Privacy Policy

AI Tools of the Day (“we”, “us”, “our”) operates AI Tools of the Day (the “Service”). For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we are the Data Fiduciary and you are the Data Principal. This notice tells you, in plain language, what personal data we collect, why, and what rights you have. It is available in English; if you would like it in another language listed in the Eighth Schedule to the Constitution of India, write to us at the grievance contact below.

1. Personal data we collect

Account data. Name, email address, an optional mobile number and a securely hashed password when you sign up.

Public profile data. Display name, website and short description, only if you choose to create a public profile. These are shown publicly at your profile page.

Tool submissions. Your name, email, and the product details, logo and images you submit. We do not store card or bank details — payments are handled by PayPal or Stripe.

Contact and newsletter. Name, email, optional mobile number and your message; or just your email address if you subscribe to the newsletter.

Usage and technical data. Pages viewed, tools you bookmark, outbound clicks and a salted (one-way hashed) version of your IP address used only for security and rate limiting. We do not store your raw IP address for this purpose.

Cookies. Essential cookies keep you logged in and remember your theme. Analytics and marketing cookies are used only if you opt in through the cookie banner, and you can change your choice any time using “Cookie Settings” in the footer.

2. Why we use it (purposes)

We process your personal data only for the specific purposes for which you gave consent, or for legitimate uses permitted by the DPDP Act:

• to create and manage your account, bookmarks and public profile;
• to review, list and promote tools you submit, and to contact you about the submission;
• to respond to your enquiries and data-rights requests;
• to send the newsletter, if you subscribed;
• to keep the Service secure, prevent spam and abuse, and comply with legal obligations;
• to understand and improve the Service, where you have consented to analytics.

We do not sell your personal data.

3. Consent and withdrawal

We ask for your consent through clear, unticked checkboxes at sign-up, on the contact form, on the newsletter form, on the tool-submission form and in the cookie banner. We record when and for what purpose you consented. You may withdraw consent at any time — it is as easy to withdraw as to give. Use the Data Rights page, the unsubscribe link in any email, or Cookie Settings. Withdrawal does not affect processing done before you withdrew.

4. Who we share it with

We share personal data only with service providers that process it on our behalf under contract (for example web hosting, email delivery and payment processors such as PayPal and Stripe), and with courts, regulators or law-enforcement authorities when the law requires. Information you publish on a public profile or in a tool listing is visible to everyone.

5. Where it is stored and transferred

Our servers and some service providers may be located outside India. We transfer personal data only to countries and providers that are not restricted by the Government of India under the DPDP Act, and we use contractual and technical safeguards.

6. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for, or as the law requires. In general: account data until you delete your account; contact messages up to 24 months; newsletter email until you unsubscribe; tool-submission and payment records for the period required by Indian tax and accounting law; consent records for as long as needed to demonstrate consent; hashed rate-limiting data for about 24 hours. When data is no longer needed it is erased or irreversibly anonymised.

7. Your rights as a Data Principal

• Access — get a summary of the personal data we process and who we share it with.
• Correction and completion — correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data when it is no longer needed or you withdraw consent.
• Grievance redressal — complain to our Grievance Officer and get a response within the time the law allows (we aim for 7 days, and no later than 30 days).
• Nomination — nominate another person to exercise your rights if you die or become incapacitated.

You can exercise these rights using the Data Rights & Grievance page. Logged-in users can also download their data or delete their account there. If we do not resolve your complaint, you may approach the Data Protection Board of India.

8. Children

The Service is not meant for anyone under 18. We do not knowingly process the personal data of children, track or monitor their behaviour, or show them targeted advertising. If you believe a child has given us personal data, contact us and we will delete it. Where verifiable parental consent is required by law, we will not proceed without it.

9. Security and data breaches

We use reasonable security safeguards, including hashed passwords, prepared database statements, encrypted connections (HTTPS), access controls and upload scanning/re-encoding. If a personal data breach occurs, we will notify the Data Protection Board of India and the affected Data Principals as required by law.

10. Third-party links

Tool listings link to third-party websites. We are not responsible for their privacy practices; please read their policies.

11. Changes to this policy

If we change this policy in a way that affects how we use your data, we will update the date above and, where required, ask for your fresh consent.

12. Grievance Officer & contact