Paystack or Stripe give us. Your card details go straight to them and never reach us.
• Security records: for actions such as signing in, starting a payment or changing account settings, the time, your IP address and your browser type.
• When you sign a document: if someone sends you a document to sign with ToolkitDeck, we record your name, email, the time you opened and signed it, your IP address and your browser type, and that you agreed to sign electronically. This is the evidence that makes an electronic signature hold up, so it goes on the signing certificate that everyone who signed receives, and it is kept for as long as the sender keeps the document.
• Your country: worked out from your connection, only to show prices in your region’s currency.

Why we use it

To run your account and the tools you use, to take payment for paid plans, to keep accounts secure and stop abuse, and to email you about your account: confirming your address, resetting your password, and telling you when a payment fails. We do not send marketing email without asking you first.

Who we share it with

Only the companies that run parts of ToolkitDeck for us, and only what each one needs:

• Paystack and Stripe, to take payments;
• cloud hosting and storage providers, which run our servers, store your files and deliver the website;
• an email delivery provider, to send account emails;
• Anthropic, our AI provider, to answer when you use an AI feature. It receives only the information that feature needs and does not use it to train its models. You can turn AI off in Settings, AI.

Voice typing uses your browser’s built-in speech service, so your browser’s provider may process what you say.

We do not sell your data or share it with advertisers. We would disclose it to authorities only when the law requires us to.

Cookies

ToolkitDeck uses a small number of cookies, all needed for it to work: to keep you signed in, to protect forms from being submitted by other sites, and to remember your theme, your chosen region and your country for pricing. There are no tracking or advertising cookies, and our visit statistics use none, which is why there is no cookie banner. Videos and podcast players from YouTube, Spotify and Apple load only when you press play, and they set their own cookies from then on.

Visit statistics and your choice

Our visit statistics are first-party: they are counted on our own server, never shared and never used for advertising. You can switch them off for this browser here or from Privacy choices at the foot of every page. If your browser sends a Global Privacy Control signal, you are never counted.

How long we keep it

• Files a tool works on for the moment, on the Free plan: 24 hours.
• Files you keep in Drive on the Free plan: 14 days after you last open or use them, then 14 more days in Trash. Each file shows its date, and we email you three days before.
• Saved files and documents on a paid plan: until you delete them or close your account. Deleted files stay in Trash for 14 days.
• Your account: until you ask us to close it. We then delete it within 30 days.
• Payment records: as long as tax and accounting law requires, even after your account is closed.

Keeping it safe

Everything travels over encrypted connections. Your files are kept in private storage, and download links expire after a short time. Sign-in uses cookies that the page’s own scripts cannot read. Staff who can see account data must sign in with a second factor, and what they do is recorded.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for a purpose. Write to [email protected] and we will answer within 30 days. These rights come from the Nigeria Data Protection Act 2023 and, where they apply to you, from other laws such as the GDPR. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission or your local data protection authority.

Children

ToolkitDeck is not meant for children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy in a way that matters, we will tell you by email or in the app first. The date at the top shows when it last changed.

Questions

Write to [email protected].