Legal
Privacy Policy
Last updated:
This policy explains what personal data ToolsFever collects, why we collect it, who we share it with, how we protect it and the rights you have.
It follows the law that applies today: section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Most of the Digital Personal Data Protection Act, 2023 is expected to apply from May 2027. We already give you the rights it describes (see Your rights), and we will update this policy when it applies.
1. Who we are
ToolsFever is operated by Aazoob Technology Private Limited. For the personal data described in this policy we are the Data Fiduciary: we decide why and how it is used. Our address and contact details are at the end of this page and on our Contact page.
This policy covers personal data we collect through this website, your account and our customer support. It applies to our customers and to people whose email a customer gives us for a seat. Each tool you subscribe to is run by its own vendor, whose privacy policy applies to how you use that tool.
2. Personal data we collect and why
| Data | What it includes | Why we use it |
|---|---|---|
| Account and contact details | Name, email address and mobile number (from sign-up, checkout or your profile), and your password if you create an account (stored only as a secure hash) | Create and secure your account, sign you in, send order confirmations, activation emails and invoices, and contact you about your orders |
| Order and billing details | Tools bought, number of seats, prices, any promo code used, order and invoice numbers, your State and your billing address. For a business invoice, also your GSTIN and the business name registered with it. You can save these billing details in your profile so they are filled in at checkout. | Process orders, apply promo codes and check their usage limits, work out GST (your State is the place of supply), issue GST invoices and keep the records tax law requires |
| Payment information | Payment status, transaction reference, payment method and the limited details our payment gateway sends us, such as your bank's name, the last four digits of your card or your UPI ID, and, if you set up automatic payments, the mandate reference | Confirm payments, charge renewals, process refunds and prevent fraud |
| Subscription details | Tools you subscribe to, activation status, renewal and cancellation dates | Activate your tools, renew or cancel subscriptions and send renewal reminders |
| Access emails for seats | The email entered for each seat, which may belong to someone other than the buyer | Activate and manage that seat with the tool's vendor, send its activation details to that address, send the seat holder our notice, and handle refunds, disputes and security checks |
| Support messages | Emails, call notes and anything you send us | Answer your questions and resolve complaints |
| Device and usage data | IP address, browser and device type, pages visited, timestamps, cookies | Keep the site secure, prevent fraud and abuse, and fix problems |
We never see or store your full card number, CVV, UPI PIN or net-banking password. You enter these only on the secure pages of our payment gateway, your bank or your UPI app, which handle them under the rules set by the Reserve Bank of India.
If you give us someone else's email for a seat, they must agree. We send them a short notice with a link to decline, and if they decline we delete their email.
We send marketing emails only if you opt in, and every such email has an unsubscribe link.
3. Consent and how we use your data
We use your personal data only for the purposes listed above, on these grounds:
- To give you what you asked for. When you create an account, place an order or contact us, we use the details you give us for that purpose, for example to activate your tools, send invoices and renewal reminders, and reply to you.
- A seat a customer bought for you. We use your email only for that seat, on the customer's word that you agreed. You can decline with the link in our notice, or by writing to us from that email.
- Your consent, for optional uses such as marketing emails. We ask for it separately, never with a pre-ticked box, and saying no does not affect your orders.
- To meet our legal duties. We keep order and invoice records for as long as company, GST and tax laws require, and security logs as Indian cyber security rules require, even if you close your account or withdraw your consent.
Withdrawing consent
You can withdraw your consent at any time. To stop marketing emails, use the unsubscribe link in any of them. To withdraw any other consent or close your account, write to [email protected] from your registered email address or, if a customer gave us your email for a seat, from that email address. We will then stop using your data for that purpose within a reasonable time, make our service providers stop too, and delete any data we hold only for that purpose, unless the law requires us to keep it. Withdrawal does not affect anything done before it, but we may no longer be able to provide services that depend on that data.
5. Data stored outside India
Some of our service providers, and some tool vendors, may store or process data outside India. We send personal data abroad only when it is needed to provide our service to you or you have agreed to it, and we require our service providers to protect it to the same standard we do. We will not transfer personal data to any country or territory that the Government of India restricts under the Digital Personal Data Protection Act, 2023.
6. How long we keep your data
- Account details and saved billing details: while your account is open.
- Orders, invoices, credit notes and payment records: for eight financial years after the financial year in which each record was made, as company law requires. This is longer than the 72 months from the due date of that year's annual GST return that GST law requires. If a record concerns a tax appeal, an investigation or another legal proceeding, we keep it until at least one year after the matter is finally closed, if that is later.
- Access emails: while the subscription is active and for 12 months after it ends, to handle refunds, disputes and security checks, then deleted. They are not printed on invoices.
- Support messages: until your request is resolved and for a reasonable period after.
- Security logs (IP address, device and access records): for one year, to meet Indian cyber security and data protection rules, and then deleted.
When data is no longer needed for its purpose, you withdraw your consent or you close your account, we delete it and have our service providers delete it, unless the law requires us to keep it. Order and invoice records and security logs are kept for the periods above even after you close your account.
7. How we protect your data
We use reasonable security safeguards, including encrypted connections (HTTPS), hashed passwords, access only for staff who need it, and contracts that oblige our service providers to protect your data. No system is completely secure, so please keep your password private.
If a personal data breach affects you, we will tell you without delay by email: what happened and when, the likely impact on you, what we are doing about it, what you can do to protect yourself, and who to contact with questions. We will report cyber security incidents to CERT-In (the Indian Computer Emergency Response Team) as the law requires, and we will also report personal data breaches to the Data Protection Board of India once that duty applies (expected from May 2027).
8. Your rights
You can ask us to:
- give you a summary of your personal data and how we use it, including the names of the companies we have shared it with (such as tool vendors, our payment gateway and our hosting, email and SMS providers) and what we shared;
- correct, complete or update your personal data;
- erase your personal data, unless the law requires us to keep it;
- withdraw your consent;
- resolve a grievance about how we handle your data;
- let a person you nominate exercise these rights for you if you die or become unable to.
To use any of these rights, write to [email protected] or our Grievance Officer from your registered email address. We may ask you to confirm your identity, and we respond within one month of receiving your request. You can also update your name, email, phone and billing details yourself in your dashboard under Profile, and correct a seat's access email at any time by writing to us.
If a customer gave us your email for a seat, you can use these rights by writing to us from that email address. If you ask us to erase it, the seat is unassigned until the customer gives us another email.
9. Your duties
Please give us accurate information, do not impersonate anyone, do not make false or frivolous complaints, and when you ask us to correct or erase data, give us only information that is genuine and can be checked. Once the Digital Personal Data Protection Act, 2023 applies (expected from May 2027), these are also legal duties.
10. Children
ToolsFever is only for people aged 18 or over. You must not create an account or buy a subscription if you are younger, and we ask you to confirm your age when you sign up or check out. Every seat holder must be 18 or over too, and we ask you to confirm this when you give us someone else's email for a seat. We do not track, profile or target advertising at children. If we learn that someone under 18 has given us personal data, we will close the account and delete the data, except any records the law requires us to keep.
12. Questions and complaints
Our Grievance Officer handles questions and complaints about your personal data:
- Name
- Kaushal Kumar
- Designation
- Grievance Officer
- [email protected]
- Phone
- +91 6112 353411
We acknowledge complaints within 48 hours and resolve them within one month of receiving them. See how we handle grievances.
If you are not satisfied after using our grievance process, you may be able to claim compensation under section 43A of the Information Technology Act, 2000 by applying to the Adjudicating Officer appointed under that Act. Once the Data Protection Board of India starts accepting complaints (expected from May 2027), you will also be able to complain to it, and we will add the link here.
13. Language and changes to this policy
This policy is in English. You can ask for it in Hindi or in any other language listed in the Eighth Schedule to the Constitution of India by writing to [email protected], and we will send it within 7 days.
We may update this policy from time to time. The date at the top shows the latest version, and we will tell you by email or on the site about any important change.