Privacy Policy for Tools.AI
Last Updated: August 4, 2026
1. Introduction: Our Commitment to Your Privacy
Welcome to Tools.AI. This Privacy Policy explains how Tools.AI, LLC (“Tools.AI”, “we”, “us”, or “our”) collects, uses, shares, and protects information about you when you use our website, services, and paid offerings (collectively, the “Services”).
By using our Services, you agree to the collection and use of information in accordance with this policy.
2. Privacy at a Glance
| What We Collect | Why We Collect It | Who We Share It With |
|---|---|---|
| Account & Contact Info (name, email, password) | To create and manage your account, and to communicate with you. | Essential service providers (e.g., cloud hosting). |
| Submitted Content (tool names, descriptions, URLs, logos) | To publish your listing on our public directory. | The public (via our website), and our service providers. |
| Payment Information (processed by Stripe) | To process payments for featured or sponsored listings. | Our payment processor (Stripe). We do not store your full card details. |
| Usage & Device Data (IP address, browser, cookies) | To operate, secure, and improve our Services. | Analytics and security service providers. |
| Communications (support requests, feedback) | To provide customer support and improve our Services. | Our internal teams and support platform providers. |
| AI Search and Chat Queries (the text you type) | To answer your question using AI. | Our AI provider. Not used to train AI models. |
3. What Information We Collect
We collect information in three main ways:
A. Information You Provide Directly to Us
- Account Information: When you register for an account, we collect your name, email address, and a hashed password.
- Listing and Content Information: When you submit a tool to our directory (whether free or paid), we collect all the information you provide for the listing, including the tool’s name, URL, descriptions, category, pricing details, features, logos, and any gallery images you upload. This content is intended for public display.
- Payment Information: For paid services like “Featured” or “Sponsored” listings, we require payment information, which is securely collected and processed by our third-party payment processor (Stripe). We do not store your full credit card number on our servers.
- Communications: When you contact us for support, provide feedback, or communicate with us in any way, we collect the information you include in your messages.
- AI Search and Chat Queries: Our site offers AI-powered search and an AI chat assistant. When you use either, we collect the text of the questions you type. To generate an answer, that text is sent to our third-party AI provider, OpenRouter, Inc., together with relevant excerpts from the publicly listed tools in our directory. Please do not enter sensitive personal information, such as health details, financial details, or government identifiers, into the AI search or chat. They are designed to help you find tools in our directory, not to receive personal information about you. We keep a record of these conversations for 30 days so that we can monitor quality, detect abuse, and improve the feature. We do not store your IP address with these conversations. You do not need an account to use these features, and we do not attempt to identify you from what you type.
B. Information We Collect Automatically
- Log and Usage Data: Our servers automatically record information when you access our Services, which may include your IP address, browser type and settings, operating system, the date and time of your request, and how you interacted with our site.
- Cookies and Similar Technologies: We use cookies and similar technologies to operate our Services, remember your preferences, provide a personalized experience, and perform analytics. See Section 4 and control cookies via our consent banner or your browser settings.
C. Information from Third-Party Sources
We may receive information about you from third parties, such as our payment processors (e.g., confirmation of your payment) or analytics providers.
4. Cookies and Tracking Technologies
We and our providers use cookies and similar technologies, including browser storage, to run the site, remember preferences, and measure traffic. You can accept or decline non-essential cookies at any time via our cookie-consent banner or the “Cookie Settings” link in our footer, and we recognize Global Privacy Control (GPC) browser signals.
Strictly necessary technologies load automatically. All other categories are intended to load only after you consent, with two current exceptions that we are working to correct: our AI assistant stores a session identifier in your browser when a page loads, and certain attribution and conversion-measurement technologies set cookies on your first visit.
The categories we use:
| Category | Examples / providers | Purpose | Set before consent? |
|---|---|---|---|
| Strictly Necessary | WordPress session, WooCommerce cart, Stripe, reCAPTCHA / security | Core site, login, checkout, security | Yes (exempt) |
| Analytics | Google Analytics 4 (_ga) | Understand and improve usage | Only after consent |
| Attribution and conversion measurement | Source and campaign attribution (sbjs_*), Google conversion linker (_gcl_ls) | Understand how visitors reached the site | Currently yes, on first visit. We are correcting this |
| Functional | Preference cookies, avatars (Gravatar) | Enhanced features and personalization | Only after consent |
| Functional | AI chat widget (browser local storage, no cookies) | Remembers your display preference, and whether you dismissed or opened the chat | Currently yes, on page load. We are correcting this |
We also use Cloudflare Web Analytics, a privacy-friendly, cookieless analytics service that measures aggregate traffic without setting cookies or collecting personal identifiers; because it is anonymous, it runs without requiring consent.
You can also control cookies through your browser settings; disabling some cookies may affect site functionality.
5. How We Use Your Information
- To Provide and Operate the Services: to create your account, publish your tool listings, process transactions, and provide access to our platform.
- To Communicate With You: to send service-related notifications, respond to support inquiries, and send marketing communications (which you can opt out of at any time).
- To Improve and Personalize Our Services: to understand how users interact with our platform so we can enhance functionality and develop new features.
- For Security and Fraud Prevention: to protect our platform, users, and rights by detecting and preventing fraudulent, unauthorized, or illegal activity.
- For Legal Compliance: to comply with applicable laws and legal requests, and to enforce our Terms of Service.
6. How We Share Your Information
We do not sell your personal information for money. However, our use of third-party analytics cookies may constitute “sharing” (or a “sale”) of personal information for cross-context behavioral advertising under laws such as the CCPA/CPRA. You can opt out at any time via our cookie-consent banner or by enabling GPC (see Section 7). We may share your information in the following limited circumstances:
- Publicly on Our Site: information you submit for a tool listing is made publicly available on the Tools.AI directory.
- With Service Providers, including: Payment Processors (Stripe) to handle transactions; Hosting and Infrastructure providers (our web host and Cloudflare, which provides CDN, security, and performance services); Analytics Providers (Google Analytics) to help us understand usage; AI Providers (OpenRouter, Inc.) to process the queries you enter into our AI search and chat in order to generate a response, and to convert your query into a numerical representation for search purposes using an embedding model from OpenAI, hosted on Microsoft Azure. We have configured these services for zero data retention, meaning your queries are not stored by these providers after your answer is returned, and they are not used to train AI models; and Customer Support / Communications platforms to manage our correspondence with you.
- During a Business Transfer: if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, and we will notify you of any change in control.
- To Comply with the Law: in response to a valid legal request, such as a subpoena or court order.
- With Your Consent: for other purposes with your explicit consent.
7. Your Data Rights and Choices
- Access and Update: you can review and update your account information by logging into your account settings.
- Opt-Out of Marketing: you can unsubscribe from marketing emails at any time via the “unsubscribe” link in the email footer.
- Cookie Controls: you can accept or decline non-essential cookies via our consent banner or the “Cookie Settings” link in our footer. Most browsers also let you control cookies; disabling them may impact functionality.
For California Residents (CCPA/CPRA): You have the right to know what personal information we collect, to request its deletion, to correct inaccurate information, to opt out of the “sale” or “sharing” of your personal information (including for cross-context behavioral advertising), to limit the use of any sensitive personal information, and not to be discriminated against for exercising these rights. To opt out, use the “Do Not Sell or Share My Personal Information” / “Cookie Settings” link in our website footer, or enable a Global Privacy Control (GPC) signal in your browser, which we honor. For any other request, contact us at [email protected]; we may need to verify your identity.
For Residents of the EEA, UK, and Switzerland (GDPR): You have the right to access, rectify, or erase your personal data, as well as the right to data portability and the right to restrict or object to processing.
8. Data Security, Retention, and International Transfers
- Security: we implement reasonable administrative, technical, and physical measures to protect your information. However, no internet transmission is ever 100% secure, and we cannot guarantee absolute security.
- Data Retention: we keep personal information only as long as needed for the purposes described here, to comply with legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it. AI search and chat conversations are deleted after 30 days. Your IP address is not stored with them.
- International Transfers: your information may be processed in countries other than your own, including the United States. We rely on legal mechanisms such as Standard Contractual Clauses to protect data transferred outside the EEA, UK, and Switzerland. Our AI providers may process your query on servers outside your country, including in the United States. Because we have enabled zero data retention, your query is not stored by them after the response is generated.
9. Children’s Privacy
Our Services are not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children, and we do not knowingly “sell” or “share” the personal information of consumers under 16 years of age without opt-in consent as required by the CCPA/CPRA. If a parent or guardian becomes aware that their child has provided us information, they should contact us at [email protected], and we will delete it within a reasonable time.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the “Last Updated” date. We encourage you to review this policy periodically.
11. How to Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at: [email protected]
