Privacy Policy

This Privacy Policy explains how "AI Picks" (aitopicks.com — "we", "us", or "this site") collects, uses, and protects your information, effective 2026-07-10. This site is an AI tools directory that helps users discover and compare AI tools. We are committed to minimal data handling: public pages use no tracking cookies by default, we show no advertising, and we do not sell your personal information. This policy applies to all pages and services of this site.

We collect only the minimum information necessary to provide our service: (a) Comments you submit. When you post a comment on a tool page, we collect the display name you provide, an optional rating (1–5 stars), and the comment text. We do not collect your email or any contact information. (b) An IP hash for spam prevention. To prevent comment spam, we compute and store a SHA-256 hash of your IP address; we do not store the raw IP address. (c) Aggregate analytics. This site uses Cloudflare Web Analytics, a cookieless analytics service that records only aggregate metrics (page views, country of origin, etc.) and does not identify or track individuals. (d) Server logs. As a site hosted on Cloudflare, Cloudflare may record standard server logs (which may include IP address, request time, User-Agent, etc.) per its own policy, for security and operations. (e) Admin access. When a site administrator logs in, an HttpOnly session cookie (admin-session) is set for authentication only, expiring after 7 days.

The purposes for which we use information, and the corresponding legal basis (GDPR Article 6): - Publishing and displaying comments you submit (performance of a contract / your voluntary submission). - Preventing comment spam and abuse via the IP hash (legitimate interests). - Understanding overall site usage and improving content and experience (legitimate interests, based on aggregate data). - Maintaining site security and preventing attacks and fraud (legitimate interests). We do not use your information to send you marketing emails, nor for automated decision-making or profiling (other than comment moderation).

This site uses cookies very sparingly: - Public pages: we set no tracking cookies, advertising cookies, or third-party analytics cookies. Cloudflare Web Analytics is a cookieless solution. - Admin pages: only the /admin path sets an admin-session session cookie for login, cleared on logout. For this reason the site does not require a "cookie consent" banner. Disabling cookies in your browser does not affect browsing of public pages (only admin login requires a cookie).

We rely on the following third-party services (data processors); some of your data may be processed by them: - Cloudflare: website hosting, CDN, Web Analytics, and security. Cloudflare may process connection information such as your IP address under its own privacy policy. - Supabase: the database service used to store comments you submit. - Zhipu GLM (a large language model): used solely to auto-generate tool descriptions from public sources (GitHub Trending, Hacker News, etc.); it does not process any personal information you submit. Each third party is an independent data controller/processor subject to its own privacy policy. We do not sell or share your personal information with any other third party.

We do not sell, rent, or trade your personal information (under the California CCPA, we affirmatively state that we "do not sell" personal information). Except for the third-party services necessary to provide the service described above, we do not share your personal information with others unless required by law. Tool pages and redirect links may contain affiliate links — see Section 11. Affiliate links direct you to third-party websites, whose data practices are governed by those third parties.

- Comments you submit: retained until you request deletion, or until we remove them for moderation reasons (comments identified as spam may be retained to improve anti-spam rules). - IP hash: used only for comment spam prevention and rate limiting, deleted when no longer needed. - Cloudflare logs: handled per Cloudflare's own retention policy. - admin-session cookie: expires after 7 days or on logout. To have your comment deleted earlier, contact us per Section 9.

We take reasonable technical and organizational measures to protect your information, including: HTTPS-encrypted transport, server-side-only database access keys, password authentication and rate limiting on the admin panel, and we do not store raw passwords or sensitive payment information. However, no internet transmission is perfectly secure, and we cannot guarantee absolute protection against unauthorized access. In the event of a data breach, we will notify affected users and regulators as required by law.

If you are located in the EU/EEA/UK (under GDPR) or California (under CCPA), you have the following rights: - Access: know what personal data we hold about you. - Rectification: request correction of inaccurate information. - Erasure ("right to be forgotten"): request deletion of your comment or related data. - Data portability: receive your data in a structured format. - Restriction / objection: in certain circumstances, request restriction of or object to processing. - Freedom from automated decisions: not be subject to decisions based solely on automated processing that significantly affect you. - Additional CCPA rights: the right to know (categories and purposes collected), the right to opt out of sale, and the right to non-discrimination. To exercise these rights, email 719945458@qq.com; we will respond within 30 days. To verify your identity, we may ask for necessary information (such as an excerpt of your comment). We will not discriminate against you for exercising your rights.

This site is intended for general adult audiences and is not directed at children under 13 (or 16 in some regions), nor do we knowingly collect their personal information. If you believe a minor has submitted information to us, please contact us and we will delete it promptly.

This site and its third-party services (Cloudflare, Supabase) may be located in China, the United States, or other countries/regions. If you are in the EU/UK, your data may be transferred to such regions. We rely on Standard Contractual Clauses (SCCs) and the Data Processing Agreements (DPAs) signed by the relevant providers to ensure lawful transfers.

Some "Visit website" links on this site are affiliate links. If you register or purchase through these links, we may earn a commission at no additional cost to you. Affiliate relationships do not influence how we display or rank tools. Pages containing affiliate links are marked accordingly.

To improve efficiency, some tool descriptions, categories, and pros/cons on this site are auto-generated by a large language model (Zhipu GLM) based on public sources and then human-reviewed. AI-generated content may contain inaccuracies or be outdated; please refer to each tool's official website for actual features and pricing. We continuously review content manually — if you spot an error, please let us know via comments or email.

We may update this Privacy Policy from time to time. For material changes, we will post a prominent notice on the site and update the effective date at the top of this page. Continued use of the site constitutes acceptance of the updated policy.

For any questions about this Privacy Policy or your personal information, please contact: Email: 719945458@qq.com This email is designated to receive and handle data protection requests. EU users also have the right to lodge a complaint with their local data protection authority.