Privacy Policy

1. Information we collect

We collect two kinds of information: information you give us directly, and information collected automatically when you use the site.

Information you provide directly. If you submit our compliance assessment, send us feedback, or contact us, we receive whatever you choose to share — for example your email address, your business's state and industry, the AI use cases you've selected, and any written comments. You control what you submit.

Information collected automatically. Like almost every website, our servers and third-party services automatically log technical details such as your IP address, browser type and version, device and operating system, referring URL, pages visited, timestamps, and approximate location (city or country) derived from your IP.

2. Cookies and similar technologies

We use cookies and similar technologies (like local storage) for three purposes:

• Strictly necessary: to remember your preferences and progress through the compliance assessment.
• Analytics: to understand which pages are useful and which aren't, so we can improve the site.
• Advertising: to serve ads through third-party networks and, where applicable, personalize them.

You can block or delete cookies in your browser settings at any time. Blocking strictly necessary cookies may cause parts of the site (like the self-assessment) to stop working.

3. Advertising (Google AdSense disclosure)

AI Law Tracker uses Google AdSense, a third-party advertising service provided by Google LLC, to display ads on some pages. As part of serving those ads:

• Google, as a third-party vendor, uses cookies — including the DoubleClick DART cookie — to serve ads based on your prior visits to this site and other sites on the internet.
• Google and its partners may use information (not including your name, email, or other directly identifying information) about your visits to provide advertisements.
• Third-party advertising networks may also be used to serve ads and may place their own cookies in your browser.

You can opt out of personalized advertising by visiting Google's Ads Settings at google.com/settings/ads or the aboutads.info consumer choice page at aboutads.info/choices.

Google's use of advertising cookies is governed by Google's own privacy policy, available at policies.google.com/technologies/ads.

4. Analytics

We use privacy-respecting web analytics to measure aggregate traffic patterns — things like which pages are popular, what search terms brought visitors, how long people stay. Where we use Google Analytics or comparable tools, data collected is processed by the provider under its own terms. We do not sell analytics data.

5. How we use information

• To operate the site and deliver content you request (for example, generating your compliance report).
• To improve the site — identify what's working, fix bugs, and prioritize new content.
• To respond to emails, corrections, and support requests.
• To serve and measure advertising, as described above.
• To comply with legal obligations and enforce our terms.

6. Third-party services we use

We rely on several third parties to run the site. Each processes data under its own privacy policy:

• Vercel — site hosting and server logs.
• Supabase — database for feedback, reviews, and assessment submissions you choose to save.
• Google AdSense — advertising (see Section 3).
• Web analytics providers — aggregate traffic measurement.
• Payment processors (e.g. Polar.sh) — only if you purchase a paid product; payment card details are handled by the processor, never stored by us.

7. How we share information

We do not sell your personal information. We share information only with the service providers listed above, where required by law (subpoenas, court orders, valid legal requests), or to protect our rights and the safety of users. If AI Law Tracker is ever acquired or merged, data may transfer to the successor entity under the same privacy commitments.

8. Data retention

We keep assessment submissions, feedback, and similar records only as long as they're useful for the purpose they were submitted or as required by law. Server logs are typically rotated within 90 days. You can request deletion at any time using the contact details below.

9. Your rights (GDPR, CCPA, and similar laws)

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your personal information (the "right to be forgotten").
• Object to or restrict certain processing, including direct marketing and personalized advertising.
• Port your data to another service in a machine-readable format.
• Opt out of the "sale" or "sharing" of personal information (California). We do not sell personal information, but advertising cookies may qualify as "sharing" under CCPA — you can disable them in your browser or via the ad-settings links above.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

10. Children's privacy

AI Law Tracker is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has submitted personal information to us, please contact us and we will delete it.

11. Security

We use reasonable technical and organizational measures to protect information, including TLS encryption in transit and access controls on our databases. No method of transmission or storage is 100% secure; we can't guarantee absolute security.

12. International transfers

Our service providers may process data in the United States and other countries. Where data is transferred from the EU/UK, we rely on Standard Contractual Clauses and other lawful transfer mechanisms offered by our providers.

13. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. When we make material changes, we'll update the "Last updated" date at the top of this page and, where appropriate, post a notice on the site. Continued use of the site after an update means you accept the revised policy.

14. Contact

Questions, requests, or complaints about this policy or your data can be sent to [email protected]. For anything else, see our contact page.