Privacy notice

Last updated: 30 July 2026

Who we are

This website, www.toolkitsoft.com, is operated by SuperFandango SRL, a Belgian company (Enterprise No. 0471.719.611), trading as ToolkitSoft®. You can reach us at info@toolkitsoft.com. This notice explains what personal data we collect when you use this site and its sign-in features, why, and what your rights are.

What we collect and why

When you create a personal account or sign in, we collect:

• Email address — your account identifier; sign-in codes are sent to it and we may use it to contact you about your account. Needed to provide the account.
• Display name — shown to you in the site header so you can see which account you are signed in with.
• Country or region — used by us for market analysis and for planning localized services.
• Job title — used by us for audience analysis: understanding to whom our offerings appeal. You choose what to enter.

If you sign in with a social provider (Google, Facebook, Apple or LinkedIn, as each becomes available), we receive your name and email address as shared by that provider; the provider handles its own login under its own privacy terms.

If you sign in with a company Microsoft account, your identity stays in your employer's directory: we receive sign-in details for your session but do not store an account for you in our customer directory.

When you sign in with a personal account or a company account, your browser reads your Microsoft profile — display name, email address, job title and country — with your explicit consent, which Microsoft asks for once on first use, and sends those fields to us. We record them for the market and audience analysis described above, together with your verified sign-in identity, the sign-in method used and the time of capture, and we refresh them when you sign in again; where your sign-in itself carries a verified email address we record that one. For company accounts the profile comes from your employer's directory and fields are only present where your employer maintains them; you can decline consent, and the rest of the site keeps working.

If you sign in with a personal Microsoft account (for example hotmail or outlook), Microsoft does not release profile details to us. We record the email address and display name your sign-in itself carries, and we ask you to enter your country and job title yourself the first time you sign in. You can change them at any time on the My account page.

The My account page shows you everything we hold about you. The Diagnostics page in the account menu shows technical sign-in information about your own session to help resolve problems; it stores nothing new.

Signing in places an authentication cookie so you stay signed in on this site; it is cleared when you sign out. We do not use advertising or tracking cookies.

Each time you sign in — on this website or in our desktop application — we record a sign-in event in our own security log: the time, the way you signed in, which of the two surfaces it was, your network (IP) address, and the browser or application and language preference your device presented. We keep this log to protect your account and the service: it is how sign-ins that cannot be you, stolen-credential attempts and other misuse are spotted. Attempts that present an invalid credential are recorded the same way. Each sign-in is given a random identifier, and our technical logs refer to your session by that identifier rather than by your name or email address.

We collect nothing else: the site has no analytics trackers, and the only data stores are the account directory, the verified-profile record and the sign-in log described above.

Where your data lives

Personal accounts are stored in a Microsoft Entra customer directory operated for us by Microsoft, with data residency in the European Union (we are based in Belgium). Verified-profile records live in Microsoft-hosted storage belonging to our site, in the same region as the site itself. Microsoft also provides the site's hosting and keeps security and sign-in logs for both our customer directory and our company directory, under Microsoft's data-protection terms. When you use a social sign-in, that provider may process your login data outside the European Union under its own safeguards.

How long we keep it

Account data is kept for as long as your account exists and is deleted when your account is deleted. Our own sign-in log, including the network address, is kept for thirteen months and then deleted. Security and sign-in logs kept by the Microsoft platform follow the retention windows of that platform. The sign-in cookie lasts for your session.

Legal bases

We process your email address, display name and session data because they are necessary to provide the account you asked for (performance of a contract). We process country/region and job title on the basis of our legitimate interest in understanding our market and audience; you are free to object. Security logging rests on our legitimate interest in keeping the service secure.

Your rights

Under the General Data Protection Regulation you can ask us for access to, correction of, or deletion of your personal data; ask us to restrict processing or object to it; and ask for a copy in a portable format. To exercise any of these — including deleting your account and its data — email info@toolkitsoft.com. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or to the supervisory authority of your own country.