Last updated October 9, 2026
Privacy notice
In short
- We collect your email, password (stored scrambled), payment records and the files you upload.
- Uploads and results are deleted after 24 hours.
- Files are sent to AI providers only to run your job.
- We use one essential cookie to keep you logged in. No advertising or tracking cookies.
- We don’t sell your data.
1. Who we are
[Company legal name] (company number [company number], [registered address]) runs Oddjob Tools and is the controller of your personal data. Contact us about privacy at [contact email].
2. What we collect
| What | Details |
|---|---|
| Account | Email address, password (stored only as a scrambled hash we can’t read), sign-up date, whether your email is confirmed. |
| Credits and payments | Packs bought, amounts, dates, credits spent and refunded. Stripe processes your card; we receive a payment reference, not your card number. |
| Files and results | What you upload, the settings you choose, and the results we produce. These can contain personal data about you or others, such as faces in photos, names in contracts or voices in recordings. |
| Technical | Your IP address, used briefly in memory to limit repeated login attempts, and server logs of requests. |
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Running your account and the jobs you ask for | Contract |
| Taking payments and keeping accounting records | Contract and legal obligation |
| Account emails such as confirmation and password reset | Contract |
| Preventing abuse and keeping the service secure | Legitimate interests |
We don’t use your files to train AI models, and we don’t use your data for advertising.
5. How long we keep it
- Uploads and results: deleted automatically after 24 hours, or straight away when you delete a job.
- Job history (file name, tool, price, date, without the files): while your account is open.
- Account: until you ask us to delete it.
- Payment records: 6 years, because UK tax law requires it.
- Server logs: up to 30 days [confirm].
7. Security
Connections are encrypted, passwords are stored as hashes, each account can only see its own jobs and files, and files are deleted on a schedule. No system is perfectly secure; if something goes wrong that affects you, we will tell you and the authorities as the law requires.
8. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data,
- correct it,
- delete it,
- limit or object to how we use it,
- give it to you in a portable format.
Email [contact email]. We reply within one month. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.
9. Changes
We will update this notice if how we use data changes, and tell you about important changes before they apply.