Privacy Policy

Last Updated: May 11, 2026

1. Introduction

Welcome to TOOL1 Auth Proxy. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how Tulan LTD. ("we", "us", or "our") collects, uses, and shares information when you use our authentication proxy service to connect your WordPress websites with Google services.

By using our services, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal information is:

• Company Name: Tulan LTD.
• Address: Ilcho Dimitrov 7A str., Sofia 1618, Bulgaria
• Tax ID (UIC): 205830754
• Represented by: Angel Astakov
• Email: info@tool1.app

3. Information We Collect

We collect various types of information to provide and improve our services to you:

A. Authentication Data
When you connect a site via Google OAuth, we temporarily receive:

• Google User Email: To identify the connected account.
• OAuth Tokens: Encrypted Access and Refresh tokens to facilitate the connection between your site and Google APIs.

B. Technical & Usage Data

• Site URL: The domain of the WordPress site using the proxy.
• Requested Scopes: The specific Google API permissions requested by your plugin.
• Device Data: IP address and browser type (collected via standard server logs for security purposes).

4. How We Use Your Data

We use your data for the following purposes:

• OAuth Proxying: To act as a secure intermediary for OAuth 2.0 flows, allowing your WordPress plugins to securely access Google APIs.
• Token Management: To securely store and refresh access tokens as requested by your authorized applications.
• Security: To monitor for unauthorized access or abuse of the proxy service.
• Legal Compliance: To comply with tax laws and accounting regulations in Bulgaria and the EU.

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with:

• Google: Data is shared with Google as part of the standard OAuth 2.0 authentication process.
• Legal Authorities: If required by law to comply with a subpoena or similar legal process.

6. Data Retention

We retain your authentication data only for as long as the connection remains active. You can revoke access at any time through your Google Account security settings or your WordPress plugin dashboard.

7. Security

We implement appropriate technical and organizational security measures to protect your personal data, including AES-256 encryption for stored tokens and SSL encryption for all data transfers.

8. Your Rights (GDPR)

Under the GDPR, you have the right to access, rectify, or erase your data. To exercise these rights, please contact us at info@tool1.app.

9. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at info@tool1.app.

11. Google API Disclosure

TOOL1 Auth Proxy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Service User Data Policy, including the Limited Use requirements.