プライバシーポリシー
How we collect, use and protect your information when you use ToolPotion.
Who we are
ToolPotion (“ToolPotion”, “we”, “us”) operates toolpotion.ai, a directory of AI tools and software. This policy explains what information we collect when you use the site, how we use it, who we share it with, and the choices you have. The fastest way to reach us about anything in this policy is the contact page.
Information we collect
We only collect what the features you use actually need:
- Account data. When you create an account or sign in, our authentication provider processes your email address, name and password (or your third-party sign-in identity). We never see or store your password in readable form.
- Content you submit. Tool submissions (tool name, description, URL, category, type and any comment), reviews, favorites, and messages sent through the contact form (your name, email address, subject and message).
- Email verification data. When we verify your email for a submission, we generate a one-time code. We store only a cryptographic hash of it, and it expires within minutes.
- Usage data. Pages and listings viewed, and standard technical data our servers receive with any request (IP address, browser type, referring page). Server logs are used for security and operations, not profiling.
- Preferences. Your selected language, stored in a cookie so the site opens in your language next time.
How we use your information
- To provide and operate the directory, your account, favorites and reviews.
- To process, review and publish tool submissions.
- To respond to messages you send us and notify our team about them.
- To send transactional email only — verification codes and confirmations of things you did (a submission, a contact message). We do not send marketing email, and we do not sell or rent personal data to anyone.
- To keep the service secure, prevent abuse, and enforce rate limits.
- To understand aggregate usage and improve the directory.
- To comply with legal obligations.
Legal bases for processing
Where laws such as the GDPR apply, we rely on: performance of a contract (running your account and processing your submissions), legitimate interests (security, abuse prevention, improving the service), consent where we ask for it, and legal obligation where retention or disclosure is required by law.
Cookies
We use a deliberately small set of cookies:
- Session cookies (essential) — keep you signed in. HTTP-only and required for accounts to work.
- Language preference (selected_language) — remembers the language you chose, for up to one year.
We do not use third-party advertising or cross-site tracking cookies. You can delete or block cookies in your browser settings; blocking the essential ones will sign you out.
Service providers
We share data only with the providers that run the service, only to the extent needed to run it: our hosting platform, our database and authentication provider, our transactional email provider (which processes the email addresses we send to), and our cloud storage and content-delivery network for images. These providers process data on our behalf, and data may be processed in the United States and other countries. We may also disclose information if required by law, or to protect the rights, safety or integrity of the service.
Data retention
- Account data is kept while your account exists.
- Submissions and reviews are kept while they are live or under review; contact messages are kept as long as needed to handle them and keep a record of the exchange.
- Verification codes expire within minutes and are stored only as hashes.
- Server logs are retained for a short operational window.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data-protection authority. To exercise any of these, message us via the contact page from the email address concerned — we will respond within the timelines required by applicable law.
Children’s privacy
ToolPotion is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
Third-party sites
The directory exists to link out to third-party tools. Once you leave toolpotion.ai, the privacy practices of the site you land on are governed by that site’s own policy — we are not responsible for them, and listing a tool is not an endorsement of its data practices.
Security
We use reasonable technical and organizational measures to protect your data — encrypted connections (HTTPS), hashed verification codes, HTTP-only session cookies and restricted internal access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; if a breach affecting your data occurs, we will notify you as required by law.
Changes to this policy
We may update this policy as the service evolves. The date at the top reflects the latest revision; material changes will be signposted on the site. Continuing to use ToolPotion after a revision takes effect means you accept the revised policy.
Contact us
Questions, requests or concerns about privacy — use the contact page and we will get back to you.