Privacy policy

Toolcaise is a product of QC Devworks. We are responsible for the personal information handled for our accounts, website and support. Questions and requests go to hello@qcwebworks.com. Organizations that connect agents are responsible for the information they choose to send and for giving their own people any notices or permissions it requires.

Account and workspace. Your name, email address, workspace name, members and invitations, roles, and plan and billing status.

Contact form and support. When you use the contact form we store your name, email address, company if given, the topic and your message. To limit repeated submissions we also store a keyed hash of your network address; the address itself is not stored. Messages you email us are kept in our mailbox.

Agent supervision data. The operational metadata your integration sends: agent identifiers, heartbeats, schedules, runs, step traces, usage and cost figures, outcome descriptions or artifact links, and the review, approval and control records made about them. For devices running Toolcaise Connect, we also receive the device name, platform, Connect version and health (queue size, dropped events and adapter status).

Alert destinations. The email addresses, Slack webhook addresses and HTTPS webhook addresses a workspace configures, and a history of delivery attempts.

Technical information. Device and browser details, IP address, request logs and error logs, kept for security and reliability.

Earlier product records. Toolcaise previously offered a WordPress site service. That service is retired and collects nothing new, but site and deployment records created while it ran are retained until they are deleted. Email addresses given to an earlier early-access list, which is closed, are kept for product updates until you ask us to remove them.

We use information to operate Toolcaise: to authenticate accounts, show and alert on agent activity, enforce plan limits, bill paid plans, reply to messages, prevent abuse and improve the service. We do not sell personal information.

These providers process personal information for us, under their own service agreements and privacy terms:

• Railway. Hosts the application and its database, where account, workspace and agent data is stored.
• Clerk. Runs sign-up and sign-in: your name, email address and authentication details.
• Stripe. Processes payments for paid plans: billing contact and payment details. We do not receive full card numbers.
• Google Analytics. Measures website use, and only after you accept optional analytics.
• Email delivery (Resend, or the SMTP service we configure). Delivers alert emails when a workspace adds an email destination: the recipient address and the alert content.
• GitHub. Hosts Toolcaise Connect downloads. GitHub receives your download request, including your IP address.

Slack channels and webhook addresses that a workspace adds as alert destinations receive alert content at that workspace’s direction; they are chosen by the workspace, not by us. We may also disclose information where necessary to comply with law, protect rights and safety, or complete a business transfer subject to applicable protections.

Optional Google Analytics loads only with your browser choice. You can accept, reject, or withdraw it using Cookie settings in the footer. Essential storage supports authentication, security, and your saved preference. See the cookie policy for details.

We keep information for as long as it is needed to provide the service, meet legal obligations, resolve disputes, and protect Toolcaise; you can ask us to delete it sooner. Contact form messages are kept so we can follow up with you, and deleted on request. We use administrative and technical safeguards appropriate to the information we handle, but no online service can guarantee absolute security.

Depending on the circumstances and applicable law, we process information to provide a requested service, pursue legitimate interests such as service security and support, meet legal obligations, or act on your consent for optional analytics. Where consent applies, you may withdraw it without affecting earlier lawful processing.

Depending on your location, you may have rights to access, correction, deletion, portability, restriction, or objection, and to complain to your local data protection authority. Contact us to exercise applicable rights. We may need to verify your identity and authority before responding. If your organization supplied the information, contact its workspace administrator as well.

You may ask to access, correct, or delete personal information, or opt out of non-essential product emails. Some information may be retained where required for security, legal, or operational reasons.

Toolcaise is intended for business users and is not directed to children under 13. Information may be processed in countries other than your own where QC Devworks or its service providers operate.

We may update this policy as the product evolves. Material changes will be reflected by a new date on this page. Questions or privacy requests can be sent to hello@qcwebworks.com.