Privacy Policy

Summary

We collect very little. Nothing on this site profiles you across other sites, and we do not sell personal data to anyone, ever. What the site does load is set out under Cookies and similar technologies below.

The only personal information we routinely collect is what you type into the contact form, and we use it to answer you.

Our free tools process everything inside your browser. Text you paste into them is never transmitted to us or to anyone else.

Who we are and how to reach us

Twinsoft Innovations FZE is a company licensed by the Sharjah Publishing City Free Zone Authority in the United Arab Emirates, with its registered office at Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. Our trade licence number is provided on request and appears in every client contract.

We are the data controller for personal information collected through this website. For any privacy question, request or complaint, write to hello@twinsoftinnovations.com and mark it for the attention of the privacy contact. We answer within 30 days.

What we collect

Contact enquiries: your name, company, email address, the service and budget range you select, and the message you write. Providing a company name is optional.

Server logs: our hosting provider records IP addresses, timestamps, requested URLs and user-agent strings as a normal part of serving a website. These are used for security and troubleshooting and are retained for a short period by the provider.

Anti-spam: the contact form uses Cloudflare Turnstile to distinguish people from bots. Turnstile is designed to work without profiling visitors or tracking them across sites. It receives technical signals from your browser to make that assessment.

Free tools: nothing. Text entered into the array converter or JSON formatter is processed by JavaScript in your browser and never leaves your device. You can confirm this by disconnecting from the network — the tools continue to work.

We do not knowingly collect data from children, and this site is not directed at them.

Why we process it, and on what legal basis

To answer your enquiry and, where relevant, prepare a proposal. Under the GDPR this is your consent, given when you tick the consent box and submit the form, and our legitimate interest in responding to business enquiries. Where we go on to work together, processing is necessary to perform our contract with you.

To keep the website secure and available. This is our legitimate interest in preventing abuse, spam and attacks.

To meet legal obligations, including UAE commercial, tax and anti-money-laundering record-keeping requirements where an engagement proceeds.

How long we keep it

Enquiries that do not lead to a project are deleted within 24 months.

Where we enter into a contract, records are kept for the period required by UAE commercial and tax law, which is currently five years from the end of the relevant financial period, and then deleted.

Server logs are retained by our hosting provider for a short period, typically no more than 30 days.

Backups are rotated on a defined schedule, so data deleted from live systems is removed from backups within that cycle rather than persisting indefinitely.

Who else sees it

We do not sell, rent or trade personal data. We share it only with the service providers necessary to run the business, each acting on our instructions under a data processing agreement: our form-handling provider, our email provider, our hosting and content delivery provider, and Cloudflare for bot protection.

We may disclose information where we are legally required to, or to establish, exercise or defend legal claims.

Client project data is separately covered by the confidentiality terms of the relevant engagement and by any non-disclosure agreement in place.

International transfers

We are based in the United Arab Emirates and our providers may process data in other countries, including within the European Economic Area and the United States.

Where personal data of individuals in the EEA or the United Kingdom is transferred outside those areas, we rely on the appropriate safeguards permitted under Article 46 of the GDPR, principally the European Commission's Standard Contractual Clauses, incorporated into our agreements with those providers.

Where personal data is transferred outside the United Arab Emirates, we do so in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing provisions.

Your rights

Wherever you are, you may ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict how we use it, object to our processing, or ask for it in a portable machine-readable format. Where we rely on consent, you may withdraw it at any time; that does not affect processing carried out beforehand.

If you are in the European Economic Area or the United Kingdom, these rights arise under the GDPR and UK GDPR, and you have the right to complain to your national supervisory authority.

If you are in the United Arab Emirates, these rights arise under Federal Decree-Law No. 45 of 2021, and you may complain to the UAE Data Office.

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect and why, to request deletion or correction, and to opt out of sale or sharing. We do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioural advertising, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights. Residents of other US states with comparable privacy laws have equivalent rights and may exercise them the same way.

To exercise any right, email hello@twinsoftinnovations.com. We may ask you to confirm your identity so that we do not disclose your data to someone else. There is no charge, and we respond within 30 days.

Cookies and similar technologies

This site loads Google AdSense. Its script is present on every page because Google requires that, but advertisements themselves appear only on the free tools pages. Ads are requested in non-personalised mode, which means Google is told not to build or use an advertising profile of you: ads are chosen from the content of the page and your approximate location, not from your browsing history.

Non-personalised advertising still uses cookies or similar storage, for frequency capping, aggregated reporting and fraud prevention. Where the law requires consent for that — in the EEA, the UK and Switzerland — you will be asked before anything non-essential is set, and you can change or withdraw that choice at any time.

We measure traffic with Cloudflare Web Analytics, which is cookieless. It records page views and referrers in aggregate. It does not fingerprint your device, does not follow you across sites, and does not identify you.

Cloudflare Turnstile may set a short-lived token in connection with the anti-bot check on the contact form. It is strictly necessary for that security function and is not used to track you.

The free tools themselves run entirely in your browser. Whatever you paste, upload or generate in them is never sent to us, and advertising has no access to it.

Security

The site is served over HTTPS with HTTP Strict Transport Security, a strict Content-Security-Policy and a set of hardening headers. It is a static site with no database and no server-side application code, which removes most classes of attack.

Access to enquiry data is limited to those who need it. Client credentials are held in encrypted storage and never in source control.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours where the GDPR requires it, notify the UAE Data Office as required under UAE law, and inform you directly without undue delay where the risk to you is high.

Changes to this policy

We will update this page if our practices change and revise the date shown above. Material changes affecting existing clients will be communicated directly rather than left to be discovered.