Privacy Policy

1. Introduction

This privacy policy explains how AI Shortlist (ai-shortlist.com) collects, uses, and protects the personal data of site users. It complements the information already provided in the Legal Notice.

2. Data controller

The data controller is Yassine Bouajani, operator of the AI Shortlist website. For any question regarding your data, you can contact us via the Contact page.

3. Data collected

Depending on how you use the site, the following data may be collected:

Contact form: name, email address, message content.
Account creation (required to leave a review): email address, username, password (stored securely).
Tool submission: information about the tool and contact details of the submitter.
Newsletter: email address, subscription status.
Browsing: IP address, browser type, pages visited, time spent, via Google Analytics.

4. Purposes and legal basis

Purpose	Legal basis
Responding to a request via the contact form	Legitimate interest / fulfilling a request
Managing user account creation and use	Performance of the requested service
Publishing and displaying user reviews	Performance of the requested service
Reviewing a tool submission	Legitimate interest
Sending the newsletter	Consent
Measuring site audience	Consent (audience measurement cookies)

5. Data recipients

Collected data may be shared with the following technical providers, strictly as needed for their role:

OVH (site hosting), France.
Google Analytics (audience measurement), Google Ireland Limited / Google LLC.
Brevo (newsletter management), Sendinblue SAS, France.

These providers only use your data on behalf of AI Shortlist and within the scope defined by this policy. Your data is never sold or transferred to third parties for commercial purposes.

6. Transfers outside the European Union

Google Analytics may involve a transfer of data to the United States. Google relies on the EU-US Data Privacy Framework to govern these transfers. The site uses Google Consent Mode: until you accept, no measurement cookie is set and no identifying data is collected, but aggregated, cookieless measurement signals may be sent to Google. Full tracking is only enabled after your consent. You can decline this processing via the cookie consent banner shown on your first visit (see the Cookies page).

7. Retention period

Contact form data: kept for as long as necessary to handle the request, then deleted within 12 months.
User account and published reviews: retained as long as the account is active, deleted upon request or after account deletion.
Newsletter email address: retained until unsubscription.
Browsing data (Google Analytics): retained according to the tool's default setting, typically 14 months.

8. Cookies

The site uses cookies, in particular for audience measurement purposes. Details of the cookies used and how to manage your consent are explained on the Cookies page.

9. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights over your personal data:

right of access,
right to rectification,
right to erasure,
right to object,
right to restriction of processing,
right to data portability, where applicable.

To exercise these rights, contact us via the Contact page. You may also file a complaint with the CNIL (cnil.fr), the French data protection authority, if you believe your rights are not being respected.

10. Security

Reasonable measures are implemented to protect your data against unauthorized access, loss, alteration, or disclosure, including password encryption and secure hosting.

11. Changes to this policy

This policy may be updated to reflect changes to the site, the tools used, or applicable regulations. The version in effect is the one published on this page.

12. Contact

For any question about this privacy policy, contact us via the Contact page.