Privacy Policy

AiPicks.org ("we", "us", "our") is the data controller for personal data collected through this platform. This Privacy Policy explains what data we collect, why, how it is used, how long we keep it, and your rights regarding it. It applies to all users of AiPicks.org regardless of location.

If you are in the European Economic Area (EEA) or the United Kingdom, our processing is governed by the GDPR and UK GDPR respectively. California residents have additional rights under CCPA.

Account data

• Name, username, and email address when you register
• Profile information you choose to provide: bio, website, social links
• Password stored as a one-way salted hash — we cannot see your actual password
• Profile photo if you choose to upload one

Usage data

• Pages visited, features used, search queries entered
• Votes, comments, posts, and tool submissions you create
• Tools you save, compare, or bookmark
• AI Hub conversations (used to improve the AI system)

Technical data

• IP address (anonymised after 30 days)
• Browser type, operating system, device type
• Referral source and approximate geographic region
• Cookie identifiers (see our Cookie Policy)

Payment data

Payments are processed by Stripe. We never store full card numbers or CVCs. We receive only the last 4 digits, card brand, and expiry date for display in your account billing section.

We use your data only for the purposes described below. We do not use it for purposes incompatible with why it was collected.

We do not sell your personal data. We do not share it with advertising networks. We share data only in the following limited circumstances:

• Service providers: cloud hosting, database, and email services that process data on our behalf under GDPR-compliant data processing agreements.
• Payment processor: Stripe processes payments. Their privacy policy applies to payment data they handle.
• Analytics: we use privacy-respecting analytics that do not build individual user profiles and do not share data with third-party ad networks.
• Legal authorities: we disclose data when legally compelled by a court order or applicable law, after verifying the request.
• Business transfers: in the event of a merger or acquisition, user data may be transferred. We will notify users before any such transfer.

We use essential cookies for authentication and preferences, and optional analytics cookies with your consent. You can manage all cookie preferences at any time.

For a complete description of cookies we use, their purpose, and how to control them, see our Cookie Policy.

We retain your account data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are required by law to retain records longer (for example, financial transaction records retained for 7 years).

Anonymised usage data may be retained indefinitely for platform improvement. Community posts may remain visible but will be disassociated from your identity upon account deletion.

Depending on your jurisdiction you may have the following rights regarding your personal data. We respond to all verified requests within 30 days.

• Access: request a copy of the personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure ("right to be forgotten"): request deletion of your personal data
• Portability: receive your data in a structured, machine-readable format
• Object: object to processing based on legitimate interest
• Restrict processing: limit how we use your data in certain circumstances
• Withdraw consent: withdraw consent at any time for consent-based processing, without affecting prior processing

To exercise any right, email privacy@aipicks.org. You also have the right to lodge a complaint with your local data protection authority.

We implement appropriate technical and organisational measures to protect your data including TLS encryption in transit, encryption at rest, strict access controls, and regular security reviews.

No system is completely secure. If you discover a potential security vulnerability, please report it responsibly to security@aipicks.org. In the event of a breach affecting your data, we will notify you in accordance with applicable law.

The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data without appropriate consent, contact us and we will delete it promptly.

Your data may be processed in countries outside your own, including countries that may have different data protection standards. When transferring data outside the EEA or UK, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

We may update this Privacy Policy periodically. Material changes will be communicated to registered users by email and by prominent notice on the Platform at least 14 days before taking effect. The "last updated" date at the top of this page always reflects the current version.

AiPicks.org is the data controller for personal data collected through the platform. For privacy enquiries, data subject requests, or to exercise your rights: