Gitruck Toolbox Privacy Policy

This page is also available in 中文.

Last updated: October 14, 2026 · Effective: October 14, 2026

1. Introduction

This Privacy Policy applies to Gitruck Toolbox (同合智创工具箱, the "Toolbox"), a collection of web-based creative tools provided by Guangzhou Tonghe Shantian Culture Media Co., Ltd. and its affiliates ("we", "us"), and to signing in to a Gitruck Cloud account with WeChat or Google.

The Toolbox uses your Gitruck Cloud account: once signed in, it shares the same account, credit balance and API key with the Gitruck Cloud console and the gtrk CLI. Most tools send the files you submit to the Gitruck Cloud engine running on our servers; that processing is also governed by the Gitruck Cloud Engine Privacy Policy. This policy focuses on what is specific to the Toolbox: sign-in, browser storage and usage statistics.

2. Our commitments

• We do not sell your data or use it for advertising.
• Files are uploaded only when you submit a task. Tools labelled "Runs in browser" never upload your files.
• Your Google account is used for sign-in only. We only receive basic profile information (account ID, name, profile picture, email address). We never access your Gmail, Drive, contacts, calendar or any other Google data.
• We do not use your content to train models.

3. Information we process

3.1 Sign-in information

• WeChat sign-in: after you confirm in WeChat, we receive your user identifier under our WeChat Official Account (openid / unionid), nickname and avatar, to create or identify your Gitruck Cloud account and display your profile.
• Google sign-in: after you consent on Google's authorization page, we receive your Google account ID (sub), name, profile picture URL, email address and whether Google has verified that email. We use it to create or identify your Gitruck Cloud account and to display your name and avatar. Your email is saved to your account only if the account has no email yet and Google reports it as verified, and is used for account-related notices. We never use your email to look up or merge other accounts.
• Session: after sign-in we store a session token in an httpOnly cookie. It is valid for 30 days and renews while you keep using the service; signing out invalidates it. Sessions on different devices are independent.

3.2 Files and parameters you submit: when you submit a task, the files and parameters required for that task are uploaded to the Gitruck Cloud engine and the result is returned for preview and download. Uploaded files and results are kept for about 60 days on the server (reusing the same file restarts the period) and then deleted automatically. This is not a storage or backup service; please download the results you need.

3.3 Tools that run in your browser: some tools (labelled "Runs in browser") process files entirely in your browser; those files are never uploaded to our servers.

3.4 Browser storage: so that you can see task progress and results after reloading, the Toolbox stores task records (file name, thumbnail, settings, status, result download link) and resumable-upload session records in your browser's localStorage. It never stores file contents or your API key there (the API key is kept in memory only while the page is open). You can clear finished tasks in the Task Center or remove everything by clearing your browser data.

3.5 Logs and usage statistics: to keep the service secure and reliable, bill correctly and troubleshoot, our servers record access and task logs (IP address, time, tool used, task status and duration, error codes, data volume). We analyse these records in aggregate (for example, usage and success rate of each tool, and approximate country or region inferred from IP addresses) to understand demand and improve the product. As of the date above, the Toolbox web pages contain no third-party analytics, advertising or tracking components; if we add any, we will update this policy and notify you prominently first.

3.6 Credits and payments: the credits required are shown before a task runs. Credit deduction, top-ups and invoices are handled in the Gitruck Cloud console under the Gitruck Cloud Engine Privacy Policy.

4. Use of Google user data

4.1 Gitruck Toolbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.2 Specifically, Google user data is used only for sign-in and displaying your account as described in 3.1. It is not sold, not used for advertising, not used to train any artificial intelligence or machine learning models, and not transferred to third parties except as necessary to provide the service (such as cloud infrastructure), to comply with law or for security. No human reads it unless you explicitly consent, or it is required for security purposes or by law.

4.3 You can revoke the Toolbox's access at any time on your Google Account third-party connections page. After revoking, you can no longer sign in with that Google account, but your existing Gitruck Cloud account is not affected. To delete your account and related data, contact us as described in section 8.

5. Sharing and disclosure

5.1 We do not sell or rent your personal information.

5.2 To provide the service, the following third parties process your information to the extent necessary: cloud infrastructure providers (such as Tencent Cloud) hosting our servers and storage; Tencent (WeChat) when you sign in with WeChat; Google when you sign in with Google (also subject to Google's privacy policy); and payment providers (such as WeChat Pay and Alipay) when you top up in the Gitruck Cloud console.

5.3 We disclose information only when required by law or by competent judicial or administrative authorities. In a merger, acquisition or bankruptcy involving personal information, we will require the new holder to remain bound by this policy.

6. Storage location and retention

6.1 Our servers are located in the People's Republic of China. If you use the Toolbox from outside China, your information will be transferred to and processed in China.

6.2 Account information is kept while your account exists and deleted or anonymised after you close it (unless the law requires otherwise). Uploaded files and results are kept for about 60 days. Logs are kept for at least 6 months, and transaction records for at least 3 years, as required by Chinese law.

7. Security

We use HTTPS; keep the session token in an httpOnly cookie that page scripts cannot read; never write your API key to browser storage; use one-time, short-lived values during Google sign-in to prevent forgery and replay; and restrict access to data on our servers. No security measure is perfect, however.

8. Your rights

You may access, correct or delete your personal information, withdraw consent and close your account by contacting us at the address below; we will respond within 15 working days after verifying your identity. Data in your browser storage is under your control and can be cleared at any time (see 3.4). See 4.3 for revoking Google access.

9. Children

The Toolbox is intended for creators with full legal capacity. If you are a minor, please read this policy with your parent or guardian and use the Toolbox only with their consent. We do not knowingly collect personal information from children under 14 (or the minimum age required in your country); if we learn we have done so without guardian consent, we will delete it promptly.

10. Changes

We may update this policy. If we materially expand the information we process (for example, adding third-party analytics or receiving more data through a sign-in method), we will notify you prominently rather than only updating this page. Continuing to use the Toolbox after an update means you accept the revised policy.

11. Contact us

Guangzhou Tonghe Shantian Culture Media Co., Ltd. · Room D240, No. 36 Daguan South Road, Tianhe District, Guangzhou, China · Email: business@migotimes.com

If the Chinese and English versions differ, the Chinese version prevails.