Privacy policy
What we collect, who touches it, how long we keep it, and how to make us delete it.
Last updated 20 August 2026Who is responsible
Teks Co, based in India, is the data controller, or, under India’s DPDP Act 2023, the Data Fiduciary. Complaints go to support@aitoolsrepo.com, and to your local supervisory authority if we do not resolve them.
What we collect
Because you gave it to us: your email and name when you create an account, listing content you submit, reviews and comments you write, and billing details you enter at checkout, which go to our payment processor, not to us.
Because you used the site: pages viewed, searches run, tools clicked through to, and a hashed form of your IP address. Votes store a hashed IP so we can detect vote rings without keeping the address itself.
We do not collect: anything from third-party ad networks, anything from data brokers, and any special-category data. We have no reason to and no appetite for it.
Why we are allowed to
Contract (running your account, publishing your listing, taking payment.
Legitimate interests), detecting vote manipulation, preventing abuse, and understanding aggregate usage. We have written and dated an assessment for each of these, which is a requirement people usually skip.
Consent, the newsletter, and nothing else. Double opt-in, one click to leave, and we record when and where consent was given.
Legal obligation, tax records, and responding to lawful requests.
Everyone who processes your data
| Processor | Purpose | Data | Region | Retention |
|---|---|---|---|---|
| Supabase | Database and authentication | Account, listings, votes, reviews | Mumbai, India | Life of the account |
| Cloudflare | Hosting, CDN, bot protection | IP address, request metadata | Global edge | Security logs ≥ 12 months |
| Resend | Transactional email and newsletter | Email address, delivery events | United States | Until you unsubscribe, plus 30 days |
| PostHog | Product analytics | Pseudonymous usage events | European Union | 25 months |
| Merchant of record | Payments, invoicing, tax | Billing details, transaction records | Per their terms | As tax law requires, typically 7 years |
Transfers outside your region rely on Standard Contractual Clauses. This table names every processor, “we may share data with service providers” is not a disclosure, it is a way of avoiding one.
How long we keep things
- Account and listing data, while the account exists
- Search-log text: 90 days
- Analytics events: 25 months
- Product events (24 months
- Security-relevant logs), at least 12 months
- Invoices and tax records, as long as tax law requires
Your rights, and how to use them
Access, correction, erasure, portability, restriction, objection, and withdrawal of consent. Under the DPDP Act you may also nominate someone to exercise these on your behalf.
Email us and we will answer within 30 days. Erasure removes your account and personal data; content you published that others have replied to may remain in anonymised form, because deleting it would remove theirs too.
One thing we cannot undo: a listing that has been indexed by search engines or read by an AI crawler may persist in their caches after we delete it. We remove it from here and submit removal requests, but we do not control their copies.
Children
This site is not for under-18s. Under the DPDP Act, processing a child’s data needs verifiable parental consent, which we are not set up to obtain, so we do not knowingly collect it, and we delete it if we find it.