Polityka prywatności | ToolFlow

Last updated: September 25, 2026

This Privacy Policy explains how ToolFlow, available at toolflow.reteterra.it, processes personal data when you use the website, online tools, account features and API. ToolFlow is the service name. Privacy requests may be sent to the service operator at support@toolflow.reteterra.it.

1. Information we may process

• Technical data: IP address, user agent, date and time, requested URL, response codes and security logs generated by the server or hosting infrastructure.
• Account data: name, email address, password hash and information required for authentication and account management.
• Submitted files and content: files, text, URLs or other values you choose to process with a ToolFlow tool.
• Communications: information you send through email or contact channels.
• Cookie preferences: optional-category choices are stored in your browser using localStorage.

2. Purposes and legal bases

We process information as necessary to provide requested tools and features, secure the service against abuse, maintain reliability, manage accounts and support requests, comply with legal obligations, and, where applicable, measure or promote the service only with the consent required for optional technologies. Applicable legal bases may include performance of a contract or pre-contractual steps, legitimate interests in security and service administration, consent and legal obligations.

3. Uploaded files and generated results

Tools that require uploads place files in temporary server storage for processing. The application attempts to remove temporary inputs and outputs when processing ends or immediately after a result is delivered. Failures, interruptions, backups or infrastructure mechanisms can cause longer technical retention. Do not use ToolFlow for material that you are not comfortable placing temporarily on a remote server.

4. Public URLs and website diagnostics

Website diagnostic tools can make server-side requests to public URLs supplied by the user. ToolFlow attempts to reject localhost, local domains and private or reserved IP ranges. The destination website may record ToolFlow's server IP address, request time and user agent in its own logs.

5. Accounts and security

Passwords are stored as hashes rather than plain text. You are responsible for choosing strong credentials and keeping them confidential. We use reasonable technical safeguards, but no Internet-connected system can guarantee absolute security.

6. Cookies and similar technologies

ToolFlow uses an essential session cookie, normally named PHPSESSID, for session state, CSRF protection and account functionality. Consent preferences are stored in localStorage. Optional analytics or marketing technologies must not be activated before consent where consent is required. See the Cookie Policy.

7. Service providers and recipients

Information may be processed by technical providers needed to operate ToolFlow, including hosting, network, email, backup and security providers. Depending on the service, these providers may act as processors or independent controllers. Before enabling new providers that process personal data, the service operator should assess their terms, location and safeguards.

8. International transfers

Where a provider processes personal data outside the European Economic Area or another jurisdiction offering equivalent protection, appropriate safeguards required by applicable law should be used, such as adequacy decisions or standard contractual clauses.

9. Retention

Account data is retained while the account remains active and afterward for periods reasonably required for security, disputes and legal obligations. Technical logs are retained according to hosting configuration and security needs. Processing files are intended to be temporary. Support communications are retained as long as needed to handle the request and related administrative requirements.

10. Your rights

Where applicable law provides these rights, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent at any time for future processing based on consent. You may also complain to the competent supervisory authority. Requests can be sent to support@toolflow.reteterra.it; reasonable information may be requested to verify identity.

11. Children

ToolFlow is not specifically designed to collect personal data from children. Where local law requires parental or guardian consent for certain users, those users should not create an account or submit personal data without the required authorization.

12. Changes to this Policy

We may update this Policy when features, providers or legal requirements change. The last-updated date identifies the current version. Material changes may be highlighted on the website where appropriate.