Privacy & Security

How each tool handles your data

Runs in your browser — 85 tools

Your files are processed locally in your browser and never uploaded to our servers. The code runs on your device; nothing you add is sent anywhere.

A few of these tools need bigger program files the first time you use them — the OCR engine and language data (from the jsDelivr CDN), the background-removal AI model (from Hugging Face) and its engine (jsDelivr). Your browser downloads only that code and keeps it cached; your files are never sent with those requests.

Uses your own AI key — 7 tools

These tools extract text in your browser, then send it directly from your browserto the AI provider you choose (Google Gemini, Anthropic Claude, OpenRouter, or your own local model), using your own key. It never passes through PL Tools. The provider's own privacy policy applies to what you send them.

Fetches a web page for you — 1 tool

Browsers can't read other websites directly, so the SEO Checker's server fetches the public page you enter (and its robots.txt) and returns only the report. The address and page aren't stored or logged, and addresses on private, local or reserved networks are refused.

SEO Checker

Resume and Forms & Documents Studios — paid exports

While you edit, your resume and workspaces are saved only in this browser (its local storage and IndexedDB) — they aren't uploaded. When you export a PDF after paying, that one resume or workspace is sent over HTTPS to our server, which makes the PDF and returns it; nothing is kept afterwards. Payments are handled by Razorpay: our server asks Razorpay whether the order was paid and keeps none of the details — we don't have a payment database, and we never see your card number, UPI PIN or bank login. The unlock is a signed code stored in your browser.

Online forms (Form Builder) — stored on our server

When someone publishes a form, the form and every response to it are stored in our database (Postgres, hosted by Neon) so that people can answer and the form's creator can read the answers. Only a browser holding that form's private management key — kept in the creator's workspace — can read, export, close or delete the responses. We store only a fingerprint (hash) of that key.

Answers are checked on our server and then stored as given. We don't log them, read them, sell them or use them for advertising. A form and all its responses are deleted when its creator deletes it, or automatically 30 to 365 days (the creator chooses) after the form was last updated or answered.

If you answered a form:the person who made it decides what to ask and what to do with your answers — contact them about your data. PL Tools doesn't make or endorse users' forms. Never enter passwords, OTPs or card details in a form. To report a form, email us with its link.

What we store

On our side: no accounts, no file library and no document history. The one exception is online forms: a published form and its responses are stored until they're deleted, as described above.

In this browser's IndexedDB(never sent to us except as described above): your Forms & Documents workspaces — including any images you add — and templates you save as your own. If you published an online form, its management key is kept with the workspace (and in local storage as a backup), so keep workspace backup files private.

In your browser only(localStorage — never sent to us): your light/dark theme, your favorites, recently used tools and a small history (the tool, a file name and a time — never file contents), and, if you use the AI tools, your chosen provider, model and API key. Also, only if you use them: the OCR language you picked, and — only when you tick “Remember my business details” in the Invoice Generator — your business name, address, GSTIN, logo, payment details and last invoice number (never customer details or items). Downloaded OCR and AI model files sit in your browser's cache.

Cookies & analytics

PL Tools itself doesn't set tracking cookies and doesn't currently use analytics. When ads are shown, Google AdSense may set advertising cookies — see Advertising below. If we add analytics, it will be privacy-friendly (no cross-site tracking, never file contents) and this page will say so.

Advertising

PL Tools is free because it's supported by a small number of clearly labelled ads from Google AdSense, never placed inside a tool's upload or download flow. Ads never see your files.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.

You can opt out of personalised advertising in Google's Ads Settings, or opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info. Where the law requires it (for example in the EEA and UK), you're asked for consent before personalised ads are shown. Learn more about how Google uses information from sites that use its services.

Third-party services

Vercel hosts the website. Like any web host, it keeps short-lived request logs (such as IP address and browser type) for security and reliability.
Cloudflare provides DNS for our domain.
AI providers — only when you use an AI tool, with your own key, sent directly from your browser.
Razorpay processes payments for paid exports — only when you choose to pay. Its own privacy policy applies to the details you give it.
Neon hosts the database for published online forms and their responses.
Fonts and the PDF engine are served from our own domain — no requests to Google Fonts or public CDNs.

Security

Everything is served over HTTPS.
With no accounts, there are no passwords or profiles to breach.
AI keys stay in your browser. For extra safety, use a key with a spending limit, and remove it from shared computers when you're done.

Contact

Questions about privacy? Email praneeth.thommandru@gmail.com.

Last updated October 2026.