Privacy Policy

1. Scope

This Policy applies to visitors, registered users, Tool Owners and their authorised representatives, newsletter subscribers, people who contact us, and people identified in submissions.

Public listing information and private information

Information supplied for a listing—such as a tool or organisation name, description, logo, screenshots, public links, features, pricing and offers—may be published, shared, cached and indexed. Public, non-personal tool information may remain published while we operate the directory and consider it relevant and lawful to publish.

Account details, personal contact details, ownership evidence, internal notes and temporary review-access information are used privately to authenticate users and administer submissions. They are not intended for publication, although authorised staff and relevant service providers may access them and we may disclose them where required by law. Do not place contact details, credentials or confidential information in a public listing field.

2. Information we collect

• Visitor and analytics information: pages viewed, interactions, referral source, approximate location, device/browser details, identifiers and consent choices.
• Account and authentication information: name, email, provider identifiers, organisation, role, permissions, preferences and security events.
• Tool Owner information: business contacts, relationship to a tool, evidence of authority, communications and management history.
• Newsletter and contact information: contact details, messages, preferences, source/time and unsubscribe records.
• Submission and review information: drafts, submissions, edits, statuses, correspondence, form answers and record linkages.
• Tool information: listing content, pricing, offers and optional affiliate, sponsorship, collaboration or partnership choices.
• Private review access: optional review URLs, temporary credentials or instructions and their expiry.
• Operational and security information: timestamps, relevant form version, user or submission identifiers, validation results, errors and network/device information. We may use an IP address or protected hash to prevent spam and abuse.

We may receive information from an authentication provider, organisation administrator, representative, public source, service provider or another person making a submission. If you give us another person’s information, you must be authorised to do so.

3. How and why we use information

We use relevant information to provide accounts and submission services; prepare, review and administer listings; verify authority; communicate about the Service; prevent abuse; troubleshoot and improve the Service; send optional communications where permitted; comply with law; and establish, exercise or defend legal claims.

We may use automated tools to prepare, format or categorise listing content. Tool Owners should check it carefully. Depending on the purpose and applicable law, processing may rely on a contract or requested pre-contract steps, legitimate interests, consent for optional marketing or non-essential analytics where required, or legal obligations. Consent may be withdrawn without affecting earlier processing.

4. Analytics, cookies and choices

Vercel Web Analytics and Ahrefs Web Analytics run across the site as always-on, cookie-free traffic measurement. We use these services to understand site usage through limited, privacy-preserving traffic data. Google Analytics also runs across the site using Consent Mode. Before acceptance, analytics storage, ad storage, ad user data and ad personalisation are denied, so Google receives only limited, cookieless measurement. Accepting the site’s analytics choice grants analytics storage only; advertising and personalisation remain denied. Rejecting the choice leaves Google Analytics in denied-storage, cookieless mode.

Vercel Speed Insights remains operational performance telemetry. Essential technologies may operate for security, authentication or a requested function.

We store the current accepted or rejected analytics choice in a first-party consent cookie. You can reopen Cookie settings from the site footer and can also use browser controls.

5. Who receives information

Relevant information may be processed by providers supporting hosting and infrastructure, databases and storage, authentication, email and communications, analytics, and automated content generation. We may also disclose information to professional advisers, transaction participants, authorities or courts where appropriate or required by law.

Providers receive information reasonably needed for their function and are subject to applicable contractual or legal obligations. Some may act as independent controllers for limited purposes. Information intended for publication is disclosed publicly when a listing is published.

6. International transfers

We and our providers may process information outside the country where it was collected. Where required, an applicable recognised transfer mechanism and appropriate safeguards are used. Contact us for more information about processing relevant to your request.

7. Retention

We retain information only while reasonably needed for the relevant purpose and for security, legal and dispute requirements:

• private account, contact and submission-administration information is retained while reasonably needed to operate, administer, secure and document the Service;
• incomplete drafts may be periodically deleted after inactivity;
• temporary review credentials should be removed after review, expiry or when no longer needed;
• security and abuse records may be kept while needed to prevent abuse, investigate incidents or meet legal requirements;
• analytics information follows configured provider settings and is kept only while reasonably needed for analytics;
• backups expire through applicable providers’ rolling backup processes; and
• limited records may remain to honour an opt-out, resolve disputes, prevent fraud or comply with law.

Deletion may involve erasure, de-identification or isolation until backup expiry. No fixed automated deletion schedule is promised by this Policy.

8. Security and access

We use safeguards appropriate to the risk, which may include access restrictions, authentication controls, encryption, logging, provider review and incident procedures. Only authorised staff and providers with a relevant need should access private submission or review information. No storage or transmission method is absolutely secure. Report suspected compromise to [email protected].

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing; receive certain information in portable form; withdraw consent; opt out of direct marketing; and complain to a competent data-protection authority.

To exercise a right or request account/data deletion, email [email protected] and identify the relevant account, submission or listing. We may verify identity and authority. Legal exceptions may apply. Account deletion does not necessarily require deletion of non-personal factual tool information that we may lawfully publish independently.

Use the unsubscribe link in marketing email to opt out. Administrative messages about an active account or submission may continue.

10. Children

Public directory pages may be browsed by visitors under 16, but people must be at least 16 to create an account, submit a tool, claim a listing, or manage or update a listing. We do not knowingly collect children’s information through those features. Contact us if you believe a child has provided personal information through them.

11. Changes and contact

We may update this Policy, show its effective date and provide additional notice where required. Beyond The AI is the public service and trading name. For privacy and deletion requests, email [email protected].

In the UK, you may complain to the Information Commissioner’s Office. You may instead contact another competent authority where applicable.

Tool Owners should also read the Tool Owner Listing Terms and General Terms.