Trust & Transparency

Privacy Policy

Last Updated: October 2026. This policy explains our data practices in plain language: what we collect, how it is used, and how we protect your information.

Our Privacy Commitment in Short

We do not sell, rent, or trade your personal data. We collect only what is strictly necessary to run this directory: account authentication, transactional email notifications, domain ownership verification, and basic security logs.

1. Information We Collect

We collect minimal personal information to deliver our directory services effectively:

  • Account Credentials: When you register as a founder or creator, we collect your email address and a securely hashed representation of your password (using industry-standard bcrypt algorithm). We never store plaintext passwords.
  • Tool Listing Submissions: When submitting an application, we collect publicly accessible metadata including your software's name, primary website URL, description, category classification, supported operating platforms, and self-reported pricing model.
  • Technical & Server Logs: Standard web server logs collect basic network metrics including IP addresses, browser user-agent strings, HTTP referrers, and page request timestamps. These logs are used strictly for security monitoring, DDoS prevention, rate limiting, and spam blocking.
  • Essential Session Cookies: We use strictly necessary, first-party HTTP session cookies (such as PHPSESSID) to authenticate your login sessions and remember essential interface states. We do not use third-party behavioral tracking cookies or advertising pixels.

2. How We Use Collected Information

Information gathered by BestAIApps.io is utilized exclusively for the following operational purposes:

  • Authenticating founder logins and providing dashboard tools to update product listings.
  • Verifying domain ownership through automated backlink badge detection.
  • Sending transactional emails—such as email address verification links, password resets, and critical listing updates.
  • Maintaining the directory's safety, identifying broken links, preventing malicious automated bot submissions, and moderating community upvotes.

3. Third-Party Infrastructure & Service Providers

We partner with reputable infrastructure providers to operate the platform reliably:

  • Transactional Email Delivery (Brevo): We utilize the Brevo REST API to dispatch account verification and transactional notifications. Your email address is provided to Brevo strictly for delivery purposes under their standard security and GDPR-compliant processing terms.
  • DNS & Content Delivery (Cloudflare): Our domain is routed through Cloudflare to provide SSL/TLS encryption, edge caching, and web application firewall protection.

We do not share your information with advertisers, data brokers, or marketing networks.

4. Data Retention & Security Safeguards

We take reasonable, industry-standard technical measures to safeguard the integrity and confidentiality of your information:

  • All communications between your browser and BestAIApps.io are encrypted in transit via Transport Layer Security (TLS/HTTPS).
  • Database access is strictly restricted, utilizing parameterized PDO queries to eliminate SQL injection risks.
  • Account passwords are encrypted with strong cryptographic salts and hashing functions.

We retain account information for as long as your account remains active. Server logs are periodically rotated and purged.

5. Your Rights & Data Control

Regardless of your geographic location, we respect your rights regarding your personal information:

  • Access & Review: You may review and update your listed tool details at any time from your founder dashboard.
  • Account & Data Deletion: You have the right to request full deletion of your user account and associated personal data. To request account deletion, email us at privacy@bestaiapps.io.
  • Opt-Out: Aside from essential transactional account messages (such as password resets), we do not send unsolicited marketing or promotional newsletters.

6. External Links & Third-Party Services

BestAIApps.io indexes links to external third-party software, applications, and tools. When you click an external link to visit a product's website, you are subject to the terms and privacy practices of that third party. We encourage you to review their respective privacy policies before providing them with personal details or payment information.

7. Children's Privacy

Our platform is intended for founders, developers, professionals, and general audiences aged 13 and above. We do not knowingly collect or solicit personal information from children under the age of 13.

8. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational or legal updates. When changes occur, the "Last Updated" date at the top of this document will be revised accordingly.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact our team directly:

BestAIApps.io Privacy Team

Email: privacy@bestaiapps.io