Privacy Policy

1. Who We Are

This Privacy Policy describes how AInexfinder (“AInexfinder,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you use https://ainexfinder.com and related services (collectively, the “Service”).

AInexfinder is an AI Discovery Platform. We help users discover, compare, and explore AI tools, categories, alternatives, and related editorial content. We may also offer free and paid listing products, sponsored placements, advertising, and related digital services.

For the purposes of applicable data protection law, AInexfinder is typically the controller (or “business” / “data fiduciary,” depending on the jurisdiction) of personal data described in this Policy, except where we process data solely on behalf of a customer under a written data processing agreement, or where a payment provider such as Paddle acts as an independent controller / Merchant of Record for checkout data.

Operator details. Insert full legal entity name, registered office address, company registration number, and country of incorporation on the Legal Hub. Until that page is updated with registered particulars, contact us at the emails below.

---

2. Scope of This Policy

This Policy applies to:

• Visitors who browse the Service without an account
• Registered users
• Tool makers and businesses that submit listings or purchase promotions
• Newsletter subscribers
• Individuals who contact us

This Policy does not govern:

• Third-party AI tools, websites, or products linked from AInexfinder
• Privacy practices of those third parties
• Processing by Paddle (or other payment providers) as Merchant of Record for payment, tax, and invoice data they control

When you leave AInexfinder for a third-party site or complete checkout on a Paddle-hosted flow, that third party’s privacy notice applies to data they collect.

---

3. Key Definitions

---

4. Personal Data We Collect

We collect only what we need to operate and improve the Service. Categories may include:

4.1 Identity and contact data

• Name, display name, email address
• Optional profile fields (bio, website, avatar)
• Business contact details for listings or advertising inquiries

4.2 Account and authentication data

• Login credentials (stored in hashed/secured form by our auth provider)
• Account role and status
• Authentication tokens and session identifiers

4.3 User-generated content

• Tool submissions and update requests
• Reviews, ratings, comments, and related text
• Shortlists, favorites, notes, and similar saved preferences
• Support messages and form submissions

4.4 Commercial and advertising data

• Interest in or purchase of featured, sponsored, or premium listings
• Campaign preferences, creative assets you upload for ads
• Billing identity as needed to coordinate with Paddle (Paddle collects payment instrument data directly)

4.5 Technical, usage, and log data

• IP address, approximate location derived from IP
• Browser type, device type, operating system
• Pages viewed, referring URLs, search queries on our Service
• Timestamps, request paths, error logs
• Cookie and similar technology identifiers (see Cookie Policy)

4.6 Communications data

• Newsletter subscription status and preferences
• Email open/click metrics where permitted
• Correspondence with support or legal contacts

4.7 Data we do not intentionally collect

• Full payment card numbers (handled by Paddle as MoR)
• Government ID numbers (unless you voluntarily send them in support and we delete when no longer needed)
• Special-category sensitive data under GDPR as a product requirement

---

5. Sources of Personal Data

We obtain personal data from:

1. You directly — registration, forms, submissions, purchases, emails
2. Your device and browser — automatically via cookies, pixels, and server logs
3. Service providers — authentication, hosting, analytics, email delivery (as processors)
4. Paddle — limited order/status information needed to fulfill digital products
5. Public sources — publicly available product information you ask us to list (not usually “personal data,” but may include contact emails you publish)

We do not buy consumer contact lists for spam.

---

6. Purposes and Legal Bases for Processing

Where the EU/UK GDPR (or similar laws) apply, we rely on one or more of the following bases. Where India’s Digital Personal Data Protection Act, 2023 (DPDP) applies, we process digital personal data for lawful purposes with consent or for legitimate uses recognized by law. Where CCPA/CPRA applies, we process personal information for the business purposes described below.

You may withdraw consent where processing is consent-based, without affecting prior lawful processing.

---

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, and similar technologies for:

• Essential operations (session, security, load balancing, consent storage)
• Preferences
• Analytics
• Marketing/measurement where enabled

Full details—including categories, examples, and how to manage consent—are in our Cookie Policy. By using non-essential cookies where consent is required, we rely on your consent via our consent mechanism (when deployed) or equivalent controls.

---

8. Analytics, Logs, and Security Monitoring

8.1 Analytics

We may use first-party and third-party analytics (for example, privacy-configured web analytics) to understand traffic, feature usage, and performance. Analytics data is used in aggregate where feasible.

8.2 Server and application logs

Our infrastructure (including hosting and edge networks) records technical logs for reliability, debugging, abuse prevention, and security. Logs may include IP addresses and request metadata and are retained for limited periods unless needed longer for investigations or legal reasons.

8.3 Security monitoring

We may process personal data to detect, prevent, and respond to security incidents, fraud, scraping abuse, spam, and attacks.

---

9. Accounts, Profiles, and User Content

If you create an account:

• We process your credentials and profile to authenticate you and personalize the Service.
• Content you post (reviews, comments, submissions) may be publicly visible. Do not post personal data you do not want public.
• You may request account closure; residual copies may remain in backups for a limited period, and we may retain data where required by law or for legitimate disputes.

See also our Terms of Service and Acceptable Use Policy.

---

10. Tool Submissions, Reviews, and Business Profiles

When you submit a tool or business profile:

• We process contact and product information to evaluate and display listings.
• Listing content (including logos and descriptions) is intended for public display.
• You represent that you have rights to submit the information and that it does not infringe others’ rights.

Moderation decisions may involve human review and automated filters.

---

11. Advertising, Featured Listings, and Marketing

If you purchase or inquire about advertising or listing products:

• We process business contact and campaign data to sell, deliver, and support placements.
• Public-facing creatives and listing content will be shown to users of the Service.
• Measurement of impressions/clicks may involve technical data subject to our Cookie Policy.

Details of advertising rules: Advertising & Listings Policy.

---

12. Payments and Merchant of Record (Paddle)

Paid products may be sold through Paddle as Merchant of Record (MoR).

• Paddle may collect and process payment method details, billing address, tax identifiers, and invoice data as an independent controller / MoR, according to Paddle’s privacy notice.
• AInexfinder may receive limited order metadata (for example, product purchased, email, status) needed to activate features and provide support.
• Tax collection and remittance for qualifying transactions are handled by Paddle where applicable.
• Invoices for MoR purchases are typically issued by Paddle.

See Payment & Merchant of Record Terms and Refund Policy.

---

13. Newsletters and Communications

If you subscribe to our newsletter or opt in to product emails:

• We process your email and preferences to send communications.
• You can unsubscribe via the link in emails or by contacting us.
• Transactional messages (security alerts, purchase confirmations, submission status) are not marketing and may still be sent when needed to provide the Service.

---

14. Contact Forms and Support

When you contact us (including contact forms):

• We process the information you provide to respond and improve support.
• Do not submit sensitive personal data unless necessary.
• We may retain correspondence for quality, training (internal), and legal purposes for a limited period.

---

15. How We Share Personal Data

We do not sell personal data for money in the traditional sense. Under some US state laws, “sale” or “sharing” can include certain advertising disclosures—see Section 27.

We may share personal data with:

Processors are bound by contractual obligations to process data only on our instructions where we are controller.

Public user content and approved listings are visible to anyone who can access the Service.

---

16. International Data Transfers

We may process and store personal data in countries other than your own, including jurisdictions that may not provide the same level of data protection as your home country.

Where required (for example, transfers from the EEA/UK), we implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) or UK equivalent addenda
• Transfers to countries with an adequacy decision
• Other lawful transfer mechanisms

You may request information about relevant safeguards by contacting privacy@ainexfinder.com.

---

17. Data Retention

We retain personal data only as long as necessary for the purposes described, including:

Exact periods may vary by product, legal requirements, and technical constraints. When data is no longer needed, we delete or irreversibly anonymize it.

---

18. Security Measures

We implement technical and organizational measures appropriate to the risk, which may include:

• Encryption in transit (HTTPS/TLS)
• Access controls and least-privilege practices
• Password hashing / secure auth provider practices
• Monitoring and logging
• Vulnerability management and dependency updates
• Staff access limitations

No method of transmission or storage is 100% secure. You are responsible for safeguarding your account credentials. See also our Security Policy.

---

19. Your Rights (GDPR, CCPA, DPDP, and Others)

Depending on your location, you may have rights to:

How to exercise rights

Email privacy@ainexfinder.com with:

• Your name and account email (if any)
• The right you wish to exercise
• Sufficient detail for us to locate your data

We may need to verify your identity. We will respond within the time required by applicable law (for example, generally one month under GDPR, subject to extensions; within timelines under CCPA/DPDP).

Authorized agents (CCPA)

You may designate an authorized agent where the law allows; we may require proof of authorization and identity verification.

Do Not Sell or Share (US)

If we engage in activities that constitute a “sale” or “sharing” of personal information under California or similar law (for example, certain cross-context behavioral advertising), you may opt out by:

• Using our cookie / preference controls (when available)
• Emailing privacy@ainexfinder.com with the subject line “Privacy Opt-Out”
• Using a recognized Global Privacy Control (GPC) signal where we are required and able to honor it

---

20. Children’s Privacy

The Service is not directed to children under 16 (or under 13 where that is the applicable threshold). We do not knowingly collect personal data from children below the applicable age.

If you believe a child has provided personal data, contact privacy@ainexfinder.com. We will take steps to delete the information as required by law.

Parents or guardians in jurisdictions with parental consent requirements should not allow minors to use account features without appropriate consent.

---

21. Automated Decision-Making

We do not use automated decision-making that produces legal or similarly significant effects about you solely by automated means without human involvement, within the meaning of GDPR Article 22, as a core product feature.

We may use automated filters and ranking (for example, spam detection, search ranking, recommendation heuristics). These do not typically constitute solely automated legal decisions. You may contact us with questions about moderation outcomes.

---

22. Third-Party Websites and AI Tools

AInexfinder links to and describes third-party AI tools and websites. We do not control their privacy practices. Before using a third-party product, review its privacy policy and terms.

We are not responsible for:

• Third-party collection or use of your data
• AI-generated outputs from third-party tools
• Security incidents on third-party systems

---

23. Do Not Track and Global Privacy Controls

Some browsers send “Do Not Track” (DNT) signals. There is no uniform industry standard for DNT. We treat Global Privacy Control (GPC) and similar legally recognized signals as described in Section 19 where required.

---

24. Data Protection Impact and Records

Where required by law, we maintain records of processing activities and conduct data protection impact assessments for high-risk processing. These documents are internal and available to supervisory authorities as required.

---

25. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date will change when we do.

Material changes may be communicated by:

• Posting the updated Policy on the Service
• Email notice to registered users, where appropriate
• In-product notice

Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law. If changes require consent, we will request it.

---

26. How to Contact Us

Postal address and registered entity details: see Legal Hub.

If you are in the EEA/UK and we appoint an EU/UK representative, contact details will be published on the Legal Hub when appointed.

---

27. Regional Addenda

27.1 European Economic Area and United Kingdom (GDPR / UK GDPR)

• Controller contact: privacy@ainexfinder.com
• Legal bases: Section 6
• Transfers: Section 16
• Supervisory authority: you may lodge a complaint with your local data protection authority

27.2 California and other US state privacy laws (including CCPA/CPRA)

Categories collected (last 12 months, as applicable): identifiers; commercial information; internet/electronic activity; geolocation (approximate); professional information (if you provide it for business listings); inferences (limited product analytics).

Business purposes: Section 6.
Disclosures: Section 15.
Sale/Share: Section 19.
Sensitive personal information: We do not use sensitive personal information for purposes that require a “limit the use” right beyond what is necessary to provide the Service, except as disclosed and permitted.
Non-discrimination: We will not discriminate against you for exercising privacy rights.
Retention: Section 17.
Shine the Light / other US laws: Contact privacy@ainexfinder.com for applicable requests.

27.3 India (Digital Personal Data Protection Act, 2023)

• We process digital personal data for the purposes described in this Policy.
• Where consent is required, you may withdraw consent as described in Section 19.
• You may exercise rights of access, correction, erasure, and grievance redressal by contacting privacy@ainexfinder.com.
• Grievance Officer (if required): details will be published on the Legal Hub when designated.
• Cross-border transfers will be conducted in accordance with applicable Indian law and government notifications.

27.4 Other jurisdictions

If local law grants you additional rights, contact privacy@ainexfinder.com and we will honor applicable requirements.

---

This Privacy Policy is provided for transparency and compliance. It is not legal advice to users. AInexfinder may update this document as products, processors, or laws change.