Privacy Policy

1. Data Controller

The controller responsible for this website is:

• Operator: Nick S.
• Address: ...
• Country: Portugal
• Privacy contact: [email protected]

2. Information We Process

AI tool input and output

When you use a generator, we process the text you enter and the response generated for that request. Generation records may include the selected tool, prompt configuration, request identifier, input text, response text, token usage, status and technical error information.

Technical and usage information

We may process your IP address, browser or device user-agent string, requested URL, referring page, timestamps, tool identifiers and events such as page views, generation attempts, successful generations, errors and daily-limit events.

Communications

If you contact us, we process the information contained in your message and the contact details you provide so that we can respond.

Essential cookies and session data

The website may use cookies or similar browser storage that are necessary for security, session handling and form protection. Non-essential analytics or advertising cookies should not be activated without any notice or consent required by applicable law.

3. Why We Process Information

• To provide the AI generation requested by the user.
• To enforce free usage limits and prevent abuse.
• To detect errors, protect the service and investigate security incidents.
• To understand which tools are used and improve website performance.
• To respond to enquiries and privacy requests.
• To comply with legal obligations and establish or defend legal claims.

Depending on the context, processing may be based on providing a service you requested, our legitimate interests in operating and securing the website, compliance with legal obligations or consent where applicable.

4. AI Processing by OpenAI

Tool inputs are sent through the OpenAI API to generate a response. This means the text you submit is disclosed to OpenAI as our AI infrastructure provider and may be processed outside your country.

OpenAI states in its current API data controls that API inputs and outputs are not used to train its models by default unless the customer opts in. Standard abuse-monitoring logs may contain prompts and responses and are generally retained for up to 30 days, unless longer retention is legally required. Some API features may keep application state for different periods. OpenAI's controls, terms and practices may change, so users should review its current privacy and API data-control information.

Do not submit confidential information, trade secrets, passwords, API keys, payment information, health records, government identifiers or personal data that is not necessary for the requested result.

5. Storage and Response Caching

The service may store generation inputs and outputs in its database for operation, debugging, abuse prevention and response caching. If an identical input has already produced a successful result for the same tool, the service may return the stored response instead of sending a new request to the AI provider.

Records are kept only for as long as reasonably necessary for the purposes described in this policy, taking into account security needs, dispute handling, legal obligations and technical maintenance. Records may be deleted or anonymised when they are no longer required.

6. Service Providers and Other Recipients

Information may be processed by:

• OpenAI, as the provider used to generate AI responses.
• Website hosting, infrastructure, database and security providers.
• Email providers used to receive and respond to messages.
• Professional advisers or authorities where disclosure is required by law.

When you choose to follow an external or affiliate link, the destination service may collect information under its own privacy policy. AI Tools Land does not control the privacy practices of independent third-party websites.

7. International Data Transfers

Some providers may process information outside the European Economic Area. Where required, transfers should rely on an applicable legal mechanism such as an adequacy decision, standard contractual clauses or another lawful safeguard.

8. Your Data Protection Rights

Subject to applicable law, you may have the right to:

• Request access to personal data held about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of data in applicable circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Receive portable data where the right applies.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the competent data protection authority.

To exercise a right, contact the privacy address above. We may request limited information needed to verify your identity and locate the relevant records.

9. Security

We use reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, loss or disclosure. However, no internet service or storage system can be guaranteed to be fully secure.

10. Changes to This Policy

This policy may be updated when the service, providers or legal requirements change. The effective date at the top of the page will be updated when material revisions are published.