Version: 1.2.0 Effective Date: 2026-10-23
This Privacy Policy explains what information ToolProof LLC ("ToolProof," "we," "us") collects when you purchase or use the ToolProof desktop application, what we do with it, and the choices you have. We've tried to keep this short and honest. If anything is unclear, email support@toolproof.dev and we'll explain.
ToolProof currently sells only to customers in the United States.
We collect only the information needed to deliver and support your license and to understand how much each licensed computer uses ToolProof. Specifically:
| Data | Source | Why We Need It | Retention |
|---|---|---|---|
| Email address | You, at checkout | Deliver your license key, contact you about your license, respond to support requests | Life of the license; deleted on request |
| Name | Stripe checkout | Associate your license with your purchase, support communications | Life of the license; deleted on request |
| Machine ID (SHA-256 hash) | The Software, at activation | Bind your license to your computer; enforce one license per computer | Life of the license record |
| IP address | Netlify request handling when the Software or your browser contacts us | Rate limiting and abuse prevention; the IP on a trial request is kept with that trial record | Rate-limit counters hold only a request count per IP and roll over hourly; Netlify's own request logs are governed by Netlify's retention |
| Payment metadata (last-4 digits and card brand) | Stripe | Customer-service reference; refund handling | Life of the license |
| Support correspondence | You, when you email us | Respond to and follow up on your request | 2 years from last contact |
| License check-in (license ID, app version, app release date, operating-system platform, time of last check-in) | The Software, at activation and on each check-in | Confirm the license is still active and not revoked, deliver a renewed license to the Software, and show which version each licensed computer is running | Life of the license record; each check-in overwrites the previous one |
| Daily usage counts (for each day the Software is used on a computer: the number of G-code programs verified, setup tickets printed, and PDFs exported) | The Software, with each license check-in | Show how much each licensed computer uses ToolProof, so we can support your shop and plan improvements to the Software | At most the 400 most recent days of counts for each license |
The Machine ID is a one-way SHA-256 hash derived from one or more hardware identifiers on your computer. On Windows it is computed from the Windows installation identifier (the MachineGuid registry value) combined, where available, with the system firmware (SMBIOS) UUID, salted and hashed on your computer before it is sent. It cannot be reversed to identify your specific hardware, and it is not used for tracking outside of license validation. Where a hardware identifier cannot be read, the Software falls back to the installation identifier alone.
We deliberately don't collect a lot of things you might expect a software vendor to collect. Specifically:
win32), and the daily usage counts described below. The check-in reply tells the Software whether the license is still active and, after a renewal, delivers the renewed license so you do not have to re-enter it. If there is no connection the Software keeps working from its last known state. Our server stores the check-in fields in a per-license record (Netlify Blobs) that is overwritten on each check-in, the daily usage counts in a separate per-license record, and the Machine ID hash in the license record for the life of the license. No file names, program text, tool data, or anything else about your work is included in these requests.We use a small number of third-party service providers to operate ToolProof. Each is named below, with a link to its own privacy policy.
We do not use any third-party analytics, advertising networks, social media tracking pixels, or marketing automation systems.
We use your information only to:
We do not use your information for marketing without your separate consent, and we do not sell or rent your information to anyone.
We retain your license records (email, name, machine ID) for as long as your license is active, so that we can support you and validate your license. If you request deletion (see Section 7), we will deactivate your license and delete personal data within thirty (30) days, except where we are required by law to retain certain records (for example, tax records).
Our server keeps at most the 400 most recent days of daily usage counts for each license. On your computer, counts our server has not yet received are kept for at most 85 days.
Per-IP rate-limit counters hold only a request count and roll over hourly. The IP address recorded with a trial request is kept with that trial record.
Support email correspondence is retained for two (2) years from your last contact, then deleted.
We use industry-standard practices to protect your data, including encryption in transit (TLS) for all network requests, encryption at rest for backend records, and access controls limiting who at ToolProof can view personal data. No system is perfectly secure, however, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal data, we will notify you as required by applicable law.
You have the following rights regarding your personal information:
To exercise any of these rights, email support@toolproof.dev. We will respond within thirty (30) days. We may need to verify your identity before fulfilling certain requests.
Although ToolProof is a U.S.-national business and not specifically targeted at California, we honor the rights granted by the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA") for California residents. Specifically, if you are a California resident, you have the right to:
To exercise these rights, contact us at support@toolproof.dev. We do not knowingly discriminate against users who exercise their privacy rights.
ToolProof is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
ToolProof currently sells only to U.S.-based customers. If you access the Software from outside the United States, you are doing so at your own initiative, and your information will be processed in the United States.
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered customers at the email address on file at least thirty (30) days before they take effect, or as soon as reasonably practicable for changes required by law. Non-material changes (for example, clarifications or formatting improvements) will be reflected by updating the version and effective date at the top of this Policy.
For privacy questions or to exercise any right described above:
ToolProof LLC Email: support@toolproof.dev Web: toolproofcnc.com
End of Privacy Policy, version 1.2.0.