Privacy Policy
Last updated: October 5, 2026
๐ Short Version
The Resume Builder runs in your browser โ your resume is not uploaded. For the ATS Checker, your resume file stays on your device; the extracted text is sent to an AI service (Google Gemini or Groq) for analysis and is not stored by us. The Portfolio Builder requires an account and stores your portfolio. The Wish Generator needs no account, but stores the cards and photos you create, and the card is deleted automatically after expiry (7 or 14 days, you choose). We use Google Analytics and Google AdSense.
ToolLabHQ is run by Wahab, an independent developer in Lahore, Pakistan. This policy explains which tools store data, which don't, who processes it, and how long it is kept.
1. Tools That Run Only in Your Browser
These tools process everything locally in your browser. Nothing you enter is uploaded or stored on our servers:
- Resume Builder (your resume is saved in your own browser's storage)
- AI Prompt Library
- Life Stats Analyzer
- Older utilities still reachable by direct link: CSV Splitter, PDF Merger, Image Resizer, CGPA Calculator, Age Calculator, Password Generator, Case Converter, Word Counter, Slug Generator, Text Diff Comparator, Plagiarism Checker and Tax Calculator
The QR Code Generator and WhatsApp Link Generator are not on this list: the text you enter is sent to a third-party service, api.qrserver.com, which draws the QR code image.
Some tools download code libraries (for example PDF and ZIP handling) from public CDNs โ cdnjs.cloudflare.com and cdn.jsdelivr.net. Only the library code is downloaded; nothing you enter is sent to them.
2. ATS Resume Checker (Text Sent to an AI Service)
Your resume file stays on your device: your browser reads it and extracts the plain text. That text, together with the job description you paste, is sent to our analysis service, which forwards it to an AI provider โ Google Gemini or Groq โ and returns the result to you.
We do not store your resume text or the job description. Google and Groq process the text under their own terms: Gemini API terms and Groq privacy policy. If you would rather not share a resume with an AI provider, remove personal details such as your phone number and address before checking it.
3. Portfolio Builder (Account Required - Data Stored)
The Portfolio Builder requires you to create an account. When you use this tool, we store:
- Your name, email, and hashed password (for login), in our MongoDB database
- Your portfolio data (bio, skills, experience, education, projects), in our MongoDB database
- Your profile, cover and project images, on Cloudinary
Why we need this: Your portfolio needs a permanent URL that works anytime you share it. Without an account, we wouldn't know which portfolio belongs to you. You can delete your account and all associated data at any time from your dashboard.
4. Wish Generator (No Account - Auto-Delete After 7/14 Days)
The Wish Generator needs no account. Cards are saved by our API server, which is hosted on Amazon Web Services (AWS). When you create a wish card or a Premium card, we temporarily store:
- Recipient name, sender name and your message (and, for Premium cards, your timeline, reasons and surprise), in our MongoDB database
- Photos you upload, on Cloudinary
- A song you upload, on Cloudinary
- Theme, font and occasion choices
Auto-deletion โ When you create a card you choose an expiry of 7 days or 14 days. The shareable link stops working and the card is deleted automatically after expiry.
Deleting a card early: the browser you made a card in remembers it. Open My Cards in that browser to edit or delete it at any time. If you made it somewhere else, contact us with the card link.
If our server cannot be reached when you make a card, the whole card โ photos included โ is packed into the link itself instead. Nothing is stored on our side in that case, and the card exists only wherever that link has been shared.
5. What We Never Store
- Payment information (we don't accept payments)
- Files you open in the browser-only tools listed in section 1
- Your resume text or job description after an ATS check has returned its result
- Your browsing history or activity outside our site
6. Services We Use
- Vercel โ hosts the website and runs the ATS analysis service
- Amazon Web Services (AWS) โ hosts our API server, which saves wish cards and portfolios
- MongoDB โ database for wish cards and Portfolio Builder accounts
- Cloudinary โ stores wish card photos and audio, and portfolio images
- Google Gemini and Groq โ AI providers that analyse ATS Checker text, under their own terms
- Google Analytics โ anonymous usage statistics (section 7)
- Google AdSense โ advertising (section 8)
7. Cookies & Google Analytics
We use Google Analytics to understand how visitors use our site. Google Analytics uses first-party cookies to track anonymous usage data such as page views, time on site, and referral sources. This data is aggregated and cannot identify you personally. You can disable cookies in your browser settings or install the Google Analytics Opt-out Browser Add-on attools.google.com/dlpage/gaoptout.
8. Google AdSense & Advertising
We display advertisements through Google AdSense to pay for the site. Google AdSense may use cookies to serve personalized ads based on your browsing history.
Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to our website or other websites.
You may opt out of personalized advertising by visitingGoogle's Ad Settings. For more information, see Google's Privacy Policy atpolicies.google.com/privacy.
9. Children's Privacy
ToolLabHQ is not directed to children under the age of 13. We do not knowingly collect any information from children under 13 years of age. If you believe a child has provided us with personal information, please contact us immediately.
10. Your Rights & Data Deletion
You have the right to:
- Delete your Portfolio Builder account and all associated data from your dashboard
- Delete a wish card early from My Cards, in the browser you made it in
- Ask us to delete any data we hold about you (we respond within 7 days)
Wish cards are deleted automatically after your chosen expiry period (7 or 14 days) โ you don't need to do anything.
11. Changes to This Policy
We may update this Privacy Policy occasionally. Changes will be posted on this page with an updated date. Continued use of our site after changes are posted means you accept the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or want to request data deletion: