Privacy Policy

This Privacy Policy explains how AI devotee (“we,” “us”) collects, uses, shares, and protects personal information when you use our AI tools directory, on‑site tutorials and guides, comparison and discovery features, and related functionality (the “Service”), including optional accounts, paid plans on our Pricing page (Starter monthly subscription, Pro annual subscription, and Lifetime one‑time purchase, processed through Creem), local favorites, and cloud‑synced favorites.

1. Who this applies to

This Policy applies to visitors and registered users worldwide. If you use the Service from regions with specific privacy laws (for example the EEA/UK or California), additional rights may apply as described below.

2. Data controller and contact

The data controller for personal information processed through the Service is Y Xiong — an individual independent developer (sole operator, not a registered company), operating the AI devotee website at https://aidevotee.com/ (“we,” “us”).

Location and correspondence address. The operator is an individual developer who works across multiple countries. For privacy-related correspondence and legal notices, please use the email address below. If you require a postal address for a specific legal purpose, you may request one via email and we will provide a current address for that purpose.

Nominated jurisdiction (for law and courts only). Privacy laws require clarity about which country’s laws govern certain aspects of our relationship where our Terms of Service say so, and which courts may hear disputes when mandatory consumer law does not require otherwise. For those limited purposes only, the operator designates the following nominated jurisdiction: Hong Kong SAR. This is not a representation that the operator is physically present there at all times.

EU/UK Representative. We serve users in the European Economic Area and the United Kingdom. We are in the process of designating an EU representative and/or UK representative as may be required under Article 27 of the GDPR and equivalent UK law. Once appointed, their details will be published here. In the meantime, please direct all privacy inquiries to contact@aidevotee.com, and we will respond within the timeframes required by applicable law.

contact@aidevotee.com is the primary channel for privacy requests, legal notices related to privacy, and general inquiries.

3. Information we collect

Depending on how you use the Service, we may process:

We do not aim to collect sensitive categories (for example health information or biometric templates used to uniquely identify you) through normal use of the Service.

4. How we use information

We use personal information to:

• Provide, operate, and improve the Service (listings, search, tutorials, comparison views, favorites sync).
• Sell and administer paid plans (Starter, Pro, Lifetime — see Pricing), process payments, manage automatic renewals (for subscriptions), cancellations, refunds (including the 14‑calendar‑day money‑back offer for Starter, Pro, and Lifetime as stated on Pricing), chargebacks, and prevent billing fraud, including through Creem.
• Create and secure accounts; authenticate you; reset passwords; send email verification codes and other transactional messages.
• Detect, prevent, and respond to fraud, abuse, spam, and security incidents.
• Measure and understand how the Service is used (including through Google Analytics 4), improve performance and UX, and perform analytics.
• Advertising and marketing measurement, including personalized advertising, remarketing/retargeting‑style use cases where configured, demographic and interest reporting, and sharing data with Google for Google Ads and related Google advertising products, as described in Section 7.
• Comply with law and enforce our Terms of Service.
• Where appropriate, use aggregate or de‑identified information that no longer identifies you.

5. Legal bases (EEA/UK users)

Where GDPR-style rules apply, we rely on:

• Contract — to provide the Service you request (for example accounts, cloud favorites, and paid subscriptions you purchase).
• Legitimate interests — for example security, anti‑abuse, and strictly necessary service reliability (balanced against your rights and with a right to object where applicable).
• Legal obligation — where the law requires us to process or retain data.
• Consent — for non‑essential cookies and similar technologies, and for advertising / measurement / personalization processing (including Google Analytics features used for ads personalization and Google Signals), where required in your jurisdiction. We present a consent banner when you first visit the Service from a jurisdiction where consent is required; your choices there control those technologies to the extent required by law. You may withdraw consent at any time (see Section 12).

We do not rely on legitimate interests alone for personalized advertising or Signals‑based cross‑device measurement where consent is required.

6. Cookies, local storage, and similar technologies

We use cookies and browser local storage for:

• Session/login state and related security tokens.
• Language and display preferences.
• Local favorites when you are not signed in or when you use offline‑style caching.
• Cloudflare may set cookies or use similar technologies when you pass through its network or complete Turnstile challenges; see Cloudflare’s documentation and privacy notice.
• Google may set or read cookies and use similar technologies for Google Analytics, Google Signals, advertising measurement, and personalized ads as described in Section 7, subject to your consent choices in our consent banner where applicable.

You can control cookies through your browser settings. Blocking certain cookies may limit features (for example staying signed in, completing security checks, or receiving personalized experiences). For EEA/UK users, non-essential cookies (including analytics and advertising cookies) will only be set after you provide consent via our consent banner.

7. Google Analytics 4, Google Signals, and Google Ads

When not in developer/testing mode, and subject to applicable consent requirements (see Section 5), we may load Google Analytics 4 and related Google tags (provided by Google LLC and affiliates). Our configuration may include:

• Google Analytics 4 — usage measurement and reporting.
• Google Signals — enables Google to associate session/device data with signed‑in Google accounts where users have turned on Ads Personalization, and may enable cross‑device reporting and advertising features as described by Google.
• Demographics and interests — aggregated or modeled demographic and interest categories in reporting.
• Ads personalization / advertising features — data may be used to build audiences, measure conversions, and support delivery and optimization of ads on Google and partner properties, including through Google Ads.

Google may process data in the United States and other countries. Google’s processing is described in:

• Google Privacy Policy
• How Google uses information from sites or apps that use our services
• Google Analytics advertising features (support documentation; features may change over time)

Your choices (non‑exhaustive):

• Adjust Google Ads personalization: Google Ads Settings
• Industry tools such as the NAI consumer opt out (US) and Your Online Choices (EU) where available.
• Browser cookie controls and extensions that block third‑party scripts/cookies.
• For EEA/UK users, withdraw or modify your consent at any time using the cookie preferences tool in our site footer.

8. Third‑party service providers

We use the following categories of providers (they may process personal information on our behalf or, for certain advertising, analytics, and security products, combine or process data under their own notices):

We may add or change partners for compatible purposes; where required by law, we will update this Policy or provide additional notice.

Security incidents involving payment data. Card processing and payment data are handled by Creem and its payment partners. In the event of a security incident affecting payment data held by Creem, Creem’s own breach notification procedures govern; you may also contact us at contact@aidevotee.com and we will assist in directing your inquiry appropriately. For incidents affecting data we hold directly, we will notify affected users as required by applicable law.

Our directory links to external websites; their privacy policies govern data collection on those sites.

9. Retention and account deletion

• Accounts and cloud favorites: retained while your account is active.
• Server logs: typically retained for a limited period necessary for security and operations (commonly on the order of weeks to a few months), unless a longer period is needed for incident investigation or legal compliance.
• Backups: may persist for a rotation period after deletion requests are honored.
• Transactional email logs (with providers such as Resend): governed by the provider’s retention and our configuration.
• Google retention is governed by Google’s settings and policies for Analytics/Ads products.
• Billing and subscriptions (Creem): governed by Creem’s retention schedules, chargeback/dispute rules, and legal/tax record‑keeping requirements. We may retain minimal billing records for accounting, tax, and fraud prevention for the periods required by law.

If you ask to delete your account, we will delete or irreversibly anonymize personal data tied to that account (including cloud favorites), subject to backup cycles, fraud prevention, and legal retention obligations (including billing and subscription records that we must or reasonably should retain). Local favorites stored only on your device are your responsibility to clear in browser settings. Deleting your account does not automatically delete all data held by Google; use Google’s controls in Section 7 where applicable. Payment and checkout records held by Creem are subject to Creem’s policies and your requests to them where applicable.

10. Security

We use industry‑standard safeguards appropriate to the nature of the Service. No method of transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and/or relevant supervisory authorities as required by applicable law.

11. International transfers and storage locations

Primary application and database processing for authenticated features is configured in Supabase (Southeast Asia — Singapore). Hosting may use Vercel and related global edge locations. Cloudflare and Google may process data in the United States and other countries. Creem may process payment and subscription data in regions where it operates (see Creem’s privacy notice).

If you access the Service from outside those locations, your information may be transferred across borders. Where required (for example for EEA/UK users), we rely on appropriate safeguards such as the EU Standard Contractual Clauses, vendor compliance programs, or other lawful transfer tools described by our vendors.

12. Your rights (EEA/UK and similar jurisdictions)

Depending on your location, you may have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase (“delete”) data in certain cases.
• Restrict processing in certain cases.
• Data portability for data you provided where processing is based on contract or consent and is automated.
• Object to processing based on legitimate interests (where applicable).
• Withdraw consent where processing is based on consent (including for advertising cookies and Google advertising features), without affecting prior lawful processing.
• Lodge a complaint with a supervisory authority.

To exercise these rights, email contact@aidevotee.com from the address associated with your account (or describe your account sufficiently for us to verify you). We may need to verify your identity before responding. We will respond within the timeframes required by applicable law (often within one month for GDPR requests, subject to extensions for complex requests).

13. California residents (CCPA/CPRA — summary)

If you are a California resident and the California Consumer Privacy Act (CCPA) as amended by the CPRA applies to our processing:

• Categories of personal information we collect are described in Section 3 (including payment and subscription information processed through Creem). We use them for the purposes in Sections 4 and 7 (including advertising and measurement).
• Sale / sharing. We use Google Analytics 4 with Google Signals, Demographics and interests, and Ads personalization, and data may be used in connection with Google Ads. Depending on statutory definitions and Google’s configuration, certain disclosures of personal information to Google may constitute a “sale” and/or “sharing” (including sharing for cross‑context behavioral advertising) under the CCPA/CPRA. We do not receive money from Google in exchange for personal information in a traditional “data broker” sense, but California law’s definitions may still apply to these transfers.
• Your rights may include the right to know, delete, and correct personal information, and the right to opt out of sale/sharing (including sharing for cross‑context behavioral advertising), and to limit use of sensitive personal information (we do not intend to collect SPI for the purposes described in CPRA’s “limit use” rules beyond incidental technical data). You may designate an authorized agent subject to verification rules.
• How to opt out (California):
  • Email contact@aidevotee.com with the subject line “California – Do Not Sell or Share” (or similar) describing your request.
  • Use Google’s controls: Google Ads Settings and Google’s resources linked in Section 7.
  • Global Privacy Control (GPC): We honor GPC signals as an opt‑out of sale/sharing of personal information where required by California law. If you have GPC enabled in your browser, we will treat that as a valid opt‑out request for the current session and, to the extent technically feasible, on a going-forward basis. You may also submit an emailed opt‑out request as described above.
• Non‑discrimination: we will not deny goods or services, charge different prices, or provide a different level of quality solely because you exercised CCPA rights, unless permitted by law.

14. Children

The Service is not directed at children under 13. See our Children’s Privacy Policy for U.S. COPPA‑oriented information and parental contacts.

15. Changes

We may update this Policy from time to time. We will post the revised version here with an updated date. Where changes are material, we will provide additional notice (for example by email to registered users or a prominent notice on the Service) where required by applicable law.

16. Contact

Privacy inquiries: contact@aidevotee.com and the contact block in the site footer.