Privacy policy

Who we are

ToolGenX is owned and operated by Melike Günaydın, software engineer — a Turkish sole proprietorship registered in Ümraniye, İstanbul (Alemdağ Tax Office). She is the data controller under GDPR and KVKK. The site is developed and maintained by İsmail Günaydın, software engineer. For data protection questions, email support@toolgenx.com.

What we collect

• Workbook signups: when you request a free workbook, we store your email, which workbook you asked for, the time, your IP address and browser user-agent. The IP and user-agent help us block abuse of the form. If you tick the box for updates, your email is also added to our mailing list.
• Purchases: this site takes no payments and has no accounts. Products are bought on Gumroad or Polar and books on Amazon. Those platforms collect your order and payment details under their own privacy policies and share with us only what they need to (for example your email and what you bought).
• Analytics: aggregate page views and Web Vitals through Plausible, which does not set cookies and does not identify individuals. If you accept the cookie banner, also Google Analytics 4: pages viewed, device and browser type, approximate location, and a pseudonymous cookie ID (IP anonymised).

Why we collect it (legal basis under GDPR + KVKK)

• To send you the workbook you asked for (Art 6(1)(b)).
• Mailing list emails and Google Analytics only on your consent (Art 6(1)(a)), which you can withdraw at any time (unsubscribe link in each email, Cookie settings in the footer).
• To answer support and refund requests about products you bought.
• For our legitimate interest in preventing abuse of the signup form and improving the site. You can object, see “Your rights” below.

Who we share it with (data processors)

• Supabase (EU region): database for workbook signups.
• Gumroad: payment and delivery for products bought on Gumroad. Card data stays with Gumroad.
• Polar (Polar.sh, merchant of record): payment and delivery for products bought on Polar. Card data stays with Polar.
• Resend: email (the workbook download email and, if you opted in, the mailing list).
• Vercel (Frankfurt region): hosting + edge network.
• Plausible: analytics. No cookies, no personal identifiers.
• Google Analytics (Google Ireland Ltd.): analytics, only after you opt in. Sets cookies; advertising features off. See the cookie policy.
• Sentry: error tracking. IP truncated, no payload bodies.

Where your data lives

Primary storage is in the European Union (Supabase EU, Vercel Frankfurt). Payment data is handled by Gumroad, Polar and Amazon, which are US-based, under their own policies. We do not transfer identifiable data outside these regions for marketing purposes.

How long we keep it

• Workbook signups and mailing list: until you unsubscribe or ask us to delete them.
• Support and refund emails: as long as needed to handle the request.
• Analytics: Plausible keeps aggregates only. Google Analytics (opt-in) keeps event data for 14 months.

Your rights

Under GDPR + KVKK + UK Data Protection Act + CCPA + similar laws, you can:

• Access the data we hold about you.
• Correct it if it is wrong.
• Delete it (“right to be forgotten”) — except records we must keep for legal compliance.
• Export it in a portable format.
• Withdraw consent for processing where consent is the legal basis.
• Lodge a complaint with your supervisory authority (e.g., KVKK, ICO, CNIL).

Send any request to support@toolgenx.com. We aim to respond within 7 days, must respond within 30.

Children

ToolGenX is not directed at children under 16. If you believe a minor gave us their email, email us and we will remove it.

Changes

We update this policy when our processors, jurisdictions, or features change. Material changes are emailed to active customers at least 14 days before they take effect.