Privacy,
in plain English.

idcardtools ("we", "our", "us") is a free, browser-based document toolkit based in Bangalore, India. We provide PDF tools, ID card printing, and AI-powered document processing.

This policy explains what data we collect, why we collect it, how long we keep it, and what rights you have. It applies to everyone who visits idcardtools.com.

The short version: we don't sell your data, we don't run ads, and we delete your files within 2 hours.

We collect the bare minimum needed to run our service:

• 01
  Files you upload

  Only for tools that require server processing (OCR, AI Summarizer, PVC card printing). Browser-based tools never upload anything.
• 02
  Account information

  If you sign up, we store your name and email. Passwords are hashed with bcrypt.
• 03
  Order information

  For PVC card orders: shipping address, phone number, and payment confirmation (no card details).
• 04
  Basic usage logs

  IP address, browser type, and error logs — used only to prevent abuse and fix bugs. Deleted after 30 days.

We do not collect: browsing history, device fingerprints, location beyond city-level, or any data from your files.

Your data is used for exactly four purposes:

• 01
  To deliver the service

  Process your files, print your cards, and ship your orders.
• 02
  To communicate

  Order updates, security alerts, and (rarely) product announcements — with a one-click unsubscribe.
• 03
  To keep the platform safe

  Detect abuse, prevent spam, and protect our infrastructure.
• 04
  To improve the product

  Anonymized, aggregated statistics only. Never tied to your identity.

Every file you upload to idcardtools is automatically and permanently deleted within 2 hours of processing. This is not a marketing promise — it's enforced by an automated cron job that runs every 15 minutes.

Account data (name, email, hashed password) is retained as long as your account is active. You can delete your account at any time from the settings page, and all associated data is purged within 7 days.

We share data with exactly three types of third parties — all vetted, all necessary to run the service:

• 01
  Payment processors

  Razorpay and Stripe handle payments. We never see your card details.
• 02
  Cloud infrastructure

  AWS Mumbai region for file processing. Files are encrypted at rest.
• 03
  Shipping partners

  Delhivery and India Post receive only your name, address, and phone for card delivery.

We do not sell your data. We do not share your data with advertisers, data brokers, or any government agency unless legally compelled.

We use only the cookies required to keep you logged in and to protect against CSRF attacks. No tracking cookies. No third-party pixels. No advertising IDs.

If you disable cookies in your browser, you can still use every tool on this site — you just won't be able to stay logged in.

Under Indian data protection law, you have the right to:

• 01
  Access

  Request a copy of all data we hold about you.
• 02
  Correct

  Fix any incorrect information in your account.
• 03
  Delete

  Delete your account and all associated data at any time.
• 04
  Export

  Download your order history and account data as JSON or CSV.
• 05
  Object

  Opt out of any non-essential communication.

To exercise any of these rights, email us at privacy@idcardtools.com. We respond within 7 business days.

Questions about this policy? Reach out to our Data Protection Officer: