Privacy Policy

Step Tools Unlimited Inc. — Destiny Tool Division ("Destiny Tool," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you interact with our website at destinytool.com and our Destiny Tool iOS mobile application (collectively, the "Services"). By using either platform, you agree to the practices described in this policy.

This policy applies to both the Destiny Tool website (destinytool.com) and the Destiny Tool mobile app for iPhone and iPad distributed through the Apple App Store. Both use the same accounts and the same data infrastructure and are operated by Step Tools Unlimited Inc. — Destiny Tool Division. An account created on one works on the other. Unless otherwise noted, all provisions of this policy apply equally to both.

Our Services are designed for different audiences, each with different levels of access: • General Public — No account required. Anyone may browse the product catalog, view specifications and stock, and use the speeds & feeds calculator without providing personal information. • Customer Accounts — Machinists, shops and other end users may create a free account on the website or in the app (with email and password, Sign in with Apple, or Google). Customer accounts can save tool lists, build a request list and send quote or order requests to a distributor they choose, log Tool Performance Reports, and, where enabled, use PartMatch part analysis. • Authorized Distributors — Approved business partners who are granted access to a private distributor portal. This access includes the ability to view NetSuite order history, manage distributor storefronts, submit quotes, and track shipments. Distributor access is reviewed and approved by Destiny Tool staff or by the distributor's own company administrator. • Internal Admin Users — Destiny Tool employees and administrators who manage site content, product data, distributor access, and platform configuration. Admin access is restricted and role-based.

We collect information in the following ways: Information You Provide: • Account: first and last name, email address, and password (or your Apple or Google sign-in). If you use Sign in with Apple and choose to hide your email, we receive an Apple relay address instead. • Shop profile: company name, city, state/province and country; optionally a phone number, a contact email, job role, shop size, the industries you work in and the materials you cut. • Marketing preference: whether you opted in to marketing emails, and when. • Preferred distributor: the distributor (and, if you choose one, the sales rep or contact) you want requests sent to. • Company contacts you save (for example a purchasing or tool-crib email) so you can send requests to them. • Saved lists, request lists and the requests you send, including quantities, notes, job/PO references and messages. • Tool Performance Reports: the tool, material, machine and cutting data you enter, your ratings and notes, and any photos you choose to add. • PartMatch: CAD part files you upload for analysis (where PartMatch is enabled for your account). • Contact form submissions: name, email, company, phone number, and message content. • Distributor portal: business information associated with your distributor account. Information Collected Automatically: • Website: server log data such as IP address, browser type, pages visited and access times, and anonymous product page view counts used to show popular tools. • Security: app and browser attestation tokens (Firebase App Check, using Apple App Attest in the app) that confirm requests come from our genuine website and app, and short-lived counters used to prevent abuse. • The mobile app does not use advertising or analytics SDKs and does not collect device advertising identifiers, location, or usage tracking data. Information From Third Parties: • Apple or Google: your name and email address when you choose Sign in with Apple or Google • NetSuite ERP: order history and account data for authorized distributors, synced from our business systems • Apple App Store: app download and update activity as reported by Apple

We use collected information to: • Create and operate your account and keep your lists, requests, reports and parts in sync between the website and the app • Authenticate users, verify email addresses, and enforce role-based access controls • Send your quote and order requests to the distributor or company contact you choose (see "Sharing" below) • Publish Tool Performance Reports you choose to share, after review • Analyze CAD files you upload with PartMatch and recommend matching Destiny tools • Respond to contact form submissions and sales inquiries • Enable distributors to access order history, manage storefronts, and submit quotes • Send transactional emails (e.g., email verification, password resets, request copies, access notifications) • Send marketing emails only if you opted in; you can opt out at any time in your account or from any marketing email • Show aggregate statistics to Destiny Tool staff (for example, how many requests each distributor receives) • Protect the Services against spam, fraud and abuse • Comply with legal obligations We do not sell or rent your personal information, and we do not use it for third-party advertising or cross-app tracking.

We share personal information only in these cases: • Your chosen distributor or company contact — When you send a quote or order request, we email it to the distributor (or the sales rep or company contact) you selected. The email includes your name, company, email address, phone number (if provided), city/state, industries, and the tools, quantities and notes on your request, so they can reply to you directly. Order requests are requests to purchase; the distributor confirms price, taxes, shipping and payment with you directly, and no payment is processed by Destiny Tool. • Shared performance reports — If you choose to share a Tool Performance Report, after review it may be shown publicly on the tool's product page with your first name and last initial, industry and state, the cutting data and results, and any photos you added. Your company name is shown only if you choose to include it. Your email address is never shown. • Distributor company administrators — If you request access to a distributor's portal, that distributor's company administrators can see your request and approve or decline it. • Service providers — Companies that run parts of the Services for us (listed below), only as needed to provide them. • Legal — When required by law or to protect the rights, safety and security of our users and business.

We use the following service providers to operate our platform: • Firebase / Google Cloud — Authentication (including Sign in with Apple and Google sign-in), Firestore database, Cloud Storage for report photos and files, App Check, and hosting. Data is stored on Google Cloud infrastructure and is subject to Google's Privacy Policy. • Apple — Sign in with Apple, App Attest, and App Store distribution of the mobile app, governed by Apple's Privacy Policy. • Resend — Delivery of account and request emails (verification, password reset, requests to distributors and your copies). • ToolPath — Feature recognition for PartMatch. CAD files you upload are sent to ToolPath for analysis. Files are used only to analyze your part and stay private to your login. Unsaved analyses are removed after 7 days. • NetSuite (Oracle) — Authorized distributor accounts are linked to our NetSuite ERP system. Order history, account records, and business data are retrieved from NetSuite and displayed within the distributor portal. Stock levels shown in the catalog also come from NetSuite. • OpenStreetMap (Nominatim) and Google Maps — When you search distributors by ZIP code, the ZIP code (not your account information) is sent to a geocoding service to find nearby distributors. Map displays may use Google Maps. We encourage you to review the privacy policies of these services to understand how they handle your data.

We implement commercially reasonable technical and organizational measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include: • Firebase Security Rules enforcing role-based data access, with account data readable only by its owner and authorized staff • Server-side checks for every sensitive action, plus App Check attestation and rate limits to block automated abuse • HTTPS encryption for all data in transit • Email verification for new accounts • Review and approval of distributor and admin account access • Regular review of access controls and permissions No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law: • Account information, lists, reports and saved parts are kept while your account exists • PartMatch analyses you don't save are removed after 7 days • Requests you send are kept as business records of what was sent to which distributor; if you delete your account they are detached from you • Contact form submissions are retained for up to 2 years for business correspondence purposes • Distributor order history is retained in accordance with our NetSuite data retention practices and applicable accounting requirements • Server and security logs are retained for up to 12 months

You can delete your account at any time, in the app (Account → Delete account) or on the website (My Account → Security → Delete account). Deletion is permanent and: • Deletes your login and your profile, saved lists, request list, saved company contacts and preferred distributor • Deletes your private and unpublished Tool Performance Reports and their photos • Deletes your PartMatch parts and uploaded files • Keeps requests you already sent (the distributor received them by email) and published performance reports, but removes your name, company, email and account link from them • If you used Sign in with Apple, revokes the app's access to your Apple ID You can also ask us to delete your data by contacting us at the address below.

The Destiny Tool website and iOS application are intended exclusively for use by business professionals, CNC machinists, engineers, procurement specialists, and industrial distributors operating in the manufacturing industry. Our Services are not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

Depending on your location, you may have the following rights with respect to your personal information: • Access: Request a copy of the personal information we hold about you • Correction: Update your profile at any time in your account, or ask us to correct inaccurate information • Deletion: Delete your account yourself (see "Deleting Your Account") or ask us to delete your information, subject to certain legal exceptions • Portability: Request transfer of your data in a machine-readable format • Marketing: Turn marketing emails on or off at any time in your account • Opt-Out: We do not sell personal information or engage in targeted advertising To exercise any of these rights, please contact us using the information in the "Contact Us" section below. We will respond to verified requests within a reasonable timeframe.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the effective date at the top of this page. For material changes, we may provide additional notice (such as a banner on our website or an email notification to registered users). Your continued use of our Services after the effective date of an updated policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Step Tools Unlimited Inc. — Destiny Tool Division Email: justin@jemtoolsupply.com Website: destinytool.com We take privacy inquiries seriously and will respond promptly.