Who we are
This Privacy Policy explains how personal data is collected and used when you visit https://aitoolsdirectory.si (the "Website"), subscribe to our newsletter or submit a tool for listing. The Website is operated by AI Tools Directory ("AI Tools Directory", "we", "us"), which is the controller of your personal data.
You can contact us about privacy at any time at [email protected].
We aim to collect as little data as possible. We do not run advertising, we do not sell personal data and, at the time of writing, we do not use analytics or marketing cookies.
What data we collect
1. Tool submissions
When you submit a tool we collect: the tool name, website address, category, pricing model, a short pitch, an optional description, your email address and, optionally, your X (Twitter) handle. We also record the plan you chose. Most of this describes a product and will be shown publicly if the listing is approved. Your email address and X handle are not displayed publicly.
2. Orders and payment records
For each submission we create an invoice number and store the plan, amount, payment status, payment method (PayPal or USDT) and any transaction reference you send us so that we can match your payment to your order. We do not collect or store bank card numbers: payments are made outside this Website, with PayPal or by cryptocurrency transfer.
3. Newsletter
If you subscribe, we store your email address, a confirmation token, the date you confirmed and an anonymised network identifier used to limit abuse. We send a confirmation email first (double opt-in). We only email you the newsletter after you click the confirmation link.
4. Messages you send us
If you email us, we keep your message and our reply to deal with your request and, where relevant, to document corrections or disputes.
5. Technical and security data
Like most websites, our servers and hosting provider process technical data when you visit: IP address, date and time, requested page, referring page, browser and device information and error logs. We use this to deliver the Website, keep it secure and investigate abuse. For forms, we also compute a one-way, keyed hash of your IP address (we do not store the raw address in our application database) so that we can limit repeated submissions and block spam.
6. Cookies
We use a single strictly necessary session cookie to protect forms against abuse. See the Cookie Policy.
Why we use your data and our legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Review, publish and manage your tool listing; communicate about your submission | Submission data, email, order data | Performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b)) |
| Invoicing, payment matching and accounting | Order and payment records | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Send the newsletter | Email address, confirmation data | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Security, spam prevention and rate limiting, fraud prevention | Technical data, hashed network identifier | Our legitimate interests in protecting the Website and its users (Art. 6(1)(f)) |
| Answering your emails and handling corrections or complaints | Your messages and contact details | Legitimate interests and, where relevant, contract (Art. 6(1)(f), (b)) |
| Operating, maintaining and improving the Website | Technical data | Our legitimate interests (Art. 6(1)(f)) |
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not sell or rent personal data.
International transfers
Some of our providers (for example Google and Cloudflare) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on the safeguards recognised by data-protection law, such as an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or standard contractual clauses.
How long we keep data
| Data | Retention |
|---|---|
| Submission data for approved listings | For as long as the listing is published, then until it is removed from the directory and any dispute period has ended. |
| Submission data for rejected or cancelled submissions | Kept for a limited period to prevent repeated abuse and to answer questions, then deleted or anonymised. |
| Order, invoice and payment records | For the period required by applicable accounting and tax law. |
| Newsletter subscriptions | Until you unsubscribe. We keep a minimal record of unsubscribed addresses so that we respect your choice. |
| Rate-limiting hashes | Kept with the related submission or subscription record and not used to identify you. |
| Emails and correspondence | For as long as needed to handle your request and for a reasonable period afterwards. |
| Server logs | For a short period set by our hosting provider, typically weeks. |
Your rights
Depending on where you live, and in particular if you are in the European Economic Area or the United Kingdom, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data, in particular when it is no longer needed or you withdraw consent (subject to legal retention duties).
- Restrict processing in certain situations.
- Data portability for data you provided to us, in a structured, commonly used format.
- Object to processing based on our legitimate interests.
- Withdraw consent at any time, for example by using the unsubscribe link in the newsletter. This does not affect processing before the withdrawal.
- Complain to your local data-protection supervisory authority.
To exercise a right, email [email protected]. We may need to verify your identity first, and we will answer within the time limit set by law (normally one month).
Residents of the United States
Residents of certain US states may have rights to know, access, correct and delete personal information and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross-context behavioural advertising. You can still send us a request at the address above.
Information you make public
The name, description, pitch, website address and other details of an approved tool listing are published on the Website and can be copied by search engines and other people. Please do not include personal data about yourself or others in those public fields. If you need personal data removed from a published listing, contact us and we will help.
Security
We protect the Website with measures appropriate to the risk, including encrypted connections (HTTPS), restricted and authenticated access to our administration area, input validation, anti-spam controls and keyed hashing of network identifiers. No online service can be completely secure, so we cannot guarantee absolute security. If a personal-data breach occurs that is likely to put your rights at risk, we will notify you and the authorities as required by law.
Children
The Website is intended for adults and professionals. It is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.
Links to other websites
Tool pages link to third-party websites. We do not control those sites and are not responsible for their privacy practices. Read their policies before sharing data with them.
Changes to this policy
We may update this policy, for example when we add a feature or change a provider. The "Last updated" date at the top shows the latest version. If we make significant changes we will take reasonable steps to tell you, and we will ask for consent again where the law requires it.
Contact
Controller: AI Tools Directory
Email: [email protected]
Website: https://aitoolsdirectory.si