Privacy Policy

Effective date: April 22, 2026

Toolaby respects and values your privacy. This Privacy Policy describes how we handle and protect your information in relation to your use of our Chrome extension, Stripe Invoice Downloader.

What we collect

When you purchase a license we collect:

  • Email address — to deliver your license key and send important product updates.
  • License key hash — a one-way hash stored for activation verification. We never store the raw key.
  • Stripe customer / session IDs — for payment record-keeping and refund processing.
  • Anonymous install ID + download count — a randomly generated identifier stored locally in the extension to enforce the free-tier limit. No personal data is attached to it.

What we do not collect

We do not collect browsing history, page content, or any data from the pages where the extension runs. The extension reads your Stripe API key and invoice data only temporarily in memory — this data is never transmitted to our servers. Your Stripe API key is stored exclusively in your browser's local storage and is only used to communicate directly with Stripe's API on your behalf.

How we use your data

Your email address is used solely to deliver your license key and send essential service communications (e.g. a breaking update that requires action). We do not send marketing emails without your explicit opt-in, and we do not sell your data to third parties under any circumstances.

Third-party services

  • Stripe — handles payment processing. Your card details are never seen or stored by us.
  • Resend — used to send transactional emails (license delivery).
  • Supabase — hosts our database in the EU (eu-central-1).

Each third-party service operates under its own privacy policy. We encourage you to review them if you have questions about how they handle your data.

Data retention

License records are retained so you can re-activate on a new device at any time. If you want your data deleted, email us and we will remove it within 30 days.

Your rights (GDPR)

If you are based in the EU you have the right to access, correct, or delete the personal data we hold about you. Contact us to exercise these rights.

Changes to this policy

We reserve the right to amend this Privacy Policy at any time. Any changes will be effective immediately upon posting the revised policy, and the effective date above will be updated. We encourage you to review this page periodically.

Contact

Questions or requests? Use our contact form or email info@toolaby.com.