Privacy Policy — AI for Service

1. Who We Are

AI for Service is operated by MC Tools (Michael Cardin). This policy explains what data we collect when you use aiforservice.directory, how we use it, and who we share it with.

2. Data We Collect

We collect data in the following ways:

Listing submissions: When you submit a tool, we collect your name, company email address, website URL, and information about your software product.
Email subscriptions: If you sign up for our email list, we collect your email address and the source of your signup.
Payment data: Payments are processed by Paddle. We do not store your credit card or billing details. Paddle shares your email address and transaction ID with us to fulfill your listing purchase.
Analytics: We use two analytics tools — Plausible Analytics (cookie-free, privacy-friendly, runs by default) and Google Analytics 4 (uses cookies, requires your consent before activating). Plausible collects only aggregate traffic data (page views, referrers, device types) with no personally identifiable information. Google Analytics 4 collects standard web analytics data including approximate location, device type, browser, pages visited, and referral source. If you decline Google Analytics in our cookie banner, GA4 runs in Consent Mode v2 and only sends anonymized signals with no cookies set on your device.

3. How We Use Your Data

To process and publish your directory listing
To send transactional emails related to your submission or listing status
To send occasional updates if you subscribed to our email list
To improve the directory and understand how visitors use the site
To protect the site from automated abuse (bot detection, form spam)

4. Third-Party Processors

We use the following third-party services that may process your data:

Supabase — database and infrastructure hosting
Paddle — payment processing and Merchant of Record
Resend — transactional email delivery
Plausible Analytics — privacy-friendly, cookieless analytics
Google Analytics 4 — web analytics (consent-gated, see Cookies section)
Vercel — site hosting and serverless infrastructure
Cloudflare — content delivery network, DNS, and security (DDoS, bot protection)
Cloudflare Turnstile — privacy-friendly bot detection on submission forms. We use Turnstile in Invisible mode, which runs a silent challenge in the background without prompting visitors to click anything. See the Cloudflare Turnstile Privacy Addendum for details on what Turnstile collects.

5. Cookies

We use the following types of cookies and storage:

Strictly necessary: A small amount of browser storage is used to remember your cookie consent choice and to keep your session active during checkout. These cannot be disabled.
Analytics (Google Analytics 4): Sets cookies to measure how visitors use the site. Only activated if you click Accept in our cookie banner. If you Decline, GA4 runs in Consent Mode v2 — no cookies are set on your device and only anonymized aggregate signals are sent.
Plausible Analytics: Does not use cookies at all.
Paddle (checkout):Paddle may set cookies during checkout to process your payment. These are governed by Paddle's own privacy policy.
Cloudflare:May set cookies for security and bot detection purposes (e.g. distinguishing humans from bots). These are governed by Cloudflare's own privacy policy.

You can change your cookie consent at any time by clicking "Manage Cookies" in the footer.

6. Data Retention

Submission data is retained as long as your listing is active. If you request removal of your listing and associated data, contact us and we will process the request within 30 days. Analytics data is retained according to each provider's default policy (Google Analytics 4 default retention is 2 months for event-level data; Plausible aggregates by date and retains indefinitely with no individual identification).

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. If you are located in the EU or UK, you have additional rights under GDPR including the right to object to processing, the right to data portability, and the right to lodge a complaint with your local supervisory authority.

8. Contact

Privacy questions or data requests? Use our Contact page.