Privacy Policy
How Toolomix handles information when you use the website and its tools.
Last reviewed: July 2026
Scope and important context
This policy describes the processing visible in the current Toolomix service. It does not identify or invent a legal entity or postal address that has not been published.
Some tools run entirely in your browser, while others send data to the Toolomix server or a named service provider. Do not assume every tool is browser-only.
Data and processing flows
The exact flow depends on the tool. Review the relevant tool screen before submitting sensitive material.
| Activity | Data involved | Where processing occurs | Storage or disclosure |
|---|---|---|---|
| Browser-side tools | Text, files or settings entered into tools implemented in the browser | Your browser | Tool input is not intentionally sent for processing when the tool is fully browser-side. |
| Server-side file tools and converters | Uploaded files, conversion options and output | Toolomix server memory and the self-hosted Stirling-PDF service | Files are handled to return the result. A verified universal retention or deletion period has not been established. |
| Image-to-text OCR | Submitted image and extracted text | Toolomix server and Azure Vision | The image is disclosed to Microsoft Azure for OCR processing. |
| ATS CV optimizer | CV file, extracted CV text and analysis prompts/results | Stirling-PDF and OpenAI through the Toolomix server | The CV is converted or parsed with Stirling-PDF and relevant content is disclosed to OpenAI for analysis. |
| Accounts | Email, identifiers, credentials/tokens and profile data | Keycloak and Toolomix account components | Keycloak provides identity and authentication functions. |
| VCard generator | Contact-card fields, account identifier, public slug and view count | Toolomix server and persistent database | An active VCard is stored and can be reached through a persistent public link. Anyone with the link may view it. |
| Contact requests | First and last name, email, subject and message | Toolomix server, email infrastructure and application logs | The request is sent by email; email addresses and delivery or error events may appear in logs. |
| Operations and quotas | IP address, user agent, tool usage, success status and request metadata | Toolomix server and logs/databases | Used for security, quotas, troubleshooting and service operation. |
Why information is used
- Provide the requested tool output and account features.
- Authenticate users, enforce quotas, prevent abuse and protect the service.
- Respond to contact requests and diagnose delivery or application failures.
- Measure use, maintain performance, improve tools and support advertising.
Third-party services
Toolomix pages may use Google AdSense, Google Analytics, Google reCAPTCHA and third-party content delivery networks. These providers can receive device, browser, IP, usage, cookie or similar identifiers according to their own policies.
Azure Vision receives images submitted to OCR. OpenAI receives relevant CV content submitted to the ATS optimizer. Keycloak processes account and authentication data. Stirling-PDF is self-hosted but is part of the server-side processing path.
Retention and security
No single verified retention period applies to all files, logs, contact messages, account records or third-party processing. Toolomix therefore does not promise deletion within a specific number of hours or days in this policy.
Data may be kept for as long as needed for the stated purpose, security, dispute handling or technical operation, subject to the applicable system and provider settings. Public VCards remain available until deactivated, replaced or removed through the relevant account or support process.
Reasonable safeguards may reduce risk, but no internet transmission, browser, server or third-party system is guaranteed to be completely secure.
Your choices and requests
Depending on applicable law, you may ask for access, correction, deletion, restriction or objection. A request may require identity verification and may be limited by legal or technical obligations.
You can avoid submitting sensitive files, use browser controls for cookies, refrain from creating a public VCard, and stop using account or third-party-backed features.
Contact and policy changes
Send privacy questions or data requests to support@toolomix.com. Contact emails and related logs are processed to handle the request.
This policy may change as the service and its data flows change. The review date above identifies the current published version.