Last updated: 17 July 2026
This page explains what ToolBharat (“we”, “us”) collects when you use our website, why we collect it, and what your rights are. We’ve tried to write it the way we’d want a policy explained to us, and to stay aligned with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable Indian law.
We keep this short on purpose. There isn’t much we need:
This is the part we care about most, so we’ll be direct about it. Almost every tool on ToolBharat runs entirely inside your browser. When you merge a PDF, resize an image, or format a CSV file, that work happens on your own device using JavaScript, not on a server we control. The file never leaves your computer or phone. We don’t see it, store it, or have any way to retrieve it, because it was never sent to us in the first place. You can verify this yourself: open your browser’s developer tools, watch the network tab, and use any tool. You won’t see your file go anywhere.
A handful of tools we plan to add later (document format conversions that genuinely need server-side software) will need to receive a file temporarily. When one of those launches, we will say so clearly on that tool’s page, and any file it touches will be deleted automatically within an hour of processing. As of the date at the top of this page, no tool on ToolBharat does this.
We’d like to say everything sits on a server in India, but that wouldn’t be true, so we won’t claim it. Our database runs on Neon, currently hosted in Singapore, which is the closest available region to India that Neon offers today. Our application servers run on Render. Neither company has infrastructure inside India yet. The DPDP Act does not require most personal data to be stored within India (that requirement is limited to specific categories the government may notify separately, which don’t apply to a site like ours), so this is a matter of transparency rather than a compliance gap, but we think you should know regardless.
We use PostHog to count visitors and see which pages get used — nothing more detailed than that. It’s configured deliberately narrow: session recording is off, autocapture (tracking every click and keystroke) is off, and IP addresses are anonymized. We don’t link this data to your account even if you’re signed in, and we don’t use it for advertising, because we don’t run any ads. Separately, we use one essential cookie to keep you signed in if you have an account. There is no third-party advertising on any tool page, and file processing is entirely unaffected by this — PostHog only ever sees which page you’re on, never a file you process. We’re also planning to add Google Analytics and Google Search Console specifically to understand organic search traffic, acquisition channels, and geographic reach — narrower marketing questions PostHog isn’t built to answer well. When that happens, this section will be updated first, and — since Google Analytics sets cookies in a way our current PostHog setup avoids — a cookie-consent banner will ask before it loads, not track first and explain later.
Traffic to ToolBharat is encrypted in transit. Passwords are hashed with argon2id, a modern algorithm designed specifically to resist brute-force attacks, not stored in plain text or with weaker hashing. Access to our production systems is limited to the people who need it.
ToolBharat is meant for adults handling their own documents, taxes, and paperwork. We don’t knowingly collect personal data from anyone under 18 without a parent or guardian’s consent.
We’ll update this page as the product changes, and we’d rather do that often and honestly than write something vague once and never touch it. If a change is significant, we’ll email registered users at least 14 days before it takes effect.
Questions, concerns, or just want to know more about how something works? Write to connect@toolbharat.com or use our Contact page. A real person reads every message.