Privacy Policy

AIDToolStack (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aidtoolstack.com and use our services.

1. Information We Collect

1.1 Information You Provide

• Account information (name, email address) when you create an account via Clerk authentication
• Tool submissions including tool name, URL, description, and your contact email
• Reviews and ratings you submit for tools, AI products, or MCP servers
• Newsletter subscription email address
• Any information you voluntarily provide through forms or communications

1.2 Information Collected Automatically

• Basic analytics data: page views, referral source, browser type, and device type via privacy-respecting analytics
• Server logs including IP address, request timestamps, and user agent strings (retained for a maximum of 30 days)

1.3 Information We Do Not Collect

• Data processed by our in-browser developer tools. All tool computations (JSON formatting, JWT decoding, regex testing, etc.) run entirely in your browser. No input data is ever transmitted to our servers.
• Third-party tracking cookies for advertising purposes
• Biometric data, financial information, or government identifiers

2. How We Use Your Information

• To provide and maintain our services
• To process tool submissions and publish reviews
• To send newsletter updates you have subscribed to
• To improve our platform based on aggregate usage patterns
• To respond to your inquiries and support requests
• To detect and prevent fraud or abuse

3. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following limited circumstances:

• Service providers: We use Clerk for authentication, Hetzner for hosting, Stripe for payment processing, and Beehiiv for newsletter delivery. These providers process data only as necessary to provide their services and maintain their own GDPR compliance.
• Legal requirements: We may disclose information when required by law or in response to valid legal process.
• Public reviews: Reviews and ratings you submit are displayed publicly with your display name.

4. Data Retention

We retain your account data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us at [email protected]. Server logs are automatically purged after 30 days. Newsletter subscription data is retained until you unsubscribe.

5. Cookies and Tracking

We use only essential cookies required for authentication and theme preferences. We do not use third-party advertising cookies or cross-site tracking. Our analytics solution is privacy-respecting and does not use cookies to track individual users across sessions.

6. GDPR Compliance (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides you with specific rights regarding your personal data.

6.1 Legal Basis for Processing

• Consent: When you subscribe to our newsletter or create an account
• Legitimate interest: For analytics, fraud prevention, and platform improvement
• Contract performance: To provide the services you have requested (account features, premium subscriptions)
• Legal obligation: When required by applicable law

6.2 Your GDPR Rights

• Right of access (Art. 15) — request a copy of your personal data
• Right to rectification (Art. 16) — correct inaccurate or incomplete data
• Right to erasure (Art. 17) — request deletion of your data (“right to be forgotten”)
• Right to restrict processing (Art. 18) — limit how we use your data
• Right to data portability (Art. 20) — receive your data in a machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7) — withdraw consent at any time without affecting prior processing
• Right to lodge a complaint — file a complaint with your local supervisory authority

6.3 International Data Transfers

Your data may be transferred to and processed in countries outside the EEA/UK, including the United States. We ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the European Commission. Our service providers (Clerk, Hetzner, Stripe) maintain their own GDPR compliance documentation.

6.4 Data Protection Officer

For GDPR-related inquiries, contact our data protection contact at [email protected]. We will respond to all requests within 30 days as required by the GDPR.

7. CCPA Compliance (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your CCPA rights

To exercise these rights, email [email protected] with the subject “CCPA Request.” We will verify your identity and respond within 45 days.

8. Security

We implement appropriate technical and organizational security measures to protect your personal data. All data in transit is encrypted via TLS. Database access is restricted to authorized personnel only. Authentication is handled by Clerk, which provides enterprise-grade security including MFA support.

9. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a new “Last updated” date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: