Privacy Policy

1. Introduction

Welcome to BuilderAI.tools, a service operated by TPS Worldwide LLC, Phoenix, Arizona ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By accessing or using BuilderAI.tools, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.

This policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), Switzerland, California (USA), Brazil, Canada, Australia, and other jurisdictions with specific data protection requirements.

2. Information We Collect

2.1 Information You Provide Directly

Authentication and account access

BuilderAI does not require accounts for browsing or submitting tools. Verified access is offered to users who wish to claim listings they have submitted, edit listings they own, or rate tools. Verified access works through single-use sign-in links sent to your email address. We do not store passwords, and we do not use third-party OAuth providers. Sessions are maintained via cookies set by the Supabase auth library on your browser; you can sign out at any time from your profile.

When you complete a verified sign-in, the following are stored against your authenticated session:

• Email address: Used to send single-use sign-in links and the transactional emails described below
• Display name: Defaults to the local part of your email; shown publicly on any reviews you post

Email addresses we collect

When you submit a tool, we store the email you provided so we can notify you of approval and send you a link to claim and manage the listing. When you rate a tool, we store the email you used to verify the rating. When you sign in to manage a listing, your email is associated with your authenticated session. We do not share these emails with third parties.

Tool submissions

When you submit a tool, we collect:

• Tool name, website URL, GitHub URL
• Description and category selection
• Tags you provide
• The email address you provided so we can follow up about the submission

Ratings and reviews

When you rate a tool, we collect:

• Your rating (1 to 5 stars)
• Optional comments
• The email used to verify the rating, if you submitted while signed out
• Your user ID and timestamp once the rating is verified and posted

User Preferences and Activity

• Favorites: Tools you save to your favorites list
• Hidden tools: Tools you choose to hide from your browsing experience
• Theme preference: Your light/dark mode selection
• Account activity data: Records associated with your submissions, favorites, ratings, and preferences

2.2 Information Collected Automatically

When you access our website, we automatically collect:

• IP Address: Used for security, spam prevention, abuse detection, and basic analytics. IP addresses are not used to personally identify you.
• Device Information: Browser type and version, operating system, device type, screen resolution
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, timestamps
• Cookies and Local Storage: See our Cookie Policy for details

2.3 Information from Third Parties

We may receive information from third-party services we use:

• Cloudflare: Hosting, CDN, and Turnstile bot-protection provider; provides aggregated analytics and performance data (if enabled)
• Supabase: Database and authentication provider; processes authentication via single-use email links and stores data on our behalf
• Resend: Transactional email delivery provider used to send sign-in links and notifications
• Google Analytics 4 (Google LLC): When you grant analytics consent, we use Google Analytics to understand how visitors use the site (pages viewed, session duration, traffic sources). Google Analytics sets cookies on your browser and transmits aggregated usage data to Google. See Google's Privacy Policy at policies.google.com/privacy for details.

2.4 Advertising

We do not currently display advertising. We are evaluating Google AdSense and may activate it in the future. When AdSense is activated, this policy will be updated to disclose: the categories of personal information shared with Google for personalized advertising, the cookies set by Google AdSense (including __gads, __gpi, IDE, NID), the choices you have to opt out of personalized ads (Google's Ad Settings, our cookie banner), and the legal basis for any sharing of personal information with Google for advertising purposes.

If and when advertising is enabled, you will be able to control ad personalization through Google Ads Settings or opt out of interest-based advertising through aboutads.info. Our cookie banner will let you reject advertising cookies regardless of those external settings.

3. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services (account creation, tool submissions, ratings)
• Consent: Where you have given explicit consent (e.g., optional marketing communications, magic-link sign-in)
• Legitimate Interests: For fraud prevention, security, service improvement, and analytics, balanced against your rights
• Legal Obligation: Where required by applicable law

4. How We Use Your Information

We use the information we collect for:

• Provide Services: Operate our AI tools directory, process submissions, display ratings, manage accounts
• Personalization: Remember your preferences (theme, favorites, hidden tools), customize your experience
• Authentication: Verify your identity via single-use email links and manage your authenticated session
• Communication: Send single-use sign-in links, submission and approval notifications, security alerts, and service updates
• Security: Prevent fraud, spam, abuse, and unauthorized access; protect users and the service
• Analytics: Understand usage patterns, improve our service, fix bugs, optimize performance
• Legal Compliance: Comply with applicable laws, respond to legal requests

5. Email Communications

By using a part of the service that requires verified access (claiming a listing, editing a listing you own, rating a tool), you consent to receive the following transactional emails:

• Sign-in links: Single-use links sent on demand when you request access; expire shortly after issue
• Submission notifications: Confirmation that we received your tool submission, plus an approval email with a claim link if it is accepted
• Rating confirmations: When you rate a tool while signed out, a one-time link to confirm and post your rating, followed by a receipt that the rating is live
• Security notifications: Important alerts about your authenticated session
• Service updates: Essential changes to our service or policies

We do not send marketing emails unless you explicitly opt in. You can unsubscribe from optional communications at any time.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information in the following circumstances:

• Service Providers: Third-party services that help operate our platform:
  • Cloudflare (hosting, CDN, and Turnstile bot-protection challenges shown on submit, sign-in, and rating forms)
  • Supabase (database and authentication; Supabase delivers single-use sign-in links and stores authenticated sessions on our behalf)
  • Resend (transactional email delivery for sign-in links and notifications)
  • Google LLC (Mountain View, California): provides Google Analytics 4 for site usage analytics. Data is transmitted only when the visitor has granted analytics consent via our cookie banner. Google's privacy practices: policies.google.com/privacy.
  These providers are contractually bound to protect your data and use it only for specified purposes.
• Public Information: Your display name, review activity, and submission attribution may be publicly visible
• Legal Requirements: When required by law, court order, subpoena, or governmental authority
• Protection of Rights: To protect our rights, safety, or property, and that of our users
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets
• With Your Consent: When you explicitly authorize sharing

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with our service providers
• The EU-U.S. Data Privacy Framework where the receiving party is certified (Google LLC, our Google Analytics provider, is certified)
• Other legally recognized transfer mechanisms

8. Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained until you request account deletion
• Tool Submissions: Retained indefinitely as part of the directory (may remain after account deletion)
• Ratings/Reviews: Retained indefinitely to maintain rating accuracy
• Favorites/Hidden Tools: Deleted when you remove them or delete your account
• Usage Logs: Retained for up to 90 days for security and analytics
• Backup Data: May persist in backups for up to 30 days after deletion

We may retain certain data longer if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption of data in transit using TLS/SSL (HTTPS)
• Encryption of data at rest in our databases
• Passwordless authentication via single-use email links; we do not store passwords
• Row-level security policies in our database
• Bot-protection challenges (Cloudflare Turnstile) on submit, sign-in, and rating forms to deter automated abuse
• Regular security assessments and updates
• Access controls limiting who can access your data
• Secure infrastructure provided by Cloudflare and Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

10. Your Privacy Rights

10.1 Rights for All Users

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and personal data
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent where processing is based on consent

10.2 European Economic Area, UK, Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have additional rights under GDPR:

• Right to Object: Object to processing based on legitimate interests
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Lodge Complaint: File a complaint with your local data protection authority

10.3 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Know what personal information is collected, used, and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights
• Right to Correct: Correct inaccurate personal information
• Right to Limit: Limit the use of sensitive personal information

Do Not Sell My Personal Information: We do not sell your personal information to third parties.

10.4 Brazil (LGPD)

Brazilian residents have rights under the Lei Geral de Proteção de Dados (LGPD), including access, correction, deletion, and portability rights similar to GDPR.

10.5 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@tpsworldwidellc.net. We will respond within the timeframes required by applicable law (generally within 30 days). We may need to verify your identity before processing your request.

11. Children's Privacy

Our website is not intended for children under the age of 13 (or 16 in the EEA, UK, and Switzerland). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@tpsworldwidellc.net, and we will take steps to delete such information.

12. Third-Party Links

Our website contains links to third-party websites, including the AI tools listed in our directory. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Browser Signals

Global Privacy Control (GPC)

We honor the Global Privacy Control browser signal as a valid opt-out request from California residents under the CPRA. When our site detects a GPC signal in your browser, we treat it as a request to opt out of any sale or sharing of personal information. We do not currently sell personal information; if we begin sharing personal information for cross-context behavioral advertising in the future (such as via Google AdSense), GPC signals will automatically opt you out.

Do Not Track (DNT)

Because there is no industry consensus on how to interpret DNT, we do not respond to DNT signals at this time. You can still manage privacy preferences through our cookie settings and your browser controls.

13b. Data Protection Officer

TPS Worldwide LLC does not meet the GDPR Article 37 thresholds requiring the appointment of a Data Protection Officer (we are not a public authority, our core activities do not require systematic monitoring of data subjects on a large scale, and we do not process special categories of data on a large scale). For privacy-related inquiries, including questions about EEA personal data, contact us at support@tpsworldwidellc.net and we will respond within 30 days.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Sending an email notification for significant changes (to addresses associated with verified access on the service)

Your continued use of the website after any changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy, your personal information, or wish to exercise your rights, please contact us at: