1. Who we are and what this notice covers
LabelCropTools is an online software service for e-commerce sellers. This policy covers personal information processed through the website, account system, support form, analytics preferences, and payment checkout. It does not control information collected independently by your browser, Google, Razorpay, Cloudflare, or another service under that provider’s own terms.
The operator and grievance contact details configured for the service appear near the end of this policy. If you are acting for a business, you should have authority to provide the business and contact details you enter.
2. Files and document processing
The shipping-label croppers and PDF tools process selected files in your browser. The application does not send PDF or image file bytes, customer names, delivery addresses, tracking numbers, invoice contents, or generated files to its application APIs during normal tool use. Files are read locally, and you choose whether to save the result.
To check plan limits and maintain usage history, the browser sends operational metadata such as the tool used, page and file counts, processing status, and duration. This metadata does not include the document itself or its filename. Do not paste customer or document contents into a support message. Browser extensions, device backups, and your network or hosting providers may handle information outside our application.
3. Information we handle and why
- Account details: name, email address, password hash, and any mobile number, business name, or GSTIN you choose to add. We use these details to create and secure your account, provide support, and administer the service.
- Sign-in details: if you choose Google sign-in, Google returns your name and email address for account creation or sign-in. We do not request access to your Google Drive or contacts.
- Usage and plan records:tool identifiers, page and file counts, job status and duration, and daily usage totals. We use these to apply the limits shown for a plan, diagnose failures, and show relevant account history.
- Payment records: plan, amount, currency, duration, payment status, and gateway order or transaction identifiers. Razorpay collects and processes payment details in its checkout. We do not store full card numbers, CVV values, UPI PINs, or banking passwords.
- Support messages: the name, email, optional phone number, category, subject, and message you submit. These are stored so we can respond and manage the request.
- Device and service data:browser and request information may be processed by our hosting and security providers to deliver pages, prevent abuse, and troubleshoot outages. Optional analytics, when configured, is described below.
4. Cookies, browser storage, and analytics
The service uses cookies needed for sign-in and security. The session cookie is HTTP-only and is set for up to 30 days; temporary Google sign-in state cookies expire after 10 minutes. A separate browser-readable sign-in indicator supports the interface and does not authenticate an account by itself.
Browser storage may remember your theme, analytics choice, and tool-specific preferences such as a shipper name or warehouse address. Those preferences remain on that browser unless you clear its site data.
Google Analytics is optional and loads only if analytics is configured for the site and you choose “Allow analytics.” It receives page-view and performance events for public pages; the application omits URL query strings and does not send document contents. Advertising and personalised-ad signals are disabled in the analytics configuration. Use “Analytics preferences” in the footer to withdraw permission or change your choice. If analytics is not configured, no analytics prompt is shown.
5. Service providers and disclosures
We use service providers to run the product: Cloudflare for hosting, application runtime, and database infrastructure; Google for optional sign-in and, when enabled with your permission, analytics; and Razorpay for payment checkout and transaction processing. They receive information needed for their part of the service and process it under their own terms and applicable agreements. Depending on provider infrastructure and configuration, some technical or account information may be processed outside India.
We do not sell document contents or account information. We may disclose information when required by applicable law, to respond to a valid legal request, or to protect users, the service, and our rights.
6. Retention and account requests
We keep account and usage records while needed to provide the service, enforce plan limits, secure accounts, handle support, and meet legal or accounting obligations. Contact messages are kept while a request is being handled and for a reasonable period afterward. Payment records may need to be retained for accounting, tax, dispute, and fraud-prevention purposes. The service does not currently publish a fixed automatic deletion period for each record type.
You can ask us to access, correct, or delete account information, or raise a privacy concern, using the contact form. Tell us the email address on the account and the request you want to make. We may ask for reasonable information to verify that you control the account. We will assess deletion requests against legal, accounting, security, and dispute-resolution requirements; some records may need to be retained or restricted instead of erased immediately. You can also withdraw analytics consent through the footer preference control. Where another processing activity relies on your consent, you may withdraw it through the same channel used to give it or by contacting us. Withdrawal applies going forward and does not invalidate processing already carried out lawfully.
7. Security and incidents
Passwords are stored as salted password hashes. Authentication uses signed session tokens in HTTP-only cookies, and administrative access is restricted by account roles and additional controls. No internet service or storage system can be guaranteed completely secure. Keep your password private, sign out on shared devices, and contact us promptly if you suspect unauthorised account access. We will handle security incidents and required notifications under applicable law.
8. Children and third-party information
Accounts and paid plans are intended for adults using the service for business or professional purposes. The service is not designed for children. Customer information printed inside a document remains on your device during normal processing, but you are responsible for having authority to handle that information and for protecting the original and output files on your device.
9. Changes to this policy
We may revise this notice when the service or applicable law changes. The “Last updated” date at the top identifies the current version. If a change materially affects how we use personal information, we will provide additional notice where required.
Operator and grievance contact
The service is provided under the LabelCropTools name. Send privacy, billing, or other complaints through the contact page.
The operator should publish its verified legal name, principal business address, named grievance officer, grievance email, and grievance phone here. Use the contact page if you need to reach us.
Consumer grievances are acknowledged within 48 hours, a copy of the complaint as recorded is provided, and the grievance is redressed within one month of receipt, subject to applicable law. If we need more information, we will explain what is needed and keep you informed.