Legal
Privacy Policy
Last updated: 29 May 2026
Pending legal review
This policy has been written in good faith and covers Toolsmith's actual data practices. It has not yet been reviewed by a qualified solicitor or GDPR specialist. That review will happen before the product launches publicly and before any payment data is collected.
Who we are
Toolsmith is a software product that provides internal tools for SaaS revenue teams. The website is available at gettoolsmith.com.
Legal entity: [PLACEHOLDER: Legal entity name — e.g. Toolsmith Ltd] · [PLACEHOLDER: Registered address]
Data controller contact: [PLACEHOLDER: e.g. privacy@gettoolsmith.com]
For any privacy-related question or request, email us at the address above. We will respond within 30 days as required under GDPR.
What data we collect and why
Waitlist and contact form data
When you submit a waitlist request or contact form, we collect:
- First name and work email address
- Company name and job role
- Number of sales reps (approximate team size)
- Current commission tracking method
- A description of your workflow pain point (optional)
We use this information to: contact you about early access to the product, send free tools and practical resources you requested, and understand the kinds of teams we are building for. We do not sell this data to any third party.
Analytics data
With your consent, we use Vercel Analytics to measure how visitors use the site — pages visited, time on page, and general geographic region. This data is aggregated and does not personally identify you. Vercel Analytics is designed to be privacy-friendly and does not use persistent third-party cookies. Vercel Analytics privacy information.
Server logs
Our hosting infrastructure automatically logs standard server data including IP addresses, browser type, referring pages, and timestamps. These logs are retained for security and performance monitoring purposes and are not linked to personal profiles.
Payment data (not yet active)
When billing is activated, payments will be processed by Stripe. We will not store your payment card details — Stripe handles this securely on our behalf. We will retain transaction records (amount, date, product) for legal and accounting purposes.
Our lawful basis for processing (GDPR Article 6)
| Data type | Lawful basis |
|---|---|
| Waitlist and contact form data | Legitimate interest — to contact you about the product you expressed interest in; and consent — given when you submit the form |
| Analytics data | Consent — given via the cookie consent banner |
| Server logs | Legitimate interest — security and site performance monitoring |
| Payment records | Contract performance and legal obligation (accounting law) |
How long we keep your data
- Waitlist submissions: Until early access is granted, or until the product has launched and the waitlist is no longer active — maximum 24 months.
- Account data (future): For the duration of your account plus 12 months after account closure, unless a longer period is required by law.
- Payment records: 7 years, as required by accounting law in most EU jurisdictions.
- Analytics data:As per Vercel Analytics' own data retention settings.
- Server logs: Up to 90 days, then deleted automatically.
Third-party services that receive your data
We work with the following third-party processors. Each has its own privacy policy and data processing terms. We do not sell personal data to any third party.
| Service | Purpose | Data shared |
|---|---|---|
| Vercel (hosting) | Website hosting and infrastructure | Server logs, IP addresses (standard infrastructure) |
| Vercel Analytics | Aggregated site analytics (analytics consent required) | Page views, general location (no personal identifiers) |
| [PLACEHOLDER: email tool] | Sending waitlist confirmation and early access emails | Name and email address |
| Stripe (not yet active) | Payment processing when billing is activated | Payment card data (not stored by us) |
Your rights under GDPR
If you are in the UK or European Economic Area, you have the following rights. To exercise any of them, email [PLACEHOLDER: privacy@gettoolsmith.com]. We will respond within 30 days.
Right to access
You can request a copy of the personal data we hold about you.
Right to rectification
If any data we hold about you is inaccurate, you can ask us to correct it.
Right to erasure
Also called the "right to be forgotten". You can ask us to delete your personal data. We will do so unless we are legally required to keep it (for example, accounting records).
Right to restrict processing
You can ask us to pause how we use your data in certain circumstances — for example, while a dispute is being resolved.
Right to data portability
You can request your data in a structured, commonly used, machine-readable format.
Right to object
You can object to us processing your data based on legitimate interests. We will stop unless we have compelling grounds to continue.
Right not to be subject to automated decision-making
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
You also have the right to lodge a complaint with a supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In France, it is the Commission Nationale de l'Informatique et des Libertés (CNIL).
Cookies
For details on how we use cookies and how to manage your preferences, see our Cookie Policy.
Changes to this policy
If we make material changes to this policy, we will notify you by email if you have provided one, or by displaying a prominent notice on the site. Minor clarifications may be made without notice. The date at the top of this page shows when it was last updated.