AI CentralHub is a free AI tools directory operated by The Webdux, registered in the Netherlands. We act as the data controller for all personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via our contact form at ai-centralhub.com/contact or by email at info@ai-centralhub.com.

We collect the following categories of personal data:

— Contact form submissions: your name, email address, company name (optional), reason for contact and message when you contact us.

— Tool submissions: your name, email address and tool details (name, URL, category, description, pricing and app type) when you submit a tool to our directory.

— Account data: when you create an account using Google or GitHub OAuth, we receive your name, email address and profile picture from those providers, along with a unique identifier linked to your social provider account.

— User-generated content: reviews and ratings you submit for AI tools, tools you save to your favourites, and tool submissions you make through the Submit a Tool form.

— Newsletter subscriptions: your email address if you subscribe to our newsletter.

— Usage data: pages visited, time spent, browser type, device type and IP address collected automatically via cookies and analytics tools.

We do not collect any special categories of personal data (such as health, financial or political data).

Under the GDPR, we process your personal data on the following legal bases:

— Contractual necessity: to provide our services, process your account registration, handle tool submissions and manage your user-generated content.

— Legitimate interests: to improve our website, understand how users interact with our content and prevent fraud.

— Consent: for non-essential cookies and analytics. You may withdraw your consent at any time via our cookie settings.

— Legal obligation: where we are required to process data to comply with applicable law.

We use your personal data for the following purposes:

— To respond to your contact form submissions and tool submissions.

— To create and manage your user account and provide access to registered features (reviews, favourites, tool submissions).

— To display your reviews and ratings publicly on tool pages, associated with your username.

— To store your favourited tools privately in your dashboard.

— To process and review your tool submissions before publishing them to the directory.

— To improve and maintain our website and directory.

— To send transactional emails such as submission confirmations, account notifications and newsletter issues via Resend.

— To analyse website usage and improve user experience.

We do not sell, rent or share your personal data with third parties for marketing purposes.

Reviews and Ratings: Reviews you submit are publicly visible on tool pages and associated with your username. You can delete your own reviews at any time from the tool page.

Tool Submissions: When you submit a tool, we store the submission details along with your account information as the submitter. Submissions are reviewed by our team before being published. Approved tools are listed with is_active set to true and an approval date.

Favourites: Your saved/favourited tools are stored privately and only visible to you in your dashboard. You can remove favourites at any time.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

— Contact form messages: retained for 12 months.

— Tool submission data: retained for the duration of the listing plus 12 months.

— Account data: retained for as long as your account is active, plus 30 days after deletion request.

— Reviews and favourites: retained until you delete them or request account deletion.

— Newsletter subscriptions: retained until you unsubscribe.

— Analytics data: retained for 26 months in anonymised form.

After the applicable retention period, your data is securely deleted or anonymised.

We use the following third-party services that may process your personal data:

— Google OAuth: authentication provider. Privacy policy: policies.google.com/privacy.

— GitHub OAuth: authentication provider. Privacy policy: docs.github.com/en/site-policy/privacy-policies/github-privacy-statement.

— Google Analytics: for website usage analytics. Data is anonymised and processed in accordance with Google's Privacy Policy.

— Vercel: our website hosting provider, based in the United States. Data transfers are covered by Standard Contractual Clauses.

— Resend: transactional email delivery for contact form replies, submission confirmations and newsletter emails.

All third-party processors are bound by data processing agreements and are required to handle your data in compliance with the GDPR.

Some of our third-party service providers are located outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

As a data subject under the GDPR, you have the following rights:

— Right of access: you may request a copy of the personal data we hold about you.

— Right to rectification: you may request that we correct inaccurate or incomplete data.

— Right to erasure: you may request that we delete your personal data ("right to be forgotten"), subject to legal obligations.

— Right to restriction: you may request that we restrict the processing of your data in certain circumstances.

— Right to data portability: you may request your data in a structured, machine-readable format.

— Right to object: you may object to processing based on legitimate interests or for direct marketing.

— Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at info@ai-centralhub.com with the subject line "GDPR Request". We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

We use cookies and similar tracking technologies on our website. For full details of the cookies we use and how to manage them, please see our Cookies Policy at ai-centralhub.com/cookies-policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. These measures include encrypted data transmission (HTTPS), secure OAuth authentication via Google and GitHub, JWT tokens with automatic expiry and refresh, API keys stored server-side only and never exposed to the browser, and regular security reviews.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of AI CentralHub after any changes constitutes your acceptance of the updated policy.