Privacy Policy

1. Information We Collect

1.1 Assessment Response Data

When you complete our recommendation assessment, we collect your answers including business size, industry, use case, budget range, technical proficiency, and integration requirements. This data is used solely to generate your personalised tool recommendation.

Assessment responses are stored without personally identifiable information (PII). We do not require your name, email address, or company name to use the assessment.

1.2 Optional Information

If you choose to subscribe to our newsletter, download a PDF report, or contact us, we collect your email address and any information you voluntarily provide. This is always opt-in and clearly indicated.

1.3 Analytics Data

We use Plausible Analytics, a privacy-focused, cookieless analytics service. Plausible does not use cookies, does not collect personal data, and does not track individual visitors across websites. All analytics data is aggregated and cannot be used to identify you.

1.4 Affiliate Tracking

When you click on an affiliate link to a recommended tool, the affiliate partner may place a cookie on your device to track the referral. These cookies are placed by the third-party tool provider, not by AI Choice Guide. We receive only aggregated conversion data (e.g., how many users clicked through and signed up). We do not receive any personal information about you from affiliate partners.

2. How We Use Your Information

• Providing recommendations: Your assessment responses are processed by our scoring algorithm to generate personalised AI tool recommendations.
• Improving our service: Aggregated, anonymised assessment data helps us improve recommendation accuracy and identify trends in AI tool adoption.
• Communication: If you opt in, we use your email to send newsletters, tool updates, and pricing alerts. You can unsubscribe at any time.
• Legal compliance: We may process data as required by applicable law.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, our legal bases for processing are:

4. Data Retention

Raw assessment response data is retained for 90 days. After this period, responses are aggregated and anonymised for analytical purposes, and individual records are permanently deleted.

If you provide your email address, we retain it until you unsubscribe or request deletion, whichever comes first.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

• No data sales: We will never sell your data.
• Affiliate partners: We share only aggregated, anonymised conversion data. No personal information is shared.
• Service providers: We use Supabase (database hosting), Vercel (web hosting), and Plausible (analytics). These providers process data on our behalf under data processing agreements.
• Legal requirements: We may disclose data if required by law, court order, or to protect our legal rights.

6. Your Rights

6.1 GDPR Rights (EEA & UK)

You have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing.

To exercise any of these rights, email us at privacy@ai-choiceguide.com. We will respond within 30 days.

6.2 CCPA/CPRA Rights (California)

California residents have the right to: know what personal information we collect, delete personal information, opt out of the sale of personal information (note: we do not sell personal data), and non-discrimination for exercising these rights. To exercise your rights, email us at privacy@ai-choiceguide.com.

7. Cookies

AI Choice Guide itself does not place cookies on your device. Our analytics tool (Plausible) is completely cookieless.

However, when you click an affiliate link to a third-party tool, that provider may place cookies on your device. We have no control over third-party cookies. You can manage cookies through your browser settings. See our Cookie Policy for more details.

8. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Server-side processing of all scoring data (no sensitive data in the browser)
• Encryption in transit (TLS 1.3)
• Input sanitisation on all forms
• Rate limiting on our assessment API
• Access controls with audit logging

9. International Transfers

Our hosting infrastructure may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required.

10. Children

Our service is designed for business professionals and is not directed at children under 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via our website. The "Last updated" date at the top reflects the most recent revision.