1. What we collect
Tools that run in your browser. Most of our tools (for example the token counter, JSON tools, calculators and generators) do all of their work in your browser. The text and files you enter there are not sent to our servers.
Tools that use our servers. Some tools have to process what you submit on our servers: image tools (compress, resize, crop, rotate, convert, enhance and upscale, and background removal), PDF tools (protect, unlock, redact and PDF/A), Word to PDF, the watermark and object removers, and the advanced text analysis tools (advanced similarity, plagiarism checker and content optimizer). Files you upload and the options you type, including any PDF password, are used to produce your result and are not kept afterwards. The result is kept for a limited time so you can download it (see Data retention). For the text analysis tools, that result can quote parts of the text you submitted.
Tools that use an AI provider. The AI Rewriter, Paraphraser, Summarizer, Translate PDF and the Prompt Optimizer send the text you submit to Anthropic, our AI model provider, to produce the answer. We do not keep that text after the answer is returned; the answer itself is kept for a limited time like any other result. The Prompt Optimizer saves only token counts and savings in your history, and saves the prompt text itself only if you tick the option to do so for that run, until you delete it.
Email signature photos and logos. If you upload a photo or logo in the Email Signature Generator it is stored permanently at a public web address, because email clients load it from there every time your signature is viewed. Anyone who has that address can see the image; there is no way to browse the uploads. Signatures you save to your account store only the text fields you entered, not the generated HTML.
Your account. If you create an account we store your name, your email address and either a hashed password or your Google sign-in identifier, plus your plan, subscription and billing status, your credit balance and its history, and a short log of account events (such as plan changes and payments). Payments are handled by Stripe; we keep only the invoice amount, status and link, never card numbers.
Contact messages. If you write to us through the Contact page we store your name, email, subject, message, the category you chose and any optional details you add, plus a one-way hash of your IP address (used only to limit abuse) and, if you were signed in, a link to your account. Only our site administrators can read these messages; we use them to reply to you, and we keep them for as long as needed to handle your request.
Usage events. When a tool run finishes we record the tool name, whether it succeeded, how long it took and a random per-tab session id. We never record the content you entered. If analytics are enabled, we also collect anonymous usage events, for example which tool page was loaded. We also record anonymous page-speed measurements (Core Web Vitals: loading, interactivity and layout stability) with the page type, such as a tool page, a device class (mobile, tablet or desktop) and the same random per-tab session id. They never include the page address, what you entered, or anything that identifies you, and we skip them if your browser sends a Do Not Track or Global Privacy Control signal.
Error logs. When a request to our servers fails we keep a diagnostic log: the request path, the error, your IP address and, if you are signed in, your account email. Passwords and tokens are redacted from these logs.
2. Cookies and local storage
We do not set persistent tracking cookies. We use your browser's local storage to keep you signed in and to remember UI preferences (such as your last selected model). This data stays on your device.
3. Third-party services
We use Cloudflare for hosting, file storage and our database, Stripe for payments, Google for sign-in, and Anthropic to power the AI text tools. We may use Google Analytics 4 for anonymous aggregate traffic data; no tool content is included in any analytics payload. If AdSense is enabled in a future release, it will be disclosed here.
4. Data retention
- Uploaded input files and the options you enter for server-side tools are not kept after your result is produced.
- Results from server-side tools (files, and the analysis from the text tools) are kept for a limited time and then deleted automatically: 24 hours if you use the tool without an account, and for signed-in users a longer period that depends on your plan.
- Email signature photos and logos are kept until you ask us to remove them. Prompt Optimizer history is kept until you delete it.
- Error logs are deleted automatically after 30 days.
- Account data is kept until you ask us to delete your account.
- If you contact us by email, we keep that correspondence for as long as needed to respond and for legal record-keeping.
5. Your rights
You have the right to access, correct, or request deletion of any personal data we hold, including deleting your account. To make a request, reach us at info@aurotools.com. See also our Terms & Conditions and Return / Refund Policy.
6. Changes to this policy
We will update the "Last updated" date above whenever material changes are made. Continued use of the site after an update constitutes acceptance of the revised policy.