Privacy policy
Effective August 4, 2026
1. What we collect
Account information— when you sign in with Google we receive your name, email address, and profile picture. We don’t see your Google password. Workspace content — the tools you deploy, the data those tools store, and the credentials you connect (encrypted at rest). Usage records — an audit trail of deploys, queries, and access changes, plus standard request logs. Billing — payments run through Stripe; we store your plan and Stripe customer reference, never your card number.
2. How we use it
To run the service: signing you in, deciding which workspace you belong to, executing your tools, showing your team its audit trail, sending the notifications you or your workspace have turned on, and billing paid plans. We do not sell your data, we do not show ads, and we do not use your content to train machine-learning models.
3. Cookies
We set the cookies needed to keep you signed in, and nothing else. No advertising or cross-site tracking cookies.
4. Who else touches your data
Toolshed runs on a small set of infrastructure providers: Vercel (application hosting), Neon (Postgres databases, hosted in AWS us-east-1), Stripe (payments), Resend (transactional email), and Google (sign-in). Each receives only what its role requires. Beyond these, we disclose data only if the law requires it.
5. Retention and deletion
Workspace content stays until you delete it or ask us to. Request logs are kept for 30 days. Audit-trail entries are kept for the life of the workspace, because that history is part of what the product provides. To delete your account or an entire workspace, email team@trytoolshed.com from the address on the account and we’ll confirm and complete the deletion within 30 days.
6. Security
All traffic is encrypted in transit. Connected credentials and app secrets are encrypted at rest. Every deployed tool gets its own isolated database, and access to a tool is enforced by your workspace’s sign-in before it loads. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.
7. Your rights
You can access and export your data from the product (activity export, app database access) or by asking us. Depending on where you live you may have additional legal rights — access, correction, deletion, portability, objection. Exercise any of them by emailing team@trytoolshed.com.
8. Children
Toolshed is a workplace product and is not directed at children under 16. We don’t knowingly collect their data.
9. Changes to this policy
If we make material changes we will give notice — by email or in the product — before they take effect. The date below always reflects the current version.