1. Controller and contact
For data processed directly by WorkToolset, the controller is BENGLER, 27 avenue Laplace, 94110 Arcueil, France. Contact: support@worktoolset.com.
2. Locally processed documents
For tools marked as local, the source file is read and transformed in your browser. WorkToolset does not archive it on its server and exported files stay on your device.
Some runtimes or models may be loaded on demand from technical providers such as jsDelivr or Hugging Face. WorkToolset does not attach the processed file or its contents to these runtime-loading requests. Any remote feature that needs to transmit content must be disclosed before sending.
3. Data processed by WorkToolset
The main purposes are to provide the service and account, secure access, answer support requests, apply subscription entitlements, maintain the product and measure its use proportionately. Depending on the purpose and applicable law, processing relies on performance of the requested service, legal obligations and legitimate interests in security and service improvement; where consent is legally required, it must be obtained before the relevant processing.
- Account: email address, display name, plan and information required to manage the account.
- Work continuity: favorites, presets, projects and, depending on the plan, Studio sessions or history; these records do not contain the processed files themselves.
- Authentication and security: sessions, email verification, password resets and security events required to protect the account.
- First-party analytics: page views, sessions, tool usage, referrer/UTM and device, browser or OS families; this system does not store raw IP addresses, raw user agents, filenames or file contents.
- Support: optional name, reply address, category, subject, message and relevant page; the support form does not accept attachments.
- Billing: identifiers and states required to synchronize the Paddle subscription and process verified webhooks; WorkToolset does not store payment-card details.
4. Providers and third-party services
OVH hosts the application and database. Resend is used to deliver account and support email. Google is involved only if you choose Google OAuth sign-in. Paddle manages checkout, payments, taxes, invoices and certain buyer data as Merchant of Record under its own privacy notice.
5. Retention
Account data is kept while the account is active and then deleted or dissociated through the available deletion mechanisms, subject to applicable legal obligations. First-party analytics data is retained for no more than 180 days.
After account deletion, some already-pseudonymized analytics may remain without an account link until that 180-day period expires. Payment data retained by Paddle follows Paddle retention periods and applicable obligations.
6. Your choices and rights
From your WorkToolset account, you can export your data, delete usage statistics linked to the account and request account deletion. You can also use the available settings to opt out of audience measurement on the relevant device.
Depending on your circumstances and applicable law, you may have rights of access, correction, deletion, restriction, objection and portability. To exercise a right or ask a question, contact support@worktoolset.com. Identity evidence may be requested only when necessary to secure the request.
7. Cookies and local storage
WorkToolset uses technical mechanisms required for sessions, language preferences and product settings. Paddle may use its own mechanisms during checkout or in the billing portal. Measurement and preference features are described on the Security & privacy page.
8. Changes to this policy
This policy may be updated when the service, providers or applicable obligations change. The date shown at the top identifies the published version.