~/ai_assets_directory_
~/legal/privacy

Privacy Policy

We collect the minimum we need to run the site, never sell your data, and honour your privacy rights.

last updated September 1, 2026

This policy explains what AI Assets Directory (“we”, “us”) collects when you use this website, why, and what control you have. Questions? Email contact@aiassetsdirectory.com.

Who we are

AI Assets Directory is an independent directory of open-source AI assets. We are the controller of the personal data described below. You can contact us for any privacy matter at contact@aiassetsdirectory.com; we can provide our postal address on request.

What we collect

  • Newsletter email. If you subscribe, we store the email address you enter so we can send new-asset updates. That is the only field we ask for.
  • Messages you send us. If you email us or open a submission, we keep the contents so we can reply and follow up.
  • Technical logs. Our hosting provider automatically records standard request data (IP address, browser/user-agent, pages requested, timestamps) to keep the site secure and running.

We do not run user accounts, ask for passwords, or collect payment details. We do not knowingly collect special-category data.

What we do not do

  • We never sell or rent your personal data.
  • We do not run advertising or cross-site tracking cookies.
  • We do not build advertising profiles about you.

Why we use it (legal bases)

  • Consent: sending you the newsletter. You can withdraw at any time (see below).
  • Legitimate interests: keeping the site secure, preventing abuse, and replying to messages you send us.

Service providers

We keep the stack small. The providers that may process data on our behalf are:

  • Vercel: hosting, content delivery and our key-value store (used to hold newsletter emails). Vercel processes request logs as part of serving the site.

These providers act as our processors under a data processing agreement. If we add an email-delivery provider for the newsletter, we will list it here first.

International transfers

Our providers may process data on servers outside your country, including in the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

  • Newsletter email: until you unsubscribe or ask us to delete it.
  • Messages: for as long as needed to handle your request, then archived or deleted.
  • Technical logs: for a short period for security and diagnostics, per our provider’s defaults.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. If you are in the EU/EEA or UK, these rights come from the GDPR. If you are in California, the CCPA/CPRA gives you the right to know, delete, correct and opt out of “sale” or “sharing”. We do neither.

To exercise any right, email contact@aiassetsdirectory.com. To unsubscribe from the newsletter, use the link in any email or contact us. EU/EEA users may also lodge a complaint with their local supervisory authority.

Cookies & local storage

We use only essential and functional storage. The details are in our Cookie Policy.

Children

This site is intended for developers and is not directed at children under 16. We do not knowingly collect their data.

Changes

We may update this policy as the site evolves. Material changes will be reflected by the “last updated” date above.