Privacy Policy
We review AI tools, SaaS products, and gadgets — and we run free tools you can use without an account. This page explains, in plain terms, exactly what data that involves.
Four questions people actually ask. The full detail is in the numbered sections below.
Tech Vault AI publishes independent reviews and comparisons, runs an AI tools directory, and offers a set of free web tools. This policy covers every part of that. By using the site, you agree to what is described here.
Who We Are
Tech Vault AI is an independently owned publication. Under the EU and UK General Data Protection Regulation, Tech Vault AI is the data controller for everything described in this policy, and the person accountable for it is named below.
Information We Collect
- Usage data — pages viewed, time on page, referring URL, exit pages
- Device and connection data — browser and version, operating system, screen size, language, country-level location
- IP address — handled by our hosting layer for security, abuse prevention, and request rate limiting
- Cookies and similar identifiers — every one is named in section 07
- Account data — if you register, your email address and a salted hash of your password. We never store a readable password and cannot recover one.
- Tool submissions — tool name, website URL, description, category, your name, your email, and any logo or screenshot you upload.
- Article and guest post submissions — your name, email, author bio, the content itself, and any images or links inside it.
- Business listing submissions — business name, website, contact email, category, description, and any image supplied.
- Newsletter data — if you subscribe, your email address plus the times you subscribed and unsubscribed.
- Contact messages — your name, email, and whatever you write to us.
Our free tools — the Website Audit tool, the GEO Checker, the Freelance Rate Calculator, the ROI Calculator, and the Client Onboarding Checklist — take either a website URL or numbers you type in.
Calculator inputs are processed in your browser and never reach us. URLs given to the Website Audit tool and the GEO Checker are sent to our servers so the scan can run, and are kept only in short-lived operational logs. We do not profile you from them, publish them, or sell them.
We never ask for payment card details, bank details, government ID numbers, or health information anywhere on this site. If a page claiming to be ours asks for them, do not enter anything and tell us straight away.
How We Use It
- Serve the pages, articles, and tools you request, and keep them working
- Review, edit, approve, or reject submissions sent to the directory, article queue, and business listings
- Authenticate account holders and keep sessions secure
- Measure traffic and reading behaviour so we know which topics to cover next
- Send our newsletter to people who asked for it, and stop the moment they unsubscribe
- Serve advertising and measure how it performs, once advertising goes live on this site
- Detect spam, scraping, and brute-force attempts, and apply rate limits
- Meet legal obligations and respond to lawful requests
We do not sell your personal data, and we do not pass it to data brokers.
Legal Basis for Processing
If you are in the European Economic Area or the United Kingdom, these are the legal bases we rely on under the GDPR.
- Consent — analytics and advertising cookies, where the law requires your permission before they are set, and newsletter emails. You can withdraw consent at any time using the controls in section 07, or by unsubscribing.
- Contract — creating and running your account, and processing submissions you send for publication.
- Legitimate interests — keeping the site secure, blocking abuse, and understanding traffic in aggregate.
- Legal obligation — keeping records where the law requires it.
Advertising and Google AdSense
Advertising is not running on Tech Vault AI at the moment, so no advertising cookie is being set today. This section sets out exactly how it will work from the day ads go live, and this page will be dated again on that day.
When advertising begins, it will be served through Google AdSense. Third-party vendors, Google among them, use cookies and similar identifiers to select and measure ads based on your earlier visits to this site and to other sites across the internet.
You can switch off ad personalisation at any time in Google Ads Settings, or opt out of participating vendors at aboutads.info and optout.networkadvertising.org.
This does not remove ads. It makes them generic instead of tailored to you.
Before any advertising cookie is ever set for visitors in the EEA, the UK, or Switzerland, we will put a consent message in place and honour a refusal by serving non-personalised ads instead. Google's own account of what it does with this data is in its notice on data from partner sites.
We do not control the cookies Google places, and Google does not tell us who you are. Their side of it is governed by the Google Privacy Policy.
Affiliate Links
Some links in our reviews, AI tool and SaaS tool pages, gadget coverage, and comparisons are affiliate links. If you buy through one, we may earn a commission at no extra cost to you.
Clicking an affiliate link usually lets the destination merchant set its own cookie or add a tracking parameter so the referral is credited. That tracking belongs to the merchant, not to us. What comes back to us is an aggregate commission report — never your name, address, or payment details.
No affiliate relationship has ever changed a score or a verdict.
Third-Party Services
These providers process data on our behalf or in their own right. Each has its own privacy policy.
- Vercel — hosting, delivery, and server logs (policy)
- Supabase — database and account authentication (policy)
- Cloudinary — storage and delivery of images, including anything you upload with a submission (policy)
- Google Analytics — traffic measurement (policy)
- Google AdSense — advertising, planned but not yet running (how Google uses partner site data)
- Google reCAPTCHA — spam and bot protection on our forms, subject to the Google Privacy Policy and Terms of Service
- Rate limiting and caching infrastructure — briefly processes IP addresses to block abuse
How Long We Keep Data
How We Protect It
- All traffic served over HTTPS with a valid TLS certificate
- Passwords stored only as salted hashes, never in readable form
- Sessions use signed tokens with a limited lifetime
- Forms and login endpoints protected by rate limiting and bot detection
- Content Security Policy and related security headers enforced
- Database access restricted, with credentials held as encrypted environment secrets
No system is completely secure. If a breach affects your personal data and poses a real risk to you, we will notify you and the relevant authority as the law requires.
International Transfers
Tech Vault AI is operated from Bangladesh. Our providers — Vercel, Supabase, Cloudinary, and Google — process data on servers in the United States, the European Union, and elsewhere.
If you are in the EEA or the UK, your data may therefore leave your country. Where that happens, our providers rely on Standard Contractual Clauses or an equivalent approved mechanism, and we choose providers that publish those commitments.
Your Data Rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct anything wrong or out of date
- Delete your data, including your account
- Restrict or object to certain processing
- Withdraw consent for cookies, or unsubscribe from the newsletter, at any time
- Receive your data in a portable, machine-readable format
Email info@techvaultai.com from the address tied to your data. We reply within 30 days, at no charge unless a request is repetitive or clearly excessive.
EEA and UK visitors also have the right to complain to their national data protection authority if they believe we have handled data improperly.
California Privacy Rights
If you are a California resident, the CCPA and CPRA give you the right to know what personal information we collect, to have it deleted or corrected, to receive it in a portable format, and not to be treated differently for asking.
We do not sell personal information, and we do not currently share it for cross-context behavioural advertising, because advertising is not yet running on this site.
When advertising begins, using advertising cookies to serve personalised ads can count as "sharing" under California law. From that point you will be able to opt out on this site, and you can already turn off ad personalisation across Google products in Google Ads Settings. To make any request in writing, email info@techvaultai.com.
Children's Privacy
Tech Vault AI is written for a professional, adult audience. It is not directed at children under 13, or under 16 where local law sets that higher age, and we do not knowingly collect data from children.
If you are a parent or guardian and believe a child has given us personal data, email info@techvaultai.com and we will delete it.
Changes to This Policy
We update this policy when our tools, providers, or legal obligations change. The date at the top always reflects the most recent revision.
If a change materially affects how we use your data, we will make it visible on the site and, where consent is required, ask again before it takes effect. Continuing to use the site after an update means you accept the revised policy.
Contact Us
Questions about this policy, or want to use one of your data rights? Write to us — we reply within 30 days.