Privacy policy

1. Who is responsible for your data

aitoolperks.com is operated by Nole AI LLC, a limited liability company registered in the United States, which is the controller of the personal data described here. Questions, requests and complaints go to privacy@aitoolperks.com.

2. The short version

• Browsing the directory needs no account and no personal data.
• Signing in with Google gives us your name, email address and profile picture.
• Creating an account subscribes you to the weekly email, and every issue has a one click unsubscribe.
• Three cookies do the work: your session, your two answers about the company, and a count of which listings you have read in full. Steps you tick on a perk, and a light or dark theme if you pick one, stay in your browser's own storage.
• We do not sell or rent personal data, we run no advertising network, and today we run no analytics or tracking scripts at all.

3. What we collect and why

Account data. If you sign in with Google we receive your name, email address, profile picture and Google account identifier. We use it to keep you signed in, to lift the reading limit, and to send the newsletter. We keep a record of the account in our database: the Google identifier, email address, name, and when you first and last signed in. We do not store the picture. We do not receive or store your Google password, and we ask Google for nothing beyond basic profile and email.

Your answers. If you change the two answers on the home page we store the stage and founding year you choose, so listings can be marked as ones you qualify for. It is optional, it holds no personal detail about you, and it stays in a cookie in your browser rather than in a database of ours. You can clear it with Forget my answers on the home page at any time.

Reading count. We store the identifiers of the listings whose full terms you have opened, so the free allowance of 5 a month can be counted. It records which listings, not who you are.

Ticked steps. When you tick a claim step on a perk page, which steps you ticked is kept in your browser's local storage so the list is still ticked when you come back. It never leaves your browser and we never receive it. Clearing your browser's site data removes it.

Theme. If you pick light or dark with the theme control, that one word is kept in your browser's local storage so the next page opens in it. Choosing to match your device removes it.

Newsletter address. If you subscribe with the form, or sign in, we hold the email address in our database for the purpose of sending the newsletter, with how it was added and when.

Server logs. Our hosting provider records requests, including IP address, user agent, the page requested and the time. These are ordinary security and reliability records, kept for a short period by the provider.

4. What we do not collect

• No payment details. There is nothing to pay for, and we operate no payment flow for readers.
• No advertising or cross site tracking. There is no ad network, no retargeting pixel and no third party tracker on the site.
• No analytics, at present. If we add analytics we will name the provider on this page before it goes live.
• No sensitive categories of data, and nothing we ask for beyond the fields listed above.

5. Cookies we set

All three are first party, are not readable by JavaScript in your browser, and are sent only to this site. None of them is used for advertising or shared with an advertising network.

• Session cookies, set by our authentication library when you sign in. They keep you signed in and protect the sign in form against cross site request forgery. They end when the session does.
• atp_profile, your two answers about the company. Kept for one year unless you clear it.
• atp_read, the identifiers of listings you have read in full. Kept for one month, which is also the period the allowance is counted over.

6. Cookie consent

The three cookies above are strictly necessary for features you asked for: staying signed in, sorting by the answers you gave, and counting a free allowance. The ticked steps in local storage are the same kind: kept only because you ticked them, and only on your device. Under the ePrivacy rules that kind of cookie does not require consent, which is why the site shows no cookie banner. If we ever add a cookie that is not strictly necessary, we will ask first.

7. Outbound links to vendors

Links to a vendor's programme take you to that vendor's site, where their own privacy policy applies. Some of those links are affiliate links, which means the vendor or their affiliate network may set a cookie in order to attribute a signup to us. Where a link can earn us a commission the page says so next to the link, and where it cannot the page says that instead.

We receive no personal data back from an affiliate network about who clicked. What we can see is aggregate, at the level of a signup being attributed.

8. Who processes data for us

Each of these is a processor acting on our instructions. We do not pass personal data to vendors, sponsors or advertisers.

• Google, for sign in. Google authenticates you and tells us your basic profile. Google's own terms and privacy policy govern your Google account.
• JaxSuite, for the newsletter. Subscriber addresses are held there so issues can be sent, and it records ordinary sending events such as deliveries, opens and unsubscribes.
• Vercel, our hosting provider, which serves the site and keeps short term request logs.
• Neon, which hosts our database of accounts and newsletter subscribers, in the United States.

9. Where data is held

We are a United States company and our providers are based in or operate from the United States, so personal data is processed there. If you are in the United Kingdom, the European Economic Area or Switzerland, transfers rely on the standard contractual clauses or another lawful transfer mechanism offered by the provider concerned.

10. Why we are allowed to hold it

If you are in the United Kingdom or the European Economic Area, we rely on these legal bases. Performance of a contract, for the account data needed to give you an account and lift the reading limit. Consent, for the newsletter, which you can withdraw with one click in any issue. Legitimate interests, for the reading count and for security logs, where our interest in operating a free allowance and a working site is balanced against the very limited data involved.

11. How long we keep it

• Account data, for as long as you have an account, and deleted when you ask us to close it.
• Newsletter address, until you unsubscribe, and then only the record needed to make sure we do not mail you again.
• atp_profile, one year from when you last saved it, or immediately when you clear it.
• atp_read, one month.
• Server logs, for the short retention period our hosting provider applies.

12. Your rights

Wherever you live, you can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable form, object to a particular use, or unsubscribe from the newsletter. Write to privacy@aitoolperks.com and we will reply within thirty days.

If you are in the United Kingdom or the European Economic Area you also have the right to complain to your data protection authority, and you do not have to come to us first.

If you are in California, you have the right to know what we collect and why, to delete it, to correct it, and not to be treated differently for exercising those rights. We do not sell personal information and we do not share it for cross context behavioural advertising, so there is nothing to opt out of. We honour Global Privacy Control signals if we ever add anything that would need one.

Our database holds only your account record and your newsletter subscription, so an access or deletion request covers those two, and we can answer it quickly.

13. Security

The site is served over HTTPS. Cookies are marked as not readable by scripts, and in production as secure. We hold no passwords and no payment data, which removes the two things most worth stealing. No system is perfectly secure, and we will tell affected people and the relevant authority if a breach happens that requires it.

14. Children

The site is for people running or working at companies and is not directed at children. We do not knowingly collect personal data from anyone under sixteen. If you believe a child has given us data, write to us and we will delete it.

15. Changes to this policy

When this policy changes we update the effective date at the top of the page. If a change materially affects how we use personal data, we will say so through the site or by email before it takes effect.

16. Contact

Privacy questions and requests go to privacy@aitoolperks.com. Everything else goes to hello@aitoolperks.com.