This policy explains what information GetXtra Tools (“we”) processes when you use this website, and why.
Your files
The PDF and image tools on this site process your files locally in your browser. Files you open in a tool are not uploaded to our servers, and we cannot see them. When you close the page, the data is released by your browser. Only the AI tools send the image or text you give them to our server and to the AI provider that processes it; nothing is kept after the result is returned.
Accounts
If you create an account we store your name, e-mail address, a secure hash of your password (none if you sign in with Google), your optional profile picture and time zone, the date of your last sign-in and the IP address it came from. For your security page we keep the browsers you are signed in with and a login history (browser, operating system and the first part of the IP address only). If you turn on two-factor authentication, its secret is stored encrypted and recovery codes only as hashes. We use this information only to provide your account, to keep it secure and to contact you about it.
Tool usage, history and favourites
When a tool finishes, your browser tells us which tool was used and how many files — never the files or their contents. For visitors without an account this is only added to an anonymous daily total. For accounts we keep a daily count per tool (shown as “this month” in your account). A detailed history of the tools you used is kept only if you switch it on in Account → History, and file names only if you switch that on too; switching history off deletes it. Favourite tools are stored with your account, or in your browser’s local storage when you are not signed in.
Payments
Payments are handled by our payment providers (Stripe, PayPal or Razorpay); we never see or store your card details. We keep the plan, amounts, dates and receipts, and the name and e-mail address on each payment for our accounts, also after an account is deleted where the law requires it.
Support tickets and notifications
When you open a support ticket we store your messages, the files you attach (only our support team and you can open them) and the ticket’s status. Our team may add internal notes to a ticket. Notifications about replies, payments and security events are shown in your account; you choose in Account → Notifications which ones are also e-mailed, except security alerts, which are always e-mailed. Deleting your account deletes your tickets, their files and your notifications.
Sign in with Google
If you choose “Continue with Google”, Google tells us your Google account ID, name and e-mail address and whether Google has verified it. We do not receive your Google password or access anything else in your Google account.
Deleting your account
You can delete your account at any time in Account → Delete account. This removes your profile and everything linked to it; only anonymous totals (such as “a tool was used 5 times that day”) and payment records needed for accounting remain.
Contact form
Messages you send through the contact form (name, e-mail address, subject, message, IP address and browser type) are stored so we can answer you and protect the form against abuse. We may turn a message into a support ticket to answer it.
Cookies and advertising
- Session cookie — keeps you signed in during your visit and protects forms against forgery. It expires when you close the browser.
- “Remember me” cookie — only if you choose it at sign-in; keeps you signed in for up to 30 days.
- Trusted-device cookie — only if you choose “Don’t ask again on this device” at the two-factor step; skips the code on this device for 30 days.
- Ad consent cookie — only where ads are shown; remembers whether you accepted or declined advertising cookies (6 months).
- Announcement cookie — remembers that you closed an announcement at the top of the page.
If ads are shown on this site, they come from Google AdSense and are only loaded after you accept them in the cookie banner (where consent is required); Google and its partners may then use cookies to show and measure ads. You can change your choice at any time with “Cookie settings” at the bottom of the page. Paid plans without ads never load them. Your light/dark theme choice is saved in your browser’s local storage and never sent to us.
Server logs
Like every website, our web server may keep short-lived technical logs (such as IP address and requested page) to keep the service secure and working.
Your rights
You can ask us to show, correct or delete the personal data we hold about you through the contact form.
Changes
If we change this policy, we will update the date at the top of this page.