Skip to content
AI Testing Tools

Privacy Policy

Last updated: 22 October 2026

1. Introduction

Welcome to AI Testing Tools ("we", "our", "us"). This Privacy Policy explains how we collect, use and protect personal data when you use https://www.testingtools.ai (the "Website"), our free AI tools, and any associated services (together, the "Service").

If our site links to third-party sites, their privacy policies apply there. Please review them before providing any personal information.

2. Key Terms

  • "Service" means our Website, tools and associated services.
  • "Personal Data" means any information relating to an identified or identifiable natural person.
  • "Usage Data" means data collected automatically from the use of the Service.
  • "Cookies" are small files stored on your device; "local storage" is similar browser storage.

3. Data Controller

DASTEM Digital OÜ (registry code 16208783, Tartu mnt 67/1-13b, 10115 Tallinn, Estonia) is the data controller for personal data collected through the Service. For privacy questions or to exercise your rights, contact hello@aitesting.tools.

  • Contract (Art. 6(1)(b) GDPR): your account, tool listings, claims, and paid services you buy.
  • Legal obligation (Art. 6(1)(c)): invoices and accounting records, tax (VAT) reporting.
  • Legitimate interests (Art. 6(1)(f)): keeping the Service secure, preventing spam and abuse, answering your messages.
  • Consent (Art. 6(1)(a)): analytics cookies and the newsletter. You can withdraw consent at any time.

5. Information We Collect

5.1 Information You Provide

  • Account: your email address. If you sign in with Google or GitHub, also your name and the account ID they share with us. We don't use passwords: you sign in with a one-time link sent to your email, or through Google or GitHub.
  • Tool listings and claims: the listing content you submit (name, website, descriptions, logo, screenshots, video link, categories), and any message you add to a claim. To verify a claim we compare your email address's domain with the tool's website.
  • Payments: when you buy a Verified listing, a Featured Listing or the Top Sponsor Bar, our payment provider Stripe collects your card details, billing name and address, and optionally your company VAT ID. We receive the order details, amounts, VAT, your billing country and the invoice, but never your full card number.
  • Sponsor messages: the company name, message, link and logo you provide for the sponsor bar.
  • Newsletter: your email address, if you subscribe.
  • Contact forms: your email address, name and message.
  • Free AI tools: the input you provide when using a tool and, if you choose to, your own OpenAI API key (stored encrypted).

5.2 Information Collected Automatically

  • Security data: to prevent spam and abuse we keep a salted, one-way hash of your IP address with form submissions and rate limits. Raw IP addresses are not stored by us.
  • Usage data: pages visited and interactions (for example, clicks on a tool's website link), collected with PostHog only if you accept analytics cookies.
  • Technical logs: our hosting and infrastructure providers process IP addresses, browser information and error logs to deliver the Service.

6. How We Use Your Information

  • To provide the Service: your account, the directory, your listings, claims and paid promotions.
  • To process payments, issue invoices and meet tax and accounting obligations.
  • To send service emails: sign-in links, submission and claim decisions, receipts and booking confirmations.
  • To send the newsletter, if you subscribed.
  • To answer your messages and provide support.
  • To keep the Service secure and prevent fraud and abuse.
  • To understand and improve how the Service is used (with your consent).

7. Service Providers

We use these processors to run the Service. Each processes personal data only on our instructions, under a data processing agreement where required by the GDPR.

  • Supabase (EU, Frankfurt): database, authentication and file storage. Privacy policy.
  • Netlify: website hosting and delivery. Privacy policy.
  • Stripe: payments, invoices and VAT calculation (Stripe Tax). Privacy policy.
  • Resend: sending service emails, including sign-in links. Privacy policy.
  • Kit (kit.com): newsletter. Privacy policy.
  • Cloudflare Turnstile: bot protection on sign-in and forms. Privacy policy.
  • PostHog (EU): product analytics, only with your consent. Privacy policy.
  • Google and GitHub: only if you choose to sign in with them.
  • OpenAI / Microsoft Azure OpenAI: processing the input of the free AI tools. Your data is not used to train their models. OpenAI privacy policy.

8. International Transfers

We prefer providers that process data in the EU/EEA. Where data is transferred outside the EEA (for example, to providers in the United States), we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

9. Information That Is Public

Published tool listings and sponsor messages are public by design. Your email address and account details are never shown publicly.

10. Cookies and Local Storage

  • Strictly necessary: a sign-in session cookie when you're signed in, and cookies set by Cloudflare Turnstile and Stripe on the pages that use them.
  • Analytics (optional): PostHog stores an identifier in a cookie and local storage only after you accept analytics cookies. If you decline, nothing is stored and analytics stay off.
  • Local storage: your bookmarks, your cookie choice, and whether you've already seen the current sponsor pop-up. This stays in your browser.

11. Data Security

  • Data is encrypted in transit (HTTPS) and access to our systems is restricted and protected by two-factor authentication.
  • Stored API keys are encrypted.
  • We do not store the input or output of the free AI tools.

12. Data Retention

  • Account data: until you delete your account (Dashboard → Account), or after long inactivity. Published listings stay in the directory without being linked to you.
  • Orders and invoices: 7 years, as required by Estonian accounting law.
  • Security records (hashed IPs, rate limits): about 24 hours.
  • Contact messages: as long as needed to handle your request.
  • Newsletter: until you unsubscribe.

13. Your Rights Under the GDPR

You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact hello@aitesting.tools. You can also lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.

14. Children's Privacy

The Service is not directed at anyone under 16, and we do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy. We'll post the new version on this page and update the date above; for significant changes we'll notify account holders by email.

16. Contact Us