1. Information We Collect
We collect minimal personal information to deliver our directory services effectively:
- Account Credentials: When you register as a founder or creator, we collect your email address and a securely hashed representation of your password (using industry-standard bcrypt algorithm). We never store plaintext passwords.
- Tool Listing Submissions: When submitting an application, we collect publicly accessible metadata including your software's name, primary website URL, description, category classification, supported operating platforms, and self-reported pricing model.
- Technical & Server Logs: Standard web server logs collect basic network metrics including IP addresses, browser user-agent strings, HTTP referrers, and page request timestamps. These logs are used strictly for security monitoring, DDoS prevention, rate limiting, and spam blocking.
-
Essential Session Cookies: We use strictly necessary, first-party HTTP session cookies (such as
PHPSESSID) to authenticate your login sessions and remember essential interface states. We do not use third-party behavioral tracking cookies or advertising pixels.
2. How We Use Collected Information
Information gathered by BestAIApps.io is utilized exclusively for the following operational purposes:
- Authenticating founder logins and providing dashboard tools to update product listings.
- Verifying domain ownership through automated backlink badge detection.
- Sending transactional emails—such as email address verification links, password resets, and critical listing updates.
- Maintaining the directory's safety, identifying broken links, preventing malicious automated bot submissions, and moderating community upvotes.
3. Third-Party Infrastructure & Service Providers
We partner with reputable infrastructure providers to operate the platform reliably:
- Transactional Email Delivery (Brevo): We utilize the Brevo REST API to dispatch account verification and transactional notifications. Your email address is provided to Brevo strictly for delivery purposes under their standard security and GDPR-compliant processing terms.
- DNS & Content Delivery (Cloudflare): Our domain is routed through Cloudflare to provide SSL/TLS encryption, edge caching, and web application firewall protection.
We do not share your information with advertisers, data brokers, or marketing networks.
4. Data Retention & Security Safeguards
We take reasonable, industry-standard technical measures to safeguard the integrity and confidentiality of your information:
- All communications between your browser and BestAIApps.io are encrypted in transit via Transport Layer Security (TLS/HTTPS).
- Database access is strictly restricted, utilizing parameterized PDO queries to eliminate SQL injection risks.
- Account passwords are encrypted with strong cryptographic salts and hashing functions.
We retain account information for as long as your account remains active. Server logs are periodically rotated and purged.
5. Your Rights & Data Control
Regardless of your geographic location, we respect your rights regarding your personal information:
- Access & Review: You may review and update your listed tool details at any time from your founder dashboard.
- Account & Data Deletion: You have the right to request full deletion of your user account and associated personal data. To request account deletion, email us at privacy@bestaiapps.io.
- Opt-Out: Aside from essential transactional account messages (such as password resets), we do not send unsolicited marketing or promotional newsletters.
6. External Links & Third-Party Services
BestAIApps.io indexes links to external third-party software, applications, and tools. When you click an external link to visit a product's website, you are subject to the terms and privacy practices of that third party. We encourage you to review their respective privacy policies before providing them with personal details or payment information.
7. Children's Privacy
Our platform is intended for founders, developers, professionals, and general audiences aged 13 and above. We do not knowingly collect or solicit personal information from children under the age of 13.
8. Changes to this Policy
We may update this Privacy Policy from time to time to reflect operational or legal updates. When changes occur, the "Last Updated" date at the top of this document will be revised accordingly.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact our team directly:
BestAIApps.io Privacy Team
Email: privacy@bestaiapps.io