Privacy policy

Your files are often unpublished research, client work or personal records. We treat them that way: we process them only to give you the result, and then we delete them.

Last updated: 25 September 2026

Who is responsible

Tooladoo is run by CEAPA COOL S.R.L., Str. Diana nr. 4, et. 3, ap. 16, 300577 Timișoara, Romania (Trade Register J35/956/2023, CUI 47755081, EUID ROONRC.J2023000956359). We are the controller of the personal data described here, under the EU General Data Protection Regulation (GDPR).

Contact for anything about your data: office@ceapa.cool.

Your files

We use your files only to run the tool you chose and give you the result. We never look at them, keep them, share them, sell them or use them to train anything.
Uploads are deleted as soon as processing ends, whether it worked or not.
Results are kept for 30 minutes so you can download them, then deleted automatically. The “Delete now” button deletes them at once.
Each job runs in isolation with strict time and memory limits, and a tool can't see anyone else's files. Connections to the site are encrypted (HTTPS).
Your files may contain personal data about you or others (names in a document, faces in a video, positions in a GPS log). You decide what to upload; we process it only as described here.

What else we collect

Usage statistics: page views, jobs, downloads, error types, the page that linked to us and campaign tags in the address (utm_…). A visitor is counted with a one-way code made from the IP address, the browser's user-agent and a random value that is replaced every day and never stored, so it can't be traced back to you or linked across days. We don't store IP addresses in the statistics, and error details never include your files' contents. These records are kept for 400 days.
Technical logs and abuse protection: to keep the service safe and working, the servers keep short-lived technical logs, and the limit on how many jobs one visitor can start uses the IP address in memory only. Logs are kept for a limited time and then deleted or overwritten.
E-mails: if you write to us, we keep the conversation as long as needed to answer and follow up.

We don't use advertising, profiling or automated decisions about you, and we don't sell personal data.

Why, and on what legal basis

Processing your files and giving you the result: to provide the service you asked for (GDPR Art. 6(1)(b)).
Statistics, security, abuse prevention and fixing errors: our legitimate interest in running a safe, working service and learning which tools are useful (Art. 6(1)(f)). You can object at any time.
Answering your messages: your request, and our legitimate interest in replying (Art. 6(1)(b) and (f)).

Where the data is and who helps us

Files are processed and data is stored on our own servers in the European Union, hosted by ROMARG SRL, in Romania. The hosting provider only stores and runs our systems on our instructions. We don't transfer personal data outside the European Economic Area.

Cookies and storage

The site sets no cookies for visitors and uses no tracking, advertising or third-party analytics. Administrators get a session cookie when they sign in, which is strictly necessary for that.

Your rights

You can ask us for access to your personal data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Write to office@ceapa.cool; we answer within one month. Since files are deleted after 30 minutes and statistics can't be linked to a person, there is often nothing left that we could identify as yours.

You can also complain to a data protection authority. In Romania this is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, București, dataprotection.ro; you may also go to the authority where you live or work.

Children

The service is not aimed at children under 16, and we don't knowingly collect their data.

Changes

If this policy changes, we update this page and the date above.