Privacy Policy

1. Who is responsible

Tom Granit, trading as Toolforge, is responsible for the personal data described in this policy. Address: Ringvägen 47, 133 35 Saltsjöbaden, Sweden. For privacy questions or requests, email tomgranit@ogmedia.agency.

2. Information we process

• Your CV and the professional, educational and contact information it contains.
• Your name, email, project brief, preferences, links, corrections and optional photograph.
• Order information from Stripe, such as payment status and checkout email. Toolforge does not receive full card details.
• Basic technical and security information generated when you use the website or contact us.

3. Why we use it

We process information to create the preview you request, perform our contract, communicate about delivery and support, prevent misuse, and meet legal accounting or consumer-protection obligations. Optional information is used only when you provide it.

4. AI and service providers

CV files used for the prototype are sent to the OpenAI API to extract structured website content. Requests are configured not to store response data for model training. We also use Stripe for payments, Hostinger for hosting and, when enabled, Resend for transactional email. Some providers may process information outside the EEA using applicable transfer safeguards.

5. Retention and security

We keep project information only as long as reasonably needed to create and support the website, resolve disputes and comply with legal obligations. Payment and accounting records may be retained as required by law. Access is limited to people and providers who need the information.

6. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, or object to processing. You may complain to your local data-protection authority; in Sweden this is the Swedish Authority for Privacy Protection (IMY). Contact tomgranit@ogmedia.agency to exercise a right.

7. Browser storage and updates

Toolforge may use essential browser storage for functions such as maintaining the limited-time offer. Advertising or analytics technologies, if introduced, will be described here and consent requested where required. We may update this policy when the service or legal requirements change.