Privacy Policy

We try to know as little about you as we can while still running a reliable service. Most of the data described here is technical and tied to a request, not to your identity.

• Device and browser signals — operating system, browser type and version, screen size, and rough language preference.
• Service-level events — which tool ran, how long it took, whether it succeeded, and error stack traces. These help us catch bugs.
• Network signals — your IP address and a derived fingerprint, used to enforce free-tier limits and block abuse.
• Account information when you sign in (planned) — email address, profile name, and subscription status if you upgrade to a paid plan.

Most tools on YalaTools are pure browser tools — your file is opened, transformed, and downloaded again without ever touching our servers. A handful of tools need server processing because the underlying conversion cannot run in a browser at usable speed (HEIC conversion and certain Office-to-PDF flows, for example). When that happens, the file is processed on a server we run, returned to you, and then deleted.

• Browser-only tools never transmit your file anywhere — it stays on your device the entire time.
• Server-side tools receive the file over an encrypted connection, convert it, return the result, and delete the source and output immediately afterward.
• We do not keep long-term copies of uploaded files, do not index their contents, and do not use them to train any AI model.
• Logs from server-side tools record technical metadata only (file size, duration, success or error) — never the file contents.

We use a small amount of storage in your browser to remember your preferences and let some tools work offline. We also use lightweight analytics to understand which tools people rely on and where things break.

• Language and theme preferences are saved locally so the site looks the same next time you open it.
• Your recent file history (when you use it) lives only in your browser and is never sent to us.
• Privacy-friendly analytics may record page views, tool runs, and error events — aggregated and without third-party advertising cookies.
• You can clear all local YalaTools storage at any time using your browser settings.

We share information only with the vendors needed to actually run YalaTools — and only the minimum each one needs. We do not sell personal data, and we do not share it for cross-site advertising.

• Hosting and server compute providers process traffic and run server-side tools on our behalf under data-processing agreements.
• Payment processing for future paid plans will be handled by a regulated provider that receives only the billing details it needs to take payment.
• When you click an outbound link or use a tool that integrates a third-party API (such as image search), that provider receives the request directly and applies its own privacy policy.
• We may disclose information when we are legally required to (court order, regulatory request) or when we believe it is necessary to protect the service or its users from harm.

You decide what you put into YalaTools and how. Depending on where you live, you may also have formal rights over the personal data we hold about you — for example under GDPR, UK GDPR, or similar laws.

• You can stop using any tool at any time and clear all locally-stored data through your browser settings.
• For tools that require server processing, prefer the browser-only alternatives if your file is sensitive.
• When accounts launch, you will be able to request access to or deletion of the personal data linked to your account from your profile settings or by contacting us.
• You can always reach us at info@yalatools.com with privacy questions, data requests, or complaints.

YalaTools is built for general productivity use and is not directed at children. We also are not equipped to safeguard regulated categories of personal information, so please keep that kind of content off the platform.

• The service is not intended for children under the age of 13. If you believe a child has provided us personal data, contact us and we will delete it.
• Do not upload government identity documents, banking credentials, full payment card numbers, medical records, or other data regulated under GDPR Article 9, HIPAA, or PCI DSS.
• If sensitive personal data reaches our systems despite this policy, we will delete it as soon as we become aware and accept no liability for processing it.