Gitruck Toolbox

Gitruck Toolbox Privacy Policy

This page is also available in 中文.

Last updated: November 2, 2026 · Effective: October 14, 2026

1. Introduction

This Privacy Policy applies to Gitruck Toolbox (同合智创工具箱, the "Toolbox"), a collection of web-based creative tools provided by Guangzhou Tonghe Shantian Culture Media Co., Ltd. and its affiliates ("we", "us"), and to signing in to a Gitruck Cloud account with WeChat or Google.

The Toolbox uses your Gitruck Cloud account: once signed in, it shares the same account, credit balance and API key with the Gitruck Cloud console and the gtrk CLI. Most tools send the files you submit to the Gitruck Cloud engine running on our servers; that processing is also governed by the Gitruck Cloud Engine Privacy Policy. This policy focuses on what is specific to the Toolbox: sign-in, browser storage and usage statistics.

2. Our commitments

3. Information we process

3.1 Sign-in information

3.2 Files and parameters you submit: when you submit a task, the files and parameters required for that task are uploaded to the Gitruck Cloud engine and the result is returned for preview and download. Uploaded files and results are kept for about 60 days on the server (reusing the same file restarts the period) and then deleted automatically. This is not a storage or backup service; please download the results you need.

3.3 Tools that run in your browser: some tools (labelled "Runs in browser") process files entirely in your browser; those files are never uploaded to our servers.

3.4 Browser storage: so that you can see task progress and results after reloading, the Toolbox stores task records (file name, thumbnail, settings, status, result download link) and resumable-upload session records in your browser's localStorage. It never stores file contents or your API key there (the API key is kept in memory only while the page is open). You can clear finished tasks in the Task Center or remove everything by clearing your browser data. In addition, when you switch the interface language yourself, we store a language preference cookie (`gt_lang`, containing only a language code such as `en-US`, valid for one year) so that links without a language open in the language you chose.

3.5 Logs and usage statistics: to keep the service secure and reliable, bill correctly and troubleshoot, our servers record access and task logs (IP address, time, tool used, task status and duration, error codes, data volume). We analyse these records in aggregate (for example, usage and success rate of each tool, and approximate country or region inferred from IP addresses) to understand demand and improve the product.

3.6 Website usage statistics (self-hosted, not third-party): since October 17, 2026, the Toolbox pages load an analytics script that we host on our own servers (the open-source software Umami) to understand how often each tool is opened, has files chosen, is used, succeeds, fails or is abandoned, and how people sign in. It records the page you visit (without the query part of the URL), the referring site, browser and operating system type, screen size, interface language, approximate country or region inferred from your IP address, and the tool, task status, error code, ranges of file size and processing time, file extension, the number of files chosen, why a file was rejected (such as an unsupported format or exceeding the length limit), and the sign-in method (WeChat or Google). When you are signed in it also includes an obfuscated ID of your account, so that use of the same account on different devices is counted together. It uses no cookies, does not store IP addresses, and never records file names, file contents or anything you type. The data is not shared with any third party, and raw records are deleted after 3 years. The Toolbox pages contain no third-party analytics, advertising or tracking components.

3.7 Feedback: when you click "Report a problem" on a task and send it, we receive the text you write, the type of problem, and the task ID, tool, error code and interface language, used only to investigate and improve the product. Please don't include personal details such as phone numbers.

3.8 Credits and payments: the credits required are shown before a task runs. You can top up on this site or in the Gitruck Cloud console. Payments made with WeChat Pay or Alipay are processed by them. Overseas payments are processed by the Merchant of Record you choose, Waffo or Anyway: the card number, billing address and other payment details you enter on its checkout page are collected by it and its payment partners. We receive order information (order number, amount, currency, payment status, its payment ID and similar), and we give your email address to it when creating the order, so the checkout is pre-filled and it can send your receipt. We never see or store your full card number. When you pay with PayPal, you sign in and pay on PayPal's pages, and your PayPal account and card details are collected by PayPal. We receive the order number, amount, currency, payment status and PayPal's payer ID. We do not store the name, email address or address from your PayPal account, and we do not give your email address to PayPal. Credit deduction, top-ups and invoices are governed by the Gitruck Cloud Engine Privacy Policy.

4. Use of Google user data

4.1 Gitruck Toolbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.2 Specifically, Google user data is used only for sign-in and displaying your account as described in 3.1. It is not sold, not used for advertising, not used to train any artificial intelligence or machine learning models, and not transferred to third parties except as necessary to provide the service (such as cloud infrastructure), to comply with law or for security. No human reads it unless you explicitly consent, or it is required for security purposes or by law.

4.3 You can revoke the Toolbox's access at any time on your Google Account third-party connections page. After revoking, you can no longer sign in with that Google account, but your existing Gitruck Cloud account is not affected. To delete your account and related data, contact us as described in section 8.

5. Sharing and disclosure

5.1 We do not sell or rent your personal information.

5.2 To provide the service, the following third parties process your information to the extent necessary: cloud infrastructure providers (such as Tencent Cloud) hosting our servers and storage; Tencent (WeChat) when you sign in with WeChat; Google when you sign in with Google (also subject to Google's privacy policy); payment providers (WeChat Pay and Alipay when you top up on this site or in the Gitruck Cloud console; Waffo and Anyway, our Merchants of Record, and their payment partners for overseas payments; PayPal when you pay with PayPal); and an image-editing model service, only when you choose Redraw in Image Watermark Remover: that image is sent to a third-party model service outside mainland China to be regenerated, and the result is returned to the Gitruck Cloud engine and kept as described in 3.2. We do not give that service your account information.

5.3 We disclose information only when required by law or by competent judicial or administrative authorities. In a merger, acquisition or bankruptcy involving personal information, we will require the new holder to remain bound by this policy.

6. Storage location and retention

6.1 Our servers are located in the People's Republic of China. If you use the Toolbox from outside China, your information will be transferred to and processed in China. Exceptions: when you choose Redraw, that image is transferred to a third-party model service outside mainland China for processing (see 5.2); payment details for overseas payments and PayPal payments are processed by Waffo or Anyway and by PayPal respectively, possibly outside mainland China, and kept according to their own privacy policies.

6.2 Account information is kept while your account exists and deleted or anonymised after you close it (unless the law requires otherwise). Uploaded files and results are kept for about 60 days. Logs are kept for at least 6 months, and transaction records for at least 3 years, as required by Chinese law.

7. Security

We use HTTPS; keep the session token in an httpOnly cookie that page scripts cannot read; never write your API key to browser storage; use one-time, short-lived values during Google sign-in to prevent forgery and replay; and restrict access to data on our servers. No security measure is perfect, however.

8. Your rights

You may access, correct or delete your personal information, withdraw consent and close your account by contacting us at the address below; we will respond within 15 working days after verifying your identity. Data in your browser storage is under your control and can be cleared at any time (see 3.4). See 4.3 for revoking Google access.

9. Children

The Toolbox is intended for users aged 18 or older and is not directed at minors (see section 2.5 of the Terms of Service). We do not knowingly collect personal information from minors; if we find that an account belongs to a minor, we close it and delete the related information. If you believe we have collected a minor's information, please contact us.

10. Changes

We may update this policy. If we materially expand the information we process (for example, adding third-party analytics or receiving more data through a sign-in method), we will notify you prominently rather than only updating this page. Continuing to use the Toolbox after an update means you accept the revised policy.

11. Contact us

Guangzhou Tonghe Shantian Culture Media Co., Ltd. · Room D240, No. 36 Daguan South Road, Tianhe District, Guangzhou, China · Email: business@gitruck.com

If the Chinese and English versions differ, the Chinese version prevails.