Last updated: July 5, 2026

---

1. Privacy by Design: Zero Account Retention

RaiseTool is designed with a strict privacy-first model. We do not require accounts, usernames, email addresses, or social logins. When you access RaiseTool, we generate a temporary workspace session linked to an anonymous cryptographic token stored in a secure cookie. We do not collect, profile, or link your activities to your personal identity, device parameters, or IP addresses.

2. Hybrid File Storage & Security Details

Our platform operates on a hybrid processing paradigm to keep your files secure:

• Local Node Server Sandboxing: Most transformations (such as document mergers, code calculations, and system diagnostic operations) are processed locally inside temporary, isolated system folders on our servers. No third-party APIs have access to these files.
• Cloudinary Cloud Synchronization: For files requiring remote access or workspace sharing, we securely synchronize assets to Cloudinary remote cloud storage using TLS 1.3 encryption. Files are stored as anonymized hashes (UUIDs), meaning they cannot be read or linked back to you without the unique session key.

3. The 10-Minute Cascade Deletion (TTL)

We do not believe in keeping user data. To ensure absolute data safety:

• An automated Database Time-to-Live (TTL) scheduler tracks your session activity.
• If your session is idle for **10 minutes**, the system initiates a cascade delete.
• This completely purges your temporary workspace data from our local folders, drops database sessions, and triggers remote API calls to remove any synced Cloudinary media instantly. Once deleted, this data cannot be recovered under any circumstances.

4. Cookies and Local Storage Configurations

RaiseTool uses essential cookies and local storage parameters only:

• Session Cookie (HTTP-only): Authenticates access to your temporary workspace folder.
• CSRF Token Cookie: Prevents unauthorized cross-site scripting actions.
• Theme Value (Local Storage): Stores your UI style choice (theme) locally on your device.

5. Regulatory Compliance & Global Rights (GDPR & CCPA)

Because we do not collect personal data (names, emails, IPs, or location history), the rights to access, edit, or delete personal profiles under GDPR or CCPA do not apply. You have absolute control over your files: you can manually discard all uploaded files and session caches at any time by clicking "Clean Workspace" inside your active panel.

6. Security Audits & Logs

We monitor high-severity system events (such as server errors, input validation failures, or request anomalies) to prevent abuse and block Denial of Service (DoS) attacks. All IP addresses recorded in these security logs are immediately hashed, guaranteeing anonymity.