Privacy policy
Last updated:
This notice explains how the independently operated AITroveX website handles information for its directory, accounts, submissions, promotions and payments. For privacy requests, contact hi@aitrovex.com.
1. Information we handle
Account information: Google account identifier, email address, name, profile image, chosen language, account preferences and login sessions. We do not ask for your Google password. Google authentication tokens are not retained for accessing your Google services after sign-in.
Submission information: website URLs, names, descriptions, selected categories and tags, uploaded or prepared assets, backlink verification results and review history. Approved listing content is public. Account email addresses and payment records are not part of public listings.
Commerce information: internal user identifier, purchased package, order and payment references, amounts, currency, tax, credit balances and movements, promotion dates, refund reasons and statuses. Your account identifier and email are sent to Waffo to associate checkout with your account. Full card numbers and card security codes are entered into Waffo’s checkout, not stored by AITroveX.
Operational information: request IP addresses, browser information, security and error logs may be processed by hosting and service providers. Promotion counting uses a daily keyed hash derived from the IP address and browser user agent to deduplicate events; this is pseudonymous, not a promise of irreversible anonymity.
Support and email preferences: messages you send us, your marketing opt-in choice and time, delivery status and unsubscribe preferences.
2. Why we use it
We use account, submission and transaction data to provide the services you request, verify backlinks, deliver credits, review tools, display promotions, process refunds and answer support requests. Where applicable, this processing is necessary to perform our agreement with you.
We use limited technical data to maintain reliability, prevent abuse, reconcile payments and protect the service and users. Where a lawful-basis framework applies, we rely on legitimate interests where appropriate and balanced against your rights, or legal obligations for required records.
Optional marketing email depends on your choice. Refusing or withdrawing that choice does not prevent normal account, submission or payment use. Transactional notices remain separate from marketing.
3. Cookies and device storage
Essential authentication cookies keep you signed in and protect sessions. Sessions last up to 30 days and may renew with use; the signed session cache lasts up to 15 minutes. A language-suggestion preference is stored locally in your browser.
To understand which channels bring new accounts, we store the first observed visit in a first-party cookie (atx_attr_v2) for up to 30 days without renewing it on each visit. It contains the five UTM parameters (source, medium, campaign, content and term), external referring domain, landing-page path and visit time. When you create an account, we link this information and the country, region and time zone inferred by Cloudflare from the registration request IP to your account. These locations are approximate and may be unavailable. Later logins do not replace the original attribution; clearing the cookie does not delete information already linked to an account. Contact us to request its deletion.
You can clear browser storage or block cookies in browser settings; blocking essential cookies may prevent sign-in. The site also loads a Plausible analytics script from app.pageview.app to measure website traffic. Waffo checkout and external websites have their own privacy practices.
4. Service providers and disclosures
Cloudflare delivers the website and stores public assets through Workers and R2. Supabase/PostgreSQL stores account and application records. Google provides sign-in and Google Fonts requests; loading fonts can disclose your IP address and browser request information to Google.
Waffo processes checkout, payment, tax, fraud screening and refund information under its own applicable terms and privacy notice. Resend or the configured Cloudflare email service delivers transactional or opted-in messages. WeCom receives operational notifications for the site operator, which can include submitter email, tool details, order references and amounts. Access is limited to administration purposes.
We disclose data when necessary to comply with law, protect rights or respond to valid legal requests. We do not sell account or payment information. Visiting third-party tools or affiliate links is subject to the destination’s privacy practices.
5. International processing and retention
Providers may process data outside your country. The locations and safeguards depend on each provider and service configuration. Where required, applicable transfer safeguards must be used; we do not promise that all data stays in a single country.
We keep account and service records while needed to operate your account and purchased services. Transaction, refund and dispute records may be kept longer for legal, accounting, fraud-prevention and claim-handling purposes. Public listing content may remain while it is relevant to the directory. Retention depends on the record’s purpose and applicable obligations, rather than a promise that every record is deleted immediately on account closure.
On a verified deletion request, we remove or de-identify data no longer needed, subject to legitimate retention duties. Provider backups may retain copies until their normal expiry. We use access controls, encrypted connections and secret management, but no system is completely secure.
6. Your choices and requests
Use account preferences or unsubscribe links to stop optional marketing email. Contact hi@aitrovex.com to request access, correction, deletion, account closure, portability, restriction or objection where applicable. We may verify account ownership before acting and will respond within applicable legal deadlines.
Where applicable, you may withdraw consent without affecting earlier lawful processing and complain to your relevant data-protection authority. We do not use your data for automated decisions producing legal or similarly significant effects. If a child has provided personal information, contact us so we can investigate and address it.
Changes to this notice are dated and published here. Material changes will be communicated through the website or account email where appropriate.