Privacy Policy

When you visit toolyt.com, Toolyt acts as the data controller for the personal information you share with us directly (for example through a demo or contact form).

When your employer subscribes to the Toolyt platform, your employer is the data controller of the customer data held within Toolyt, and Toolyt acts as a data processor on its behalf. For questions about your employer's use of your data, please contact your organisation's Toolyt administrator.

We collect only the personal information necessary to provide and improve our services:

• Information you provide: name, work email, phone number, company, designation and team size when you submit a demo, trial or contact form, or communicate with us.
• Usage information: pages viewed, referring URLs, device type, approximate location (city/country), and interaction data collected through cookies and similar technologies on our website.
• Account and platform data: information that customers and their authorised users enter into the Toolyt platform (leads, customers, visits, documents and related records).
• Technical data: IP address, browser and operating system, and log data used for security, fraud prevention and service reliability.

We use personal information for the following legitimate purposes:

• Responding to enquiries, scheduling demos and providing requested information.
• Evaluating and onboarding trial and pilot requests, and delivering the Toolyt platform to customers.
• Providing customer support, training and account management.
• Improving our website, products and services through analytics and feedback.
• Sending transactional messages and, where you have opted in, relevant product and industry updates.
• Detecting, preventing and investigating fraud, abuse and security incidents.
• Meeting legal, regulatory and contractual obligations.

Where the General Data Protection Regulation (GDPR) or equivalent laws apply, we process personal data on the following lawful bases: with your consent (for cookies and marketing communications); to take steps before entering into a contract and to perform a contract with you (for sales and service delivery); our legitimate interests in operating and securing our business; and to comply with legal obligations.

Our website uses cookies and similar technologies to operate correctly, remember your preferences, measure traffic and improve your experience.

A cookie consent banner is shown on your first visit. You may accept or reject analytics cookies. Analytics tools (including Google Analytics) load only after you accept. Essential cookies required for the site to function are not affected by your choice and do not require consent.

You can change your cookie preference or clear cookies in your browser settings at any time. Disabling some cookies may affect how the site works.

We do not sell your personal data. We share it only as described below, and only with processors that are bound by written agreements to protect it:

• Service providers: cloud hosting, analytics, email delivery and customer-support tools that help us operate the platform.
• Authorised users: within the platform, your employer and its authorised personnel may access data you enter, subject to their access controls.
• Business transfers: in connection with a merger, acquisition or asset sale, subject to confidentiality and consistent with this policy.
• Legal compliance: where required by law, court order, or to protect the rights, property or safety of Toolyt, our customers or others.

We keep personal information only as long as necessary for the purposes set out in this policy or as required by law. Website visitor data is held for a limited analytics period. Sales and marketing data is retained while an active relationship exists and for a defined period afterwards. Customer platform data is retained for the duration of the subscription and then deleted or anonymised in line with the customer agreement, unless retention is required by law.

Toolyt protects personal data with industry-standard controls. Our information security management system is ISO 27001:2022 certified and our cloud infrastructure is accredited under SOC 2. Data is encrypted with AES at rest and protected with SSL/TLS in transit. Production access requires multi-factor authentication and is restricted to authorised personnel under least-privilege principles. We undergo independent third-party vulnerability assessment and penetration testing. Read more on our Trust Centre.

Depending on where you live, you may have rights regarding your personal data, including the right to access, correct, delete, restrict or object to processing, the right to data portability, and the right to withdraw consent at any time without affecting processing already carried out.

To exercise your rights, email privacy@toolyt.com with enough detail to identify you. We verify identity before acting on a request and respond within the timeframes required by applicable law. If you have a concern about how we handle your data, you may complain to your local data protection authority.

Toolyt operates globally and personal data may be processed in countries other than your own, including India and the United States. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses, the customer agreement, or another lawful transfer mechanism, and we require the same level of protection described in this policy.

Toolyt is a business-to-business product and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have collected information from a minor, please contact privacy@toolyt.com and we will delete it.

We may update this Privacy Policy to reflect changes in our practices, products or legal requirements. When we make material changes, we will revise the "last updated" date at the top of the page and, where appropriate, notify you through the platform or by email. Continued use of Toolyt after a change takes effect constitutes acceptance of the updated policy.

For questions about this Privacy Policy or your personal data, contact us at:

• Email: privacy@toolyt.com
• General enquiries: support@toolyt.com
• Vahmine Technologies Pvt. Ltd., India
• Vahmine Inc., United States