Privacy Policy

Last updated: September 7, 2026

This Privacy Policy explains how OhoTool ("OhoTool", "we", "us") collects, uses, and safeguards your information when you visit ohotool.com and use our tools and services. By using OhoTool, you agree to the practices described here.

Information we collect

• Account information — your name and email address when you create an account. Passwords are never stored in plain text; they are kept only as a secure one-way hash.
• Content you create — the QR codes, barcodes, and links you generate and choose to save to your account, along with their settings.
• AI Mock Interview history — when you complete a mock interview, we save its feedback report (scores, strengths, areas to improve, and per-question feedback) to your account so you can track your progress over time. Free accounts keep only the most recent interview; Pro accounts keep the full history and can export it as a PDF. You can delete any saved interview at any time from your dashboard, and we never share it.
• Scan data — for dynamic QR codes, each scan is logged with its timestamp, device/browser type, referring source, and approximate country, so we can show you scan analytics. We do not store full IP addresses.
• Billing information — processed by our payment providers, Paddle (Merchant of Record, for international customers) and Safepay (for customers in Pakistan). We receive your subscription/payment status and limited billing metadata, but never your full card number.
• Usage & analytics data — aggregate, privacy-friendly usage statistics (see "Analytics" below) and basic technical information needed to operate and secure the service.

Free browser tools

Our free utilities (formatters, converters, calculators, generators, and similar) run entirely in your browser. The text, files, and values you enter into them are processed on your device and are not uploaded to or stored on our servers.

How we use your information

• To provide, maintain, secure, and improve the service.
• To process subscriptions and payments.
• To send account-related emails such as verification and password resets.
• To generate scan analytics for your dynamic QR codes.
• To detect, prevent, and respond to fraud, abuse, and security issues.

Analytics

We use Vercel Web Analytics and Speed Insights to understand aggregate traffic and page performance. These are privacy-friendly and cookieless — they do not use cross-site tracking cookies and do not collect personally identifiable information.

We also use Google Analytics (GA4)to measure aggregate traffic. GA4 sets cookies; where your consent is required (see "Your cookie choices" below), these are disabled until you accept. We do not sell your personal data.

Advertising

On our free tier we display ads served by Google AdSense. Google and its partners use cookies and similar technologies to serve and measure ads, including personalized ads based on your prior visits to this and other websites. Third-party vendors, including Google, use cookies to serve ads based on your interests.

We also work with Adsterra, an independent ad network, to serve native banner ads on the free tier while our Google AdSense application is under review. Adsterra is not covered by Google Consent Mode, so its script loads only after you accept non-essential cookies. If you reject, or simply ignore the cookie banner, no Adsterra script is loaded and no Adsterra ad is requested.

• Google's use of advertising cookies is governed by the Google Ads policies.
• You can opt out of personalized advertising in your Google Ad Settings, or opt out of third-party vendor cookies at aboutads.info/choices.
• Pro subscribers see no ads — upgrading removes advertising entirely.

Cookies

We use a strictly necessary session cookie to keep you signed in. On the free tier, our advertising partner Google and its vendors may set cookies to serve and measure ads, as described under "Advertising" above, and Google Analytics sets cookies to measure aggregate traffic. We do not set our own cross-site tracking cookies.

Your cookie choices

The first time you visit, a banner asks whether to allow non-essential (advertising and analytics) cookies. Essential sign-in cookies are always used and cannot be turned off. You can change your choice at any time using the button below.

Cookie settings

We implement Google Consent Mode. For visitors in the EEA, the UK, and Switzerland, advertising and analytics cookies are disabled by default until you accept. Rejecting non-essential cookies means you may see non-personalized ads and are not included in analytics.

Email notifications & updates

When you make a card, you can optionally enter your email to be notified when the card is opened. We store that email only to send that notification. If you also tick the optional box, we may send you occasional product updates (new templates, seasonal cards). Every such email includes an unsubscribe link, and you can opt out at any time. We never sell your email.

Service providers

We share data only with the providers that help us operate OhoTool:

• Supabase — database hosting for your account and saved content.
• Vercel — application hosting and privacy-friendly analytics.
• Paddle — payment processing and subscription management (Merchant of Record) for international customers.
• Safepay — payment processing for customers in Pakistan.
• Resend — delivery of transactional emails.
• Google AdSense — advertising on the free tier (see "Advertising").
• Adsterra — advertising on the free tier, loaded only with your consent (see "Advertising").
• OpenAI — powers our AI tools; text you submit to an AI tool is sent to process that request and is not used to train models.

Each provider processes data only as needed to deliver its service and under its own terms and security commitments.

Data retention

We retain your account information and saved content for as long as your account is active. You can delete individual saved items at any time from your dashboard, and you may request deletion of your entire account by contacting us. Some records may be retained where required for legal, accounting, or security purposes.

International data transfers

Our providers may process and store data in countries other than your own. Where this happens, we rely on those providers' safeguards for lawful international data transfers.

Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address any issues we discover.

Children's privacy

OhoTool is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal data. If you believe a child has provided us information, please contact us and we will remove it.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. To exercise any of these rights, email us at the address below and we will respond within a reasonable time.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Contact

Questions or requests about your privacy? Email us at sharafat.codes@gmail.com.