Effective and last updated: August 25, 2026. This Policy applies to the 120365 Tools website, account system, online tools, AI features, payments, and support services. For personal information whose purposes and means we determine directly, the data controller is 120365 Tools. Send privacy and data-rights requests to help@120365.org. We do not publish a registered address or Data Protection Officer on this page. Please read this Policy before using the Services. If we make a material change, we will, where reasonably possible, give at least 15 days' notice through a page announcement, in-service notice, or your registered email and will update the date above.
We may collect: (1) account and contact information you provide, such as username, nickname, email, encrypted password credentials, avatar, profile details, and support communications; (2) information shown on the authorization screen and approved by you when using Google, GitHub, QQ, or another provider to sign in or link an account, such as a provider identifier, name, avatar, and email—we do not receive the provider password; (3) text, prompts, images, PDFs, files, queries, comments, submissions, public-source material, and task results sent to a tool; (4) order, amount, currency, payment-channel, payment-status, transaction-identifier, Coin, point, and entitlement records, while we generally do not store a complete card number, card security code, or third-party payment password; (5) IP address, browser, device and operating-system type, language, time zone, access time, feature usage, cookies, local storage, request logs, errors, and security events; and (6) images, location candidates, and necessary map-query information when you actively use location inference, maps, or similar features. Do not submit unnecessary sensitive information, another person's confidential information, or data you are not authorized to process.
We process information as reasonably necessary to create and maintain accounts; authenticate sign-ins and linked accounts; perform tool and AI tasks; preserve history you choose to retain; display content you choose to publish; send verification codes and billing, security, and policy notices; process orders and entitlements; provide support; prevent fraud and abuse; review content; troubleshoot; improve performance; produce aggregated or de-identified statistics; and comply with law. Where required, our legal bases include performing our service contract with you, your consent, legitimate interests in security and product improvement, and legal obligations. We do not sell or rent personal information, use it for personalized advertising without consent, or send marketing messages without a lawful basis. Opting out of marketing does not stop necessary billing, security, or service notices.
We use strictly necessary cookies, local storage, or similar technologies to maintain sign-in, language preferences, security, and core features. If analytics or performance measurement is enabled, non-essential technologies that can be limited or disabled where required by law may also be used. Restricting cookies may prevent sign-in or personalized features from working. Third-party identity, Cloudflare captcha, maps, email, hosting, analytics, and payment services process necessary data under their own policies. Available payment channels may include Dodo Payments, PayPal, cryptocurrency payments, and other channels later displayed at checkout. Each channel independently processes relevant payment-account, card, or blockchain information; we generally receive only the status, amount, and transaction identifiers needed to complete an order and credit entitlements. Cryptocurrency transactions may be permanently visible on a public blockchain. No single payment provider is described as our exclusive channel; actual availability is shown at checkout.
Inputs submitted to non-public tools or AI features are used only to perform the task you request, preserve results you choose to retain, maintain security, and troubleshoot technical issues. Unless you explicitly consent, we do not by default use non-public inputs to train our own or a third party's general-purpose AI models. To complete a request, inputs and outputs may be sent to selected third-party AI model or infrastructure providers and are subject to their data-processing terms. AI outputs may be inaccurate, so avoid submitting sensitive information beyond what the task requires. Google Sign-In and Google API data is used only within the permissions shown during authorization for authentication, account creation or linking, account security, and features you explicitly request. We do not sell it, use it for advertising, or permit human access except to provide a requested feature, address security or technical issues, comply with law, or work with aggregated and anonymized data. Our use and transfer complies with the Google API Services User Data Policy, including Limited Use requirements, and you may revoke access in your Google Account.
We disclose limited information only as needed for the purposes above to cloud computing, storage, email, captcha, security, identity, AI model, map, payment, analytics, and support providers that are subject to appropriate contractual, confidentiality, or data-protection obligations. We may also disclose information at your direction or with your consent, during a corporate reorganization, or when lawfully required by courts, regulators, or law-enforcement authorities. Nicknames, avatars, comments, submissions, public files, and other content you choose to publish may be visible to other users, search engines, and third-party archives. We or our providers may process information outside your region. Where applicable law requires it, we use Standard Contractual Clauses, recipients with an adequate level of protection, or another lawful transfer mechanism together with safeguards proportionate to the risk.
Account information is generally retained while the account is active. After closure, account data that is no longer needed enters deletion or anonymization processes within up to 90 days. Support communications are generally kept for 2 years; security audit logs for up to 12 months; and transaction, refund, accounting, and audit records as required for tax, fraud prevention, disputes, and applicable law, generally for no more than 7 years. Task inputs and files may be temporary during processing or retained when you enable history, synchronization, public publishing, or archive features, as explained by the relevant feature and your choices. Backup copies are removed through normal rotation. We use encrypted transport, access controls, least privilege, audit logging, backups, and reasonable security monitoring, but no online service can guarantee absolute security. If a security incident requires notice by law, we will notify affected users and regulators within the applicable period.
Subject to applicable law, you may request information about processing; access, correction, a copy, deletion, restriction, or machine-readable portability of personal information; object to processing based on legitimate interests or marketing; withdraw consent; and close your account. Withdrawal does not affect processing already completed lawfully. Send requests to help@120365.org. To protect accounts, we may require reasonable identity verification and will normally respond within 30 calendar days or the period required by law. You may also revoke linked-account access with the relevant provider and complain to your local data-protection or consumer-protection authority. The Services are intended primarily for users aged 18 or older. A person under 18 may use them only with a guardian's prior consent and supervision, and the guardian is responsible for account activity and payments. A guardian who discovers information submitted without appropriate consent should contact us for deletion.
Send privacy, access, deletion, account, security, billing, or general support requests to help@120365.org or use the site's Contact Us page. 120365 Tools does not promise a registered address, telephone number, DPO, or separate specialist mailboxes that have not actually been established. Third-party websites and services have their own privacy policies; this Policy covers information for which we determine the purposes and means of processing. This Policy applies together with the Terms of Service. If a feature provides a more specific privacy notice, that notice and the more protective non-conflicting provisions of this Policy apply.