Privacy policy
Last updated 20 September 2026.
Who is responsible for your data
ToolVerified, Pakistan, runs ToolVerified and is responsible for the personal data described here. Questions about your data: [email protected].
What we collect
Account details. Your email address, your display name, and, if you signed in with Google, the Google account id and profile picture Google shares with us. If you registered with a password, we store a one-way hash of it and never the password itself.
Listing content. Everything you type into a submission, plus the logo and screenshots you upload or we fetch from your public page.
Order details. If you buy a Premium or Featured package, we keep the order number, the package, the amount and currency, its status, the date, and the Kelviq checkout reference. We do not receive, see or store your card number, expiry date or security code: you enter those on Kelviq's own checkout page, which is PCI DSS certified, and they go to its payment processor directly.
Activity. Your upvotes and comments, and basic server logs (IP address, user agent, requested page) kept for security and debugging.
Email records. Which transactional emails we sent you and when, so we can answer "did it ever arrive?".
Why we collect it
We use it to run the directory: review submissions, publish listings, process and fulfil package orders, run the featured slots and listing analytics you paid for, send the emails the flow requires, prevent abuse, and answer support requests. We do not sell your data, and we do not run advertising profiles on it.
Emails we send
Confirming your email, welcoming you, resetting your password, telling you what happened to your listing (in review, live, or declined), and, if you paid, an order confirmation that doubles as your receipt. These are transactional: they are part of the service you asked for. Any newsletter would be separate and opt-in.
Who we share it with
Kelviq: our Merchant of Record, if you buy a package. Kelviq is the seller of record for the payment, so it receives your email address, your card details, the amount, and the billing country (and, if you enter one, a tax ID and billing address) on its own checkout page, under its own privacy policy, in order to take the payment, work out tax, issue the receipt and handle refunds and disputes. It sends us a signed confirmation with the order reference and the billing country. We never receive your card details.
Google: only if you choose Google sign-in, to confirm who you are.
Google Analytics: aggregate site analytics (pages viewed, general location, device type), so we know what's working.
Our AI provider: when you submit a URL, we send the public text of that page and your product name to the configured model to draft your listing. We do not send your email address, password or any account data.
Our email delivery service: receives the address and the message so it can be delivered.
We do not sell or rent your data to anyone else.
Cookies
One session cookie, so the site knows you are signed in and can protect forms against cross-site request forgery. Google Analytics also sets its own cookies to tell returning visits apart. There are no advertising or cross-site tracking cookies.
Security
The site is served over HTTPS, so everything between your browser and us is encrypted in transit. Passwords are stored as one-way hashes. Payment card data never touches our servers: it is collected on Kelviq's PCI DSS certified checkout and processed by its payment processor. Access to the admin area is limited to the team, and every payment confirmation we receive is signature-checked before it is acted on.
How long we keep it
Account and listing data stays while your account exists. Order records are kept for seven years to meet accounting and tax rules and to handle refund requests and payment disputes. Server logs are short-lived. Verification and reset tokens expire within hours and are single-use.
Your rights
You can edit your listing and your name at any time from your account. You can also ask us to access, correct or delete your data: write to [email protected] or use the contact form. Deleting an account removes its listings, comments and votes. If you are in the EU or UK, this includes the rights given to you under the GDPR / UK GDPR, including the right to object to or restrict some uses of your data and to ask for a copy of it.
Children
The site is not intended for anyone under 18, and we do not knowingly collect their data.
Changes
If this policy changes materially we will say so on the site before the change takes effect. Contact us at [email protected] with any questions.