Privacy Policy
How Newtools collects, uses, shares, and protects personal information.
Last updated: · Newtools, Sydney, Australia
This Privacy Policy explains how Newtools (we, us, our) handles personal information when you use:
- our website at newtools.io
- our tools directory and editorial content
- accounts, bookmarks, submissions, and related product features
- our AI assistant and research tools (where offered)
We operate from Sydney, Australia. By using Newtools you acknowledge this policy. If you do not agree, please do not use the service.
Related pages: Terms of Service · Affiliate Disclosure · Security
Contact: support@newtools.io
Plain language
We collect what we need to run a tools directory and product accounts. We do not sell your personal information. AI prompts may be processed by model providers only to generate a response.
1. Who is responsible
Controller / APP entity: Newtools, Sydney, New South Wales, Australia.
For questions about privacy, data access, or deletion:
Email: support@newtools.io
If you are in the European Economic Area (EEA) or United Kingdom, Newtools is the controller of your personal data for the purposes of GDPR / UK GDPR, unless a specific feature says otherwise.
2. Information we collect
2.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Account | Name, email, password hash, profile settings | Sign-up, sign-in, settings |
| Contact | Message content, email address | Contact forms, support email |
| Submissions | Tool URLs, descriptions, notes you send for review | Submit / correct a listing |
| Billing contact | Name, email, company (if provided) | Paid placements or subscriptions |
| Communications | Preferences, support threads | When you contact us or manage email settings |
We do not store full payment card numbers. Card data is handled by our payment provider (see Sub-processors).
2.2 Information collected automatically
When you visit or use Newtools we may collect:
- Device and browser data — IP address, user agent, language, approximate location derived from IP
- Usage data — pages viewed, referring URL, timestamps, feature usage, error logs
- Security and abuse signals — rate-limit counters, failed sign-in attempts, suspicious patterns
- Cookies and similar technologies — see Cookies
2.3 Information from third parties
| Source | What we may receive |
|---|---|
| Social / OAuth sign-in (e.g. Google, GitHub) | Basic profile: name, email, avatar (where the provider supplies them) |
| Payment provider (e.g. Stripe) | Customer ID, subscription status, plan, limited billing metadata — not full card numbers |
| Public websites (listing research) | Public page metadata (title, description, icons) when you or we fetch a tool URL for directory intelligence — we do not treat this as your personal data unless you put personal data on that page |
We do not post, message, or act on your social accounts. OAuth is for authentication only. You can disconnect a provider in settings or with the provider.
2.4 AI assistant and chat data
If you use the AI assistant (signed-in or as offered):
- we process messages you send, generated replies, and related context needed to answer
- if you are signed in, we may store conversation history so chats sync across devices, subject to product controls
- we may keep usage counters (for example messages per day) to enforce limits and prevent abuse
- for web-enabled or URL-based features, content may be fetched from public URLs you provide and processed to draft listing or research output
Do not paste other people’s personal data, passwords, API keys, or secrets you do not want processed by us or our AI providers.
2.5 What we do not intentionally collect
- We do not require sensitive categories of data (health, politics, biometrics beyond passkeys you choose to enrol, etc.) to use the core directory
- We do not knowingly collect personal information from children under 16 (see Children)
3. How we use information
We use personal information to:
- Provide the service — accounts, directory, bookmarks, submissions, AI answers, email delivery
- Secure the service — authentication (including passkeys / 2FA where enabled), fraud and abuse prevention, rate limiting
- Improve Newtools — fix bugs, understand feature usage, improve recommendations and content quality (using aggregated or de-identified signals where practical)
- Communicate — transactional email (sign-in links, security notices, billing), and product updates only where allowed (you can opt out of non-essential marketing)
- Comply with law — legal obligations, lawful requests, enforce Terms, protect rights and safety
- Commercial features — process payments for featured listings, sponsors, or subscriptions where offered
We do not sell, rent, or trade your personal information, and we do not share it with third parties for their own advertising networks.
4. Legal bases (EEA / UK)
Where GDPR or UK GDPR applies, we rely on:
| Basis | Examples |
|---|---|
| Contract | Creating your account, providing the directory and signed-in features you request |
| Legitimate interests | Securing the service, preventing abuse, improving product quality, limited analytics — balanced against your rights |
| Consent | Optional cookies or marketing where consent is required; you can withdraw anytime |
| Legal obligation | Tax, accounting, responding to lawful requests |
You may object to processing based on legitimate interests where the law allows; see Your rights.
5. Australian privacy
We handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), where that Act applies.
- We collect personal information by lawful and fair means, usually directly from you
- We use and disclose it for the primary purpose of providing Newtools, related secondary purposes you would reasonably expect, or as otherwise allowed by law
- You can request access and correction (see Your rights)
- If you are unhappy with our response, you may contact the Office of the Australian Information Commissioner (OAIC) (oaic.gov.au)
6. How we share information
We share personal information only as described below.
6.1 Service providers (processors)
Trusted vendors who process data on our instructions to run hosting, database, email, payments, AI inference, and similar infrastructure. They may not use your data for their own marketing. See Sub-processors.
6.2 Legal and safety
We may disclose information if we reasonably believe it is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of Newtools, our users, or the public.
6.3 Business transfers
If Newtools is involved in a merger, acquisition, financing, or sale of assets, personal information may transfer as part of that transaction and will remain subject to this policy (or a successor policy with equivalent protection).
6.4 With your direction
We may share information when you ask us to (for example exporting data or connecting a feature that requires it).
6.5 What we never do
- Sell personal information
- Share personal information with third parties for their independent advertising
- Allow AI model providers to use Newtools API content to train foundation models where our contracts and provider API terms prohibit that (we select providers and modes consistent with this goal)
7. Sub-processors and service providers
We use providers such as the following. The exact set can change as the product evolves; material changes will be reflected in an updated policy.
| Provider | Role | Typical data |
|---|---|---|
| Vercel | Application hosting, edge delivery, related platform services | Request logs, deployment metadata; content processed to serve pages and APIs |
| Neon | Primary database | Account records, product data, chat history (if stored), listings admin data |
| Resend | Transactional and product email | Email address, message metadata, template content |
| Stripe | Payment processing and subscriptions (when paid features are used) | Billing identity, payment status; card data stays with Stripe |
| AI model providers (via our AI gateway / APIs — e.g. Anthropic, OpenAI, and others we enable) | Generate assistant responses and related AI features | Prompts, context, and outputs needed for the request |
| Firecrawl (optional) | Fetching public web pages for listing / research intelligence | Public URLs and page content you or the system request |
| OAuth providers (e.g. Google, GitHub) | Optional social sign-in | Basic profile fields they return to us |
Integration tokens (if you connect third-party tools in future product features) are intended to be encrypted at rest and used only to perform actions you request. You can disconnect integrations from settings where available.
8. Cookies and similar technologies
We use cookies and similar technologies on Newtools. We do not maintain a separate cookie policy page — this section is the full disclosure. You can also Accept or Reject optional cookies via the banner shown on first visit.
8.1 Essential cookies (always on)
These are needed for the site to work. They do not require optional consent:
| Purpose | Examples |
|---|---|
| Sign-in and security | Session / auth cookies so you stay logged in safely |
| Preferences | Theme (light / dark / system) |
| Consent record | Remembering whether you accepted or rejected optional cookies |
| Abuse protection | Rate limiting and basic security signals |
Blocking all cookies in your browser may break sign-in and other core features.
8.2 Optional cookies (only with Accept)
If you click Accept on the cookie banner, we may use optional cookies or similar technologies to:
- understand basic traffic and product usage (analytics)
- improve performance and feature design
If you click Reject, we do not enable those optional tools. Essential cookies still run.
You can clear site data in your browser to see the banner again and change your choice.
8.3 What we do not do
We do not run third-party advertising cookies for selling ads based on your profile, and we do not sell personal information derived from cookies.
8.4 Changing your mind
Clear cookies / site data for newtools.io in your browser settings, or contact support@newtools.io if you need help.
9. AI processing in more detail
9.1 Why we process prompts
To answer your questions, draft research, help with listings intelligence, and operate rate limits and safety filters.
9.2 Who sees prompts
- Newtools systems (hosting and database) as needed to deliver the feature
- Model and tooling providers that generate or support the response
9.3 Training
- We do not sell your conversations
- We do not use your chats to train our own foundation models
- Third-party providers process prompts to return a response under their API terms; we choose configurations that do not use API data for training where that option exists
9.4 Your controls
Depending on the product UI available at the time:
- delete individual conversations
- clear or edit saved preferences / memory features if offered
- delete your account
Contact support@newtools.io if a control is not available in the UI.
10. International transfers
Newtools is operated from Australia. Personal information may be processed in Australia and in other countries where our providers operate (for example the United States and EU regions used by cloud and AI vendors).
When we transfer personal data from the EEA/UK to countries without an adequacy decision, we use appropriate safeguards required by law where applicable — such as Standard Contractual Clauses — and assess provider security practices.
11. Your rights
11.1 Rights that may apply to you
Depending on your location and the law that applies, you may be able to:
| Right | Meaning |
|---|---|
| Access | Ask what personal information we hold about you |
| Correction | Ask us to fix inaccurate or incomplete data |
| Deletion | Ask us to delete personal information (subject to legal retention needs) |
| Portability | Receive a copy of data you provided, in a common format (where GDPR applies) |
| Restriction / objection | Limit or object to certain processing (where the law allows) |
| Withdraw consent | Where processing is based on consent |
| Complain | Lodge a complaint with a supervisory authority (e.g. OAIC in Australia, or your local EU/UK authority) |
11.2 How to exercise rights
Email support@newtools.io with:
- the email on your account (if any)
- what you are requesting
- enough detail for us to verify you are the right person
We will respond within a reasonable period (and within statutory deadlines where they apply). We may need to verify your identity before acting.
11.3 Marketing opt-out
You can opt out of non-essential marketing emails using the unsubscribe link or by contacting us. Transactional messages (security, billing, account notices) may still be sent.
12. Retention
We keep personal information only as long as needed for the purposes in this policy, including:
- Account data — while your account is active, then a short wind-down period after deletion unless law requires longer
- Support emails — as long as needed to resolve issues and maintain business records
- Billing records — as required for tax and accounting
- Security logs — for a limited period to investigate abuse
- Chat history — until you delete it or your account is deleted, subject to backup cycles
When data is no longer needed, we delete or de-identify it where practical.
13. Security
We use reasonable technical and organisational measures appropriate to the risk, including:
- TLS encryption in transit
- access controls and least-privilege practices for production systems
- encryption of certain secrets and tokens at rest where designed into the product
- rate limiting and abuse controls on sensitive endpoints
No method of transmission or storage is 100% secure. See also our Security page (as published) for a short public overview.
If you discover a vulnerability, email support@newtools.io (or security@newtools.io if published) and we will respond as promptly as we reasonably can.
14. Children’s privacy
Newtools is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
15. Third-party websites and tools
Our directory links to third-party products and websites. Their privacy practices are their own. Review their policies before sharing personal information with them. Affiliate or sponsored relationships are described in the Affiliate Disclosure and do not change this Privacy Policy’s rules on selling personal data.
16. Automated decision-making
Newtools may use automated systems (including AI) to generate recommendations, drafts, or rankings. These features are informational. They are not used to make legal or similarly significant decisions about you without human involvement in a way that GDPR would classify as solely automated decision-making with legal effects. You remain responsible for decisions you make about software tools.
17. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the Last updated date. If changes are material, we may provide additional notice (for example email or an in-product notice) where reasonable.
18. Contact
Newtools
Sydney, Australia
Privacy / support: support@newtools.io
Web: https://www.newtools.io
If you are in Australia and are not satisfied with our response, you may contact the OAIC: https://www.oaic.gov.au.
If you are in the EEA/UK, you may also contact your local data protection authority.