Privacy Policy
We collect what we need to do the job you asked for, and no more. We do not sell your information. We do not run ads or tracking on this website. You can ask us to delete your information at any time: email us and Craig deletes it by hand. Section 7 says exactly what we keep and why.
1. Who we are
The Human Toolbox is a sole proprietorship run by Craig Soles in Vancouver, British Columbia, Canada. This policy covers thehumantoolbox.com and the tools we run with it: the contact form, call booking, the shop, secure document links, DragnPost (dragnpost.co), the Ask Eddie website and socials audit, and the live session studio. In this policy "we" and "us" mean The Human Toolbox.
You can reach us about anything in this policy at thehumantoolbox2026@gmail.com.
2. What we collect, and why
| What | When | Why |
|---|---|---|
| First name and email | You fill in the contact form. | To answer you and send the link to book a call. |
| Call booking details (name, email, time) | You book through Calendly. Calendly has its own privacy policy and we do not control how it handles your data. | So we know who is coming and when. |
| Audit details: name, email, company, website address, social handles, your answers and the finished report | You ask for an Ask Eddie audit. | To make your report and send it to you. |
| Account details: name, email, sign-in, and the content you add to your account | You open a DragnPost account. | To run the account and the tools you use. |
| Payment records | You pay by card through Stripe. | To take payment, give receipts and keep the records Canadian tax law requires. Stripe collects your card details directly. We never see or store your full card number. |
| Payout and tax details, for session hosts and affiliates we pay | You sign up to be paid by us. | To pay you and to report the payments as Canadian tax law requires. |
| Shop order details, including a shipping address in Canada or the United States | You buy something from the shop. | To fill and ship the order. |
| Recordings, clips and photos | You take part in a recorded session or upload your own material. | To make the recording or clip you asked for and give it to you. |
| Connection details for a social account you connect (see section 5) | You choose to connect Instagram, Facebook, YouTube or TikTok. | To post or publish for you, when you tell us to. |
| Secure link views: time, IP address and browser | You open a one-time link we sent you. | To enforce the link's view limit and expiry. |
We do not collect payment card numbers, government ID numbers or health records through this site.
3. Cookies and what your browser keeps
- Your look settings. The accent colour you pick is saved in your own browser so the pages remember it. It never leaves your device.
- Sign-in. If you sign in to DragnPost, a sign-in cookie keeps you signed in for up to 30 days.
- Referral links. If you arrive on dragnpost.co through a referral link, we save the referral code in a cookie for 30 days so the referral is credited.
- Calendly. The booking calendar on our call page is Calendly's. It may set its own cookies under its own policy.
We do not run advertising trackers or analytics trackers on thehumantoolbox.com.
4. How we use your information
- To answer you, book calls and run the sessions you sign up for.
- To make and deliver the audit, recording, clip or product you asked for.
- To take payment, send receipts and pay session hosts and affiliates.
- To send the business email that goes with all of that: confirmations, receipts, reports, reminders and notices about your account.
- To keep the site safe and fix problems.
We do not sell your information. We do not share it with anyone for their own marketing. We do not use it for advertising. We do not train AI models of our own on what you give us. The providers named below handle what we send them under their own terms.
5. Social accounts you connect
If you connect an Instagram, Facebook, YouTube or TikTok account, you sign in on that platform's own screen and say yes there. We never see your password for that account.
What we store. For a connected Instagram account through Facebook sign-in, we store the Facebook Page and Instagram account identifiers and username, the permissions you granted, and an access token. The token is encrypted before it is saved (AES-256-GCM). It is never shown in a page. For YouTube, we store an encrypted refresh token. Some connections are held for us by our connection provider, Composio, which stores the token for the platform you connected.
What we do with it. We use a connection to publish or post what you tell us to post, to start a live broadcast you set up, and to read the basic details of your own account that those tools need. We ask only for the permissions that work needs. We do not use it for advertising, we do not sell it, and we do not hand it to anyone else.
Google. The Human Toolbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We also send our own business email through the Gmail API from our own business inbox, using only the permission to send. That permission cannot read, search or delete anyone's mail.
Disconnecting. You can take our access away at any time in that platform's own app and permissions settings. To have us delete the connection details we hold, email us or follow the steps on our data deletion page. Craig deletes them by hand.
6. Who else handles your information
These companies handle information for us, to run the business. We send each of them only what the job needs.
- Supabase: our database and sign-in.
- Vercel: hosts this website and the DragnPost app.
- Cloudflare: stores uploaded and delivered files, and carries live video.
- LiveKit: runs the live video rooms in the studio.
- Stripe: card payments and payouts.
- Resend and Google (Gmail API): send our email.
- Calendly: call booking.
- Composio: holds social account connections for the platform you connected.
- Anthropic, OpenAI and ElevenLabs: we send the text, audio or images needed to write your audit report, make transcripts, captions and images, and read narration aloud.
- Twilio: text and phone messages to us about the business.
We may disclose information if the law requires it, or to protect the safety of people or the business. We will not hand anything over without a legal reason.
7. How long we keep it
We do not run an automatic deletion timer today, so we do not promise one. Your information stays until you ask us to delete it. When you ask, Craig deletes it by hand and we finish within 30 days at the latest. The steps are on our data deletion page.
Two kinds of record are kept even after you ask:
- Payment and tax records. Kept for 6 years because Canadian tax law requires it, and only what a payment record needs.
- Signed waivers and consent forms. Kept, because they protect you and us if there is ever a dispute.
Anything else personal is deleted when you ask, not archived.
8. Your choices
- See what we hold. Ask us for a copy of what we hold about you.
- Fix it. Tell us what is wrong and we will correct it.
- Delete it. Ask us to delete your information. We finish within 30 days at the latest. The steps are on our data deletion page.
- Stop the email. Tell us and we stop emailing you, apart from receipts and notices that go with something you bought.
Email thehumantoolbox2026@gmail.com for any of these.
9. How we protect it
- Our database is private. The public cannot read it, and access is limited to our own services and Craig.
- Social account tokens are encrypted before they are saved.
- Our own passwords and keys are stored on the server, never in the pages you load.
No system is perfectly secure.
10. Children
Our services are for adults, 18 and over. We do not knowingly collect information from children. If you think a child has given us information, email us and we will delete it.
11. Changes
If we change how we handle your information in a way that matters, we will change the date at the top of this page and say so on the page.
12. Contact
The Human Toolbox, Vancouver, British Columbia, Canada. thehumantoolbox2026@gmail.com.