Privacy Policy
This Privacy Policy describes how ToolRent (“we”, “us”, “our”) collects, uses, and protects information when you use https://myunlocktool.tech (the “Service”).
1. Who we are
ToolRent operates an online GSM tool rental and digital services shop. The Service allows registered customers to browse services, place orders, manage wallet balance, and access API credentials. Administrative functions are restricted to authorized staff.
2. Information we collect
- Account information: username, email address, password (stored hashed), wallet balance, and order history.
- Transaction data: services purchased, payment references, order status, and support-related activity logs.
- Technical data: IP address, browser type, session cookies, and server logs used for security and troubleshooting.
- Admin Gmail integration (optional): when a shop administrator connects a Gmail inbox via Google OAuth, we store OAuth tokens and the connected email address solely to read password-reset messages and perform authorized inbox actions (such as moving messages to trash) required for automated account recovery workflows.
3. How we use information
- Provide, operate, and improve the Service.
- Process orders, deliver digital credentials or stock, and manage customer wallets.
- Authenticate users and protect accounts from unauthorized access.
- Send service-related notifications (for example order status or security alerts).
- Allow authorized administrators to connect Gmail for password-reset automation on bound tool accounts.
- Comply with legal obligations and enforce our Terms of Service.
4. Google Gmail API
Our admin panel may request access to a connected Gmail account through Google OAuth with scopes limited to reading mailbox content and modifying messages (for example, deleting or trashing processed reset emails). We do not use Gmail data to serve advertisements, and we do not sell Gmail content to third parties.
Gmail access is used only for operational purposes tied to inventory account recovery and inbox management configured by the shop administrator. Administrators can disconnect Gmail at any time from the admin panel, which removes stored OAuth tokens for that inbox.
Use of Google services is also subject to Google’s Privacy Policy.
5. Cookies and sessions
We use essential session cookies to keep you logged in and to protect forms against cross-site request forgery. These cookies are required for the Service to function and are not used for third-party advertising.
6. Data sharing
We do not sell personal information. We may share data only:
- With infrastructure providers that host the Service (under confidentiality obligations).
- With payment or messaging providers when needed to complete a transaction or notification you request.
- When required by law, court order, or to protect the rights and safety of users and the Service.
7. Data retention
We retain account and order records for as long as your account is active and as needed for accounting, dispute resolution, and legal compliance. Gmail OAuth tokens are retained until the administrator disconnects the inbox or the tokens expire and are refreshed or removed.
8. Security
We use industry-standard measures including HTTPS, hashed passwords, access controls, and restricted admin authentication. No method of transmission or storage is 100% secure; please use a strong unique password for your account.
9. Your rights
Depending on your location, you may have the right to access, correct, or delete personal data we hold about you. Contact us using the details below and we will respond within a reasonable time.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect the latest version. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact
Questions about this Privacy Policy or our data practices: support@myunlocktool.tech