# Privacy Policy for AiToolsSpace.com
Last Updated: January 28, 2025
Contact Email: [email protected]
## 1. Data Controller Information
1.1 The data controller responsible for processing your personal data is AiToolsSpace.com
1.2 If you have any questions or concerns about how we process your personal data, please contact us at [email protected]
1.3 For users located in the European Economic Area (EEA), you have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately
## 2. Information We Collect
### 2.1 Directly Provided Information
2.1.1 Email address when you subscribe or register for our service
2.1.2 User feedback and reviews you submit
2.1.3 Display name and profile information you provide
2.1.4 Country and timezone information for service personalization
### 2.2 Automatically Collected Information
2.2.1 IP address and approximate location
2.2.2 Device information including browser type and operating system
2.2.3 Browsing history and pages visited on our site
2.2.4 Cookie data and similar tracking technologies
2.2.5 Browser timezone and language preferences
### 2.3 Third-Party Authentication Data (Google Sign-In)
2.3.1 When you use Google Sign-In to access our service, we collect the following information from Google through OAuth 2.0
2.3.2 Google User ID: A unique identifier provided by Google
2.3.3 Email Address: Your Google account email address
2.3.4 Display Name: Your full name as shown in your Google account
2.3.5 Given Name: Your first name from your Google account
2.3.6 Profile Picture URL: Your Google account profile picture URL
2.3.7 Locale: Your language and region settings
2.3.8 Important Notes:
- We only collect information that Google makes available through the OAuth 2.0 authentication process
- We do not access your Google account beyond what is necessary for authentication and account creation
- We do not store your Google account password
- We do not access your Google Drive, Gmail, or other Google services
### 2.4 Third-Party Analytics Data
2.4.1 Statistical data collected via tools like Google Analytics
2.4.2 This data is anonymized and aggregated for analytical purposes
## 3. Legal Basis for Processing (GDPR)
3.1 We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
3.2 Consent: When you provide explicit consent, such as when you register for our service or use Google Sign-In
3.3 Contract Performance: To fulfill our contractual obligations to you, such as providing access to our service
3.4 Legitimate Interests: To improve our services, ensure security, and prevent fraud
3.5 Legal Obligations: To comply with applicable laws and regulations
3.6 You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
## 4. Purposes of Data Use
4.1 We use the information we collect for the following purposes:
4.2 Provide and improve our services: Create and manage your account, personalize your experience
4.3 Authentication: Verify your identity when you log in using Google Sign-In or email and password
4.4 Personalize the user experience: Customize content based on your preferences, timezone, and location
4.5 Send updates and newsletters: You can unsubscribe at any time
4.6 Analyze website usage: Understand how users interact with our service to improve functionality
4.7 Account management: Maintain your account settings, preferences, and activity history
4.8 Security and fraud prevention: Detect and prevent unauthorized access and fraudulent activities
4.9 Legal compliance: Comply with applicable laws, regulations, and legal processes
## 5. Your Rights Under GDPR and CCPA
5.1 As a data subject, you have the following rights:
5.2 Right of Access: You have the right to know what personal data we hold about you, including data collected through Google Sign-In. You can request a copy of your personal data at any time
5.3 Right to Rectification: You have the right to correct inaccurate or incomplete data, including updating your display name, country, or timezone
5.4 Right to Erasure: You have the right to request the deletion of your personal data, including disconnecting your Google account. This is also known as the right to be forgotten
5.5 Right to Restrict Processing: You have the right to request that we limit how we use your personal data in certain circumstances
5.6 Right to Data Portability: You have the right to receive a portable copy of your data in a structured, commonly used, and machine-readable format
5.7 Right to Object: You have the right to object to certain types of processing, including direct marketing
5.8 Right to Withdraw Consent: You have the right to withdraw your consent at any time, including disconnecting your Google account from our service
5.9 Right to Lodge a Complaint: If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have violated your data protection rights
### 5.10 How to Exercise Your Rights
5.10.1 Access or Update Data: Log in to your account and visit the profile settings page
5.10.2 Disconnect Google Account: Go to your profile settings and click Unbind next to your Google account
5.10.3 Delete Account: Contact us at [email protected] to request account deletion
5.10.4 Data Export: Contact us at [email protected] to request a copy of your data in a portable format
5.10.5 We will respond to your request within one month, or within two months for complex requests
## 6. Data Sharing and Third Parties
6.1 We only share your data in the following situations:
6.2 With service providers: We share data with trusted service providers who assist us in operating our service, including:
- Hosting providers for website infrastructure
- Analytics tools such as Google Analytics for website usage analysis
- Authentication services such as Google OAuth for login functionality
6.3 To comply with legal obligations: When required by law, court order, or legal process
6.4 To protect our legal rights: When necessary to protect our rights, property, or safety, or that of our users
6.5 In connection with a business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity
6.6 With your explicit consent: When you have given us explicit permission to share your data
### 6.7 Google OAuth Data Sharing
6.7.1 When you use Google Sign-In, Google may collect information about your use of our service according to Google's Privacy Policy
6.7.2 We do not share your Google account information with third parties except as described in this policy
6.7.3 Your Google User ID is stored securely and used only for authentication purposes
6.7.4 We do not sell your personal data to third parties
## 7. International Data Transfers
7.1 Your personal data may be transferred to and processed in countries outside of your country of residence
7.2 For users in the EEA, we ensure that appropriate safeguards are in place for international data transfers, including:
7.3 Standard Contractual Clauses approved by the European Commission
7.4 Adequacy decisions by the European Commission recognizing certain countries as providing adequate data protection
7.5 Other legally recognized transfer mechanisms
### 7.6 Google OAuth Data Transfers
7.6.1 When you use Google Sign-In, your authentication data may be processed by Google servers located in various countries
7.6.2 Google's data processing is subject to Google's Privacy Policy and applicable data protection laws
7.6.3 Google has committed to comply with applicable data protection laws, including GDPR
## 8. Cookie Policy
8.1 We use cookies and similar tracking technologies to enhance your experience on our website
8.2 Types of cookies we use:
8.3 Essential Cookies: Required for basic website functionality, including authentication and session management
8.4 Analytics Cookies: Help us understand how visitors interact with our website to improve our services
8.5 Marketing Cookies: Used to deliver relevant advertising and track campaign effectiveness
8.6 Authentication Cookies: Used to maintain your login session and remember your preferences
8.7 You can manage your cookie preferences through your browser settings
8.8 Note that disabling certain cookies may affect the functionality of our website
## 9. Data Retention
9.1 We retain personal data only for as long as necessary to fulfill the purposes we collected it for, or as required by law
9.2 Account Data: We retain your account information as long as your account is active
9.3 After Account Deletion: If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal purposes
9.4 Legal Requirements: We may retain certain data for longer periods if required by law, such as for tax or accounting purposes
### 9.5 Google OAuth Data Retention
9.5.1 Your Google User ID and authentication tokens are retained as long as your account is active
9.5.2 If you disconnect your Google account, we will delete the associated OAuth data within 30 days
9.5.3 If you delete your account, all associated data, including Google OAuth information, will be permanently deleted
## 10. Children's Privacy
10.1 Our service is not directed at children under the age of 13, or under the age of 16 in the European Economic Area
10.2 We do not knowingly collect personal information from children
10.3 If we discover that we have collected data from a child without parental consent, we will delete that information immediately
10.4 If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]
### 10.5 Google Sign-In Age Restrictions
10.5.1 Google Sign-In requires users to be at least 13 years old, or 16 years old in the EEA
10.5.2 We comply with these age restrictions and do not knowingly collect data from underage users
10.5.3 If we become aware that a user under the required age has used Google Sign-In, we will take steps to delete their account and data
## 11. Third-Party Authentication (Google Sign-In)
### 11.1 How Google Sign-In Works
11.1.1 When you click Sign in with Google, you are redirected to Google's authentication service
11.1.2 Google verifies your identity and asks for your consent to share information with us
11.1.3 After you consent, Google provides us with your basic profile information including name, email, and profile picture
11.1.4 We use this information to create or link your account on our service
11.1.5 You can revoke this consent at any time by disconnecting your Google account in your profile settings
### 11.2 Information Collected Through Google Sign-In
11.2.1 Google User ID: Stored in our database to identify your account uniquely
11.2.2 Email Address: Used as your account email address
11.2.3 Display Name: Used as your default display name, which you can change later
11.2.4 Profile Picture URL: Used as your default avatar, which you can change later
11.2.5 Locale Information: Used to infer your country and timezone preferences for personalization
### 11.3 How We Use Google OAuth Data
11.3.1 Account Creation: To automatically create your account without requiring email verification
11.3.2 Account Linking: To link your Google account to an existing account if your email matches
11.3.3 Authentication: To verify your identity on subsequent logins
11.3.4 Personalization: To customize your experience based on your location and preferences
### 11.4 Your Control Over Google Sign-In
11.4.1 Disconnect: You can disconnect your Google account at any time from your profile settings
11.4.2 Account Deletion: Disconnecting Google does not delete your account; you can still log in with email and password if you have set that up
11.4.3 Data Deletion: If you delete your account, all Google OAuth data will be permanently deleted
11.4.4 Revoke Google Access: You can also revoke our access to your Google account through your Google account settings
### 11.5 Google's Privacy Policy
11.5.1 Your use of Google Sign-In is also subject to Google's Terms of Service and Privacy Policy
11.5.2 We encourage you to review Google's privacy practices to understand how Google handles your data
11.5.3 We are not responsible for Google's data practices or privacy policies
## 12. Automated Decision Making and Profiling
12.1 We do not use automated decision-making or profiling that produces legal effects or significantly affects you
12.2 We may use automated processes to personalize content and recommendations, but these do not have legal or significant effects on you
12.3 You have the right not to be subject to automated decision-making, including profiling, that produces legal effects or significantly affects you
## 13. Data Security
13.1 We implement appropriate technical and organizational measures to protect your personal data
13.2 Security measures include:
13.3 Encryption of data in transit using SSL/TLS protocols
13.4 Secure storage of passwords using industry-standard hashing algorithms
13.5 Regular security assessments and updates
13.6 Access controls and authentication mechanisms
13.7 However, no method of transmission over the Internet or electronic storage is 100% secure
13.8 While we strive to protect your personal data, we cannot guarantee absolute security
## 14. Changes to This Privacy Policy
14.1 We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons
14.2 We will notify you of any material changes by:
14.3 Updating the Last Updated date at the top of this page
14.4 Posting a notice on our website
14.5 Sending an email to registered users if the changes are significant
14.6 Your continued use of our service after such changes constitutes your acceptance of the updated Privacy Policy
## 15. Contact Us
15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
15.2 Email: [email protected]
15.3 We will respond to your inquiry within a reasonable timeframe, typically within 30 days
15.4 For users in the EEA, you may also contact your local data protection authority if you have concerns about how we handle your personal data