Privacy Policy

Last updated: 1 July 2026

1. Who We Are

AI Toolset (aitoolset.app) is a product of M² Design. We operate a curated directory of AI tools with weekly updates, expert overviews, and a premium subscription service.

Contact: [email protected]

2. Data We Collect

We collect only what is necessary to provide our service:

  • Account data — email address, display name, and avatar URL when you create an account via Firebase Authentication.
  • Payment data — billing name and payment method, processed entirely by Stripe. We never store card numbers on our servers.
  • Subscription data — your plan status (free/premium), trial end date, and subscription period, stored in Firebase Firestore.
  • Usage data — pages visited and features used, collected anonymously via server logs.
  • Newsletter preferences — whether you opted in to our weekly AI tools newsletter.

3. How We Use Your Data

  • To create and manage your account
  • To process payments and manage your subscription via Stripe
  • To send the weekly newsletter if you opted in (unsubscribe any time)
  • To provide premium features including full tool overviews and AI comparisons
  • To improve the directory and fix technical issues

We do not sell your personal data. We do not use your data for advertising.

4. Third-Party Services

We use the following third parties who may process your data:

  • Firebase (Google) — Authentication and Firestore database. Privacy policy
  • Stripe — Payment processing. Privacy policy
  • OpenAI — AI-generated tool overviews and comparisons (tool data only, no personal data). Privacy policy
  • EmailJS — Newsletter delivery. Privacy policy
  • GoDaddy — Web hosting. Your data is stored on servers in the United States.

5. Cookies and Sessions

We use a single session cookie to keep you logged in. No advertising cookies. No third-party tracking cookies. We do not use Google Analytics or Facebook Pixel.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where required by law (e.g. billing records retained for 7 years for tax purposes).

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Opt out of the newsletter at any time
  • Export your data in a portable format

To exercise any of these rights, email [email protected].

8. Security

We use HTTPS, secure session handling, and industry-standard security headers. Passwords are never stored — authentication is handled entirely by Firebase. Payment data is handled entirely by Stripe and never touches our servers.

9. Changes to This Policy

We may update this policy occasionally. We will notify premium subscribers by email of any material changes. The date at the top of this page always reflects the most recent update.

10. Contact

Questions about this policy? Email [email protected]