Welcome to Toolso.AI's Privacy Policy. This document explains how we collect, use, and protect your personal information when you use our AI tools directory and navigation services. As a platform that connects users with third-party AI tools, we are committed to transparency about data practices.
Last Updated: September 17, 2026
- Account Information: Name, email address, username, and password when you register
- Profile Information: Optional information like company name, job title, and professional interests
- Contact Information: Details you provide when contacting us for support or inquiries
- Interaction Data: Pages visited, AI tools viewed, search queries, filters applied, and time spent on our platform
- Click-Through Data: Records of which third-party AI tools you click to visit
- Preference Data: Your saved tools, favorites, bookmarks, and custom collections
- Feedback Data: Reviews, ratings, comments, and submissions you provide about AI tools
- Device Information: IP address, browser type, operating system, device identifiers
- Log Data: Server logs, error reports, performance data
- Cookie Data: See our Cookie Policy for detailed information
- Tool Submissions: Information about AI tools you submit to our directory, including descriptions, URLs, pricing, and features
- Comments and Reviews: User-generated content about AI tools, including ratings and feedback
- Newsletter Preferences: Email subscription settings and engagement data
Account-linked star ratings.
When you rate a tool, we store the 1–5 star value with your account so we can enforce one active rating per account and tool and let you edit or remove it. Public tool pages may show only an anonymous aggregate after a minimum threshold; they do not identify individual raters. We do not collect an IP address, user agent, or device fingerprint specifically for tool ratings.
- Providing access to our AI tools directory and search functionality
- Personalizing AI tool recommendations based on your interests and usage patterns
- Processing and displaying user-submitted tool information and reviews
- Maintaining and improving our recommendation algorithms
- Sending service-related notifications and updates
- Responding to your inquiries and providing customer support
- Sending newsletters and weekly AI tool digests (with your consent)
- Notifying you about new features, updates, or relevant AI tools
- Conducting surveys and gathering feedback
- Analyzing user behavior to improve our platform and recommendation algorithms
- Understanding which AI tools are popular and why
- Detecting and preventing fraud, abuse, and technical issues
- Conducting research and development for new features
- Complying with legal obligations and regulations
- Enforcing our Terms of Service
- Protecting against security threats and unauthorized access
- Resolving disputes and troubleshooting problems
Toolso.AI is a directory and navigation platform. We do not operate, control, or take responsibility for the third-party AI tools listed on our platform. When you click through to a third-party AI tool:
- You are leaving our platform and entering a third-party website
- The third-party's own privacy policy and terms will apply
- We do not control how third parties collect, use, or share your data
- We do not receive information about your activities on third-party AI tool platforms
- Any transactions or interactions with third-party tools are solely between you and that provider
We employ trusted third-party services to facilitate our platform:
- Analytics: Google Analytics, Plausible Analytics for understanding platform usage
- Authentication: OAuth providers (Google, GitHub) for account login
- Payment Processing: Stripe for subscription and payment management; Creem (Creem.io OÜ, Estonia) as Merchant of Record for one-time payment processing (e.g., tool submission fees)
- Email Services: Email service providers for newsletters and transactional emails
- Cloud Storage: AWS S3 for storing user-uploaded images and assets
- CDN Services: Content delivery networks for faster page loading
These third parties have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data.
When you make a payment on Toolso.AI, your transaction may be processed by one of our payment providers depending on the type of purchase.
Stripe, Inc. processes subscription payments, credit package purchases, and certain one-time payments. Stripe collects and processes payment card details, billing address, and transaction information in accordance with Stripe's Privacy Policy. Toolso.AI does not store your full payment card details; these are handled directly by Stripe's PCI-DSS compliant infrastructure.
Creem.io OÜ, a company incorporated in Estonia, acts as Merchant of Record for certain one-time payment transactions (such as tool submission fees). When you complete a payment through Creem, the following data is collected and processed by Creem:
- Identity Information: Your name and email address
- Billing Information: Billing address and payment method details
- Order Information: Product or service purchased, transaction amount, currency, and order identifiers
- Technical Information: IP address, device information, and browser data collected during the checkout process
Creem processes this data as an independent data controller for the purpose of completing and managing your payment transaction, complying with applicable tax and accounting obligations, and preventing fraud. For details on how Creem handles your data, please refer to Creem's Privacy Policy.
You can exercise your data rights regarding payment data processed by Creem by contacting Creem directly, or by contacting us at privacy@toolso.ai and we will facilitate your request.
Our platform uses AI-powered algorithms to provide personalized tool recommendations. Here's how it works:
- Your browsing history on our platform (tools viewed, searches performed)
- Your saved tools and favorites
- Your account preferences and interests
- General popularity and ratings of AI tools
- Relevance matching based on categories and features
- Recommendations are based on collaborative filtering and content-based matching
- We do not use sensitive personal information (race, religion, health data) for recommendations
- You can influence recommendations by updating your preferences
- Popular and trending tools may appear regardless of personalization
- You can opt out of personalized recommendations in your account settings
- Clearing your browsing history will reset recommendation data
- You can provide feedback to improve recommendation accuracy
We do not sell your personal information to third parties. We may share your information in the following circumstances:
- When you explicitly authorize us to share information
- When you submit tools or reviews that become public on our platform
- Third-party vendors who assist in platform operations (hosting, analytics, email)
- These providers are bound by contractual obligations to protect your data
- To comply with applicable laws, regulations, or legal processes
- To respond to government requests or court orders
- To enforce our Terms of Service or protect our legal rights
- In connection with a merger, acquisition, or sale of assets
- Users will be notified via email and/or platform notice
- User-submitted tool information, reviews, and ratings may be publicly visible
- Your username and profile information may appear alongside your submissions
Toolso.AI operates globally and may transfer your data to countries outside your jurisdiction. We ensure appropriate safeguards are in place:
- EU Users: We comply with GDPR requirements for data transfers outside the EU
- Adequacy Decisions: We transfer data to countries with adequate protection levels
- Standard Contractual Clauses: We use EU-approved contracts with service providers
- Your Rights: You have rights to access, correct, and request deletion of your data
- Payment Processing in the EU: Payment data processed by Creem (Creem.io OÜ) is handled within the European Union (Estonia), which is subject to GDPR. Payment data processed by Stripe may be transferred to and processed in the United States and other jurisdictions where Stripe operates, subject to Stripe's data transfer safeguards including Standard Contractual Clauses
We retain your information for as long as necessary to provide our services:
- Account Data: Retained while your account is active and for 30 days after deletion
- Usage Data: Retained for up to 2 years for analytics and improvement purposes
- User Submissions: Tool submissions and reviews retained indefinitely unless you request deletion
- Payment Data (Stripe): Transaction records are retained in accordance with Stripe's data retention policies and applicable financial regulations
- Payment Data (Creem): Contract-related data is retained by Creem for up to 3.5 years following the termination of the contractual relationship. Accounting records related to your transactions are retained by Creem for 7 years as required under Estonian accounting law
- Legal Data: Information retained longer if required by law or for legitimate interests
You can request deletion of your data at any time by contacting us or deleting your account. Please note that payment data retained by Stripe or Creem for legal and regulatory compliance may be subject to their respective retention schedules and cannot be deleted prior to the expiration of mandatory retention periods.
Depending on your location, you may have the following rights:
- Request a copy of your personal data in a machine-readable format
- Understand what data we collect and how we use it
- Correct inaccurate or incomplete personal information
- Request deletion of your personal data ("right to be forgotten")
- Restrict processing of your personal data in certain circumstances
- Object to processing based on legitimate interests or direct marketing
- Withdraw consent for data processing at any time
- Unsubscribe from marketing emails using the unsubscribe link
- Our recommendation system does not make fully automated decisions with legal effects
- You can request human review of recommendation decisions
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (note: we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
To exercise your rights, contact us at privacy@toolso.ai or use your account settings.
Toolso.AI is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will delete it.
We implement industry-standard security measures to protect your information:
- Encryption: Data is encrypted in transit (SSL/TLS) and at rest
- Access Controls: Strict access controls and authentication for our systems
- Regular Audits: Security assessments and vulnerability testing
- Secure Infrastructure: Hosting on secure, compliant cloud platforms
- Employee Training: Staff trained on data protection and security practices
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but continuously work to enhance our protections.
In the event of a data breach affecting your personal information, we will:
- Notify affected users within 72 hours (as required by GDPR)
- Inform relevant supervisory authorities if required by law
- Provide details about the breach and steps to protect yourself
- Take immediate action to contain and remediate the breach
We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.
Toolso.AI – AI Tool Submitter extension. When you deliberately open the extension on a public tool website, it locally processes allowlisted page metadata and up to 8 KiB of cleaned visible text to prefill a submission form. This information is sent to Toolso.AI only after you click submit and sign in. The extension does not send HTML, website form values, cookie contents, browsing history, or content from other tabs. It does not perform a backlink scan before submission; the Fast channel uses your explicit backlink declaration and Toolso.AI verifies it after submission. A short-lived visible-form draft and signed preparation token may be stored locally, but the raw page snapshot is never stored. Limited submission-flow events are retained for up to 180 days. Your Toolso.AI session cookie is sent only to Toolso.AI and is not read or copied by the extension.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:
- Post the updated policy on this page with a new "Last Updated" date
- Notify users via email for material changes (if you have an account)
- Provide a prominent notice on our platform for significant changes
Continued use of our services after changes constitutes acceptance of the updated policy.
If you have questions, concerns, or wish to exercise your privacy rights:
For EU users, you have the right to lodge a complaint with your local data protection authority.
For Business Users: If you need a Data Processing Agreement (DPA) for GDPR compliance, please contact us at legal@toolso.ai.
Algorithm Transparency: Details about our AI recommendation algorithm can be found in the "AI Recommendation Algorithm" section above.
Effective Date: June 18, 2026
