Privacy Policy

Effective date: 10 September 2026

Last updated: 10 September 2026

This Privacy Policy explains how 99tools collects, uses, shares and protects personal data when you use 99tools.tech, app.99tools.tech and related services (the "Service").

99tools is operated by Individual Entrepreneur Kuznets O.S. (FOP Kuznets O.S.), who acts as the data controller for personal data processed by 99tools through the Service. Third-party payment providers and other service providers may process personal data under their own legal roles, including as independent controllers, joint controllers or processors depending on the applicable arrangement and purpose.

1. Scope

This Policy applies to personal data we process in connection with accounts, website and app usage, support, communications, Service operations and our relationship with users.

It does not replace the privacy notices of third-party services, marketplaces, payment providers or other providers that process personal data for their own purposes.

2. Personal data we collect

2.1 Account and profile data

name or display name;
email address;
account identifiers;
authentication and account-security information;
account preferences and settings.

2.2 Transaction and Credit data

For purchases processed by a third-party payment provider, 99tools may receive transaction metadata needed for fulfillment, reconciliation, fraud prevention, customer support and accounting, such as:

transaction or order identifier;
purchase amount and currency;
number of Credits or product entitlement purchased;
transaction status, refund or dispute status;
purchase date;
buyer email and other buyer details made available to us for fulfillment or support;
country or tax-related transaction information where made available by the provider.

Where checkout and card processing are handled by a third-party payment provider, 99tools does not require or intend to store full payment-card numbers or card security codes.

2.3 User Content and Service data

We may process files and content you upload to provide the Service, including designs, artwork, images, mockup photographs, file metadata and rendering instructions.

We also process operational information such as render history, Credit deductions, generated-output references, feature usage, error logs and support diagnostics.

2.4 Device, log and usage data

IP address;
browser and device information;
operating system;
timestamps;
pages or features used;
referral or source information;
security and diagnostic logs;
cookie and consent information.

2.5 Communications

If you contact us, we may process your email address, message content, attachments and other information needed to respond to your request.

2.6 Marketing data

Where applicable, we may process marketing preferences and information about whether you opened or interacted with marketing communications. We use consent where consent is required by law.

3. Why we use personal data

We may use personal data to:

create and manage user accounts;
provide mockup rendering and other requested Service functionality;
credit purchased Credits and record Credit usage;
fulfill paid transactions and provide product support;
respond to support, privacy, billing and account requests;
detect, investigate and prevent fraud, abuse, unauthorized access and security incidents;
maintain, debug and improve the reliability and usability of the Service;
understand Service usage and performance;
comply with legal, tax, accounting, regulatory and dispute-resolution obligations that apply to us;
send operational notices and Service communications;
send marketing communications where permitted and, where required, with consent;
establish, exercise or defend legal claims.

4. Legal bases for processing

Where the GDPR, UK GDPR or similar law requires a legal basis, our processing may rely on:

Contract: processing necessary to provide the Service you request or take steps before entering into a contract;
Legitimate interests: operating, securing, maintaining and supporting the Service, preventing fraud, understanding performance and protecting our legal rights, where those interests are not overridden by your rights;
Consent: for activities that require consent, such as certain non-essential cookies or marketing communications;
Legal obligation: processing needed to comply with law, lawful requests or regulatory duties;
Legal claims: processing necessary to establish, exercise or defend legal rights where applicable.

The applicable basis depends on the purpose, data and jurisdiction.

5. Payment providers and payment data

Paid transactions may be processed by a third-party payment provider, payment processor, authorized reseller or Merchant of Record. The applicable provider will be identified or made available at or before checkout.

Depending on the arrangement and applicable law, a payment provider may independently process payment and buyer data under its own privacy notice and may share transaction data with 99tools where needed for product fulfillment, order processing, fraud prevention, reconciliation, accounting, refunds, disputes or support.

A privacy request made to 99tools applies to personal data controlled by 99tools. It does not automatically require deletion or alteration of data independently controlled by a third-party payment provider. You may need to contact that provider separately for data it controls.

6. How we share personal data

We do not sell personal data in the ordinary meaning of selling a customer list for money.

We may disclose personal data to the following categories of recipients when reasonably necessary:

payment providers, payment processors, authorized resellers or Merchants of Record, for transaction fulfillment, invoicing, tax handling, refunds, fraud prevention, reconciliation, disputes and buyer support;
hosting, cloud, storage and infrastructure providers, to operate the Service;
email and support providers, to send Service communications and handle requests;
analytics and measurement providers, where enabled and permitted by applicable law;
security, anti-fraud and monitoring providers, to protect the Service;
professional advisers, such as lawyers, accountants and auditors, subject to appropriate confidentiality obligations;
authorities or other parties, where disclosure is required by law, legal process or necessary to protect legal rights, users or the Service;
a purchaser, investor or successor, in connection with a merger, acquisition, financing, reorganization or sale of all or part of the business, subject to applicable law.

Service providers that process personal data on our behalf are expected to process it only for the contracted purpose and subject to appropriate data-protection obligations.

7. International processing and transfers

The Service uses online infrastructure and service providers that may process personal data in countries other than your country of residence.

Where applicable data-protection law requires safeguards for an international transfer, we use an available lawful transfer mechanism appropriate to the transfer, which may include an adequacy decision, standard contractual clauses, contractual safeguards or another legally recognized mechanism.

We do not promise that all personal data is stored in one fixed country unless that has been technically and contractually confirmed for the relevant data set.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide the Service, maintain security, resolve disputes and comply with applicable legal, accounting or regulatory obligations.

Retention periods vary by data type. For example:

account data may be retained while the account is active and for a reasonable period afterward where needed for security, support or legal claims;
transaction and financial records may be retained for periods required by law or needed for reconciliation, refunds and disputes;
security and diagnostic logs may be retained for shorter operational periods unless needed to investigate an incident;
User Content may be retained while necessary to provide requested functionality and may remain temporarily in backups after deletion according to normal backup cycles.

Where data is no longer needed, we delete it, anonymize it or otherwise remove it from active use, subject to lawful retention requirements.

9. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. Measures may include access controls, encrypted transport, restricted administrative access, logging, backups and security monitoring appropriate to the Service.

No internet service can guarantee absolute security. You are responsible for using a strong password and protecting your account credentials.

10. Cookies and similar technologies

We use cookies and similar technologies for essential functionality and may use optional analytics, functional or marketing technologies where enabled and permitted.

Where consent is required, non-essential cookies should not be activated until the required consent has been obtained. You can manage available preferences through the cookie-consent interface and, where provided, the Cookie Settings control on the site.

See our separate Cookie Policy for more information. Third-party checkout, payment or customer-service interfaces may also use cookies or similar technologies under the applicable provider's own privacy and cookie information.

11. Your privacy rights

Depending on your location and applicable law, you may have rights to:

request access to personal data we hold about you;
request correction of inaccurate data;
request deletion of data in certain circumstances;
request restriction of processing;
object to certain processing based on legitimate interests;
withdraw consent where processing is based on consent;
receive certain data in a portable format;
opt out of direct marketing;
lodge a complaint with an applicable data-protection authority.

These rights are not absolute and may be subject to legal exceptions.

To make a request relating to data controlled by 99tools, contact support@99tools.tech. We may need to verify your identity before completing a request.

12. Marketing communications

You may unsubscribe from marketing emails using the unsubscribe method provided in the message or by contacting us. You may continue to receive non-marketing Service messages that are necessary for your account, security, transactions or support.

Buyer information received from a payment provider for fulfillment, reconciliation or support is not used for unrelated marketing unless we have an appropriate legal basis, including consent where required.

13. Children

The Service is intended for users who can legally enter into these Terms and is not directed to children. We do not knowingly seek to collect personal data from children who are below the minimum age required to consent to the relevant online service under applicable law.

If you believe a child has provided personal data to us unlawfully, contact support@99tools.tech.

14. Third-party links and services

The Service may contain links to third-party websites, marketplaces or services. Their processing of personal data is governed by their own privacy notices, not this Policy.

15. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, infrastructure, payment providers or data-processing practices. The current version and effective date will be posted on 99tools.tech. Where required by law, we will provide additional notice or request consent for material changes.

16. Contact

Data controller: Individual Entrepreneur Kuznets O.S. (FOP Kuznets O.S.)
Brand: 99tools
Country of registration: Ukraine
Registered/business address: Kharkiv, Traktorobudivnykiv Avenue, 138
Privacy and support email: support@99tools.tech
General inquiries: info@99tools.tech
Phone: +380 98 348 6518
Website: 99tools.tech