Privacy Policy
Last Updated: June 21, 2026. Effective Immediately.
1. Zero-Data Retention (Our Core Promise)
utool does not upload, save, or transmit your utility inputs, files, documents, or data to any server. When you merge, split, or compress PDF files, all processing is performed locally inside your web browser sandbox using JavaScript and WebAssembly compiled binaries.
Your financial sheets, agreements, images, and text variables never leave your computer. Once you close your browser tab, all active states are completely erased from your system's volatile memory.
2. Information We Collect
While document modification is entirely local, we do collect limited account-level metadata to provide membership services, premium tiers, rate limiting, and tracking logs:
- Account Data: If you sign up or log in, we collect your email address and UID via Firebase Authentication to manage your workspace and quota limits.
- Billing Records: Subscriptions are processed through Razorpay. We do not store credit card or payment credential details on our servers. Razorpay processes all transactions securely, sending confirmation webhooks to sync your subscription status.
- Link Shortener Data: Short links created using our redirection engine require database mapping. We store the original destination URL, the shortened code, the creator's UID, click counts, and basic execution timestamps on our serverless database (Upstash Redis & Firestore) to perform redirection.
- Usage Metrics: We log aggregated telemetry data (e.g. number of daily compression calls, tool errors) to monitor server performance and enforce API rate limits.
3. Browser Storage & Cookies
We use local browser storage (such as LocalStorage and session cookies) to store basic configuration parameters, user theme settings (light/dark mode), and session authentication states. These files do not track your browsing behavior across other websites.
4. Compliance & Security Standards
Because utool operates client-side, we bypass the compliance bottlenecks typical of cloud-based document platforms. We do not act as a data processor or data controller for your uploaded documents, ensuring compliance with the General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), and California Consumer Privacy Act (CCPA).
5. Contact Our Privacy Officer
If you have any questions, suggestions, or concerns regarding our privacy configurations, please contact us directly at privacy@utool.in.