Privacy Policy

Last updated: August 23, 2026

AI ToolStation ("we", "us", or "our") operates this website. We are the data controller responsible for your personal information under the EU General Data Protection Regulation (GDPR) and applicable data protection laws. Our contact details:

• Operator: AI ToolStation (operated by an individual seller)
• Contact email: support@aitoolstation.shop
• Jurisdiction of establishment: People's Republic of China
• Merchant of Record for payments: Creem.io (handles payment processing, tax calculation, and remittance as MoR)

For EU/EEA residents: As a non-EU established business offering digital services, Creem.io acts as our Merchant of Record for EU VAT purposes. For data protection queries, you may contact us at the email above.

Note: A formal legal entity is currently being established. Once registered, we will update this policy with our full legal name, registered address, and, where required, an EU/UK representative under Article 27 of the GDPR. This note does not affect your data protection rights.

1. Information We Collect

When you make a purchase or interact with our site, we collect:

• Email address (to deliver your digital products and send receipts)
• Name and billing details (processed securely by our payment provider, Creem.io)
• Order history and download activity
• Technical data such as IP address, browser type, and server logs (for security and performance)

We do not store your full credit card information. Payment processing is handled by Creem.io, our Merchant of Record.

2. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR): Processing your email, name, and order details to deliver purchased digital products, provide download links, send receipts, and respond to support requests.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR): Retaining order and payment records for tax, accounting, and consumer protection purposes, as required by applicable law.
• Legitimate interests (Art. 6(1)(f) GDPR): Ensuring the security of our website, preventing fraud and unauthorized sharing, and improving our services — where our interests are not overridden by your data protection rights.
• Consent (Art. 6(1)(a) GDPR): Only where you have explicitly opted in to receive marketing communications. You may withdraw consent at any time by clicking "unsubscribe" or contacting us.

3. Payment Processing

All payments are processed by Creem.io as the Merchant of Record. Their privacy policy applies to payment data. Creem.io handles VAT/GST/sales tax collection and remittance globally. We do not have access to or store your full credit card number, CVV, or other payment credentials.

4. Data Retention

We retain your personal data for the following periods:

• Order and payment records: Retained for seven (7) years from the date of purchase, to comply with tax, accounting, and legal record-keeping obligations.
• Email address and account information: Retained for as long as your account remains active or as needed to provide you with access to your purchased products. You may request deletion at any time.
• Support correspondence: Retained for three (3) years from the date of the last communication, to maintain support history and resolve potential disputes.
• Server logs and security data: Retained for up to ninety (90) days, then automatically deleted or anonymized.

Where data is no longer needed, we will securely delete or anonymize it. If you request deletion of your data, we will do so within 30 days, except where retention is required by law or for legitimate business purposes (e.g., pending disputes, tax audits).

To request data deletion, contact us at support@aitoolstation.shop.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate our website and improve your experience. Cookies are small data files stored on your device.

Strictly Necessary Cookies: These cookies are required for the website to function and cannot be switched off. They include cookies that enable you to add items to cart and complete checkout. They are set in response to actions you take and do not require consent.

Third-Party Cookies:

• Creem.io: Sets cookies during checkout for payment processing, fraud prevention, and security. See Creem.io's cookie policy for details.
• Netlify: May collect anonymized server-side analytics (e.g., page views, geographic region) to monitor site performance. Netlify does not use third-party advertising cookies and does not track you across other websites.

We do not use advertising or cross-site tracking cookies. We do not serve targeted advertising.

Managing Cookies. You can control or delete cookies through your browser settings. Please note that blocking strictly necessary cookies may affect the functionality of the checkout process.

6. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights:

GDPR (EEA/UK):

• Right of access (Art. 15): Obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your personal data, subject to legal retention obligations.
• Right to restriction (Art. 18): Request limitation of our processing under certain conditions.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests at any time.
• Right to withdraw consent (Art. 7(3)): Withdraw previously given marketing consent at any time.
• Right to lodge a complaint (Art. 77): Complain to your local data protection authority.

CCPA/CPRA (California):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of sale/sharing of personal information (we do not sell or share your data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at support@aitoolstation.shop. We will respond within one (1) month, which may be extended by two (2) additional months if necessary, in which case we will notify you within one month. We may need to verify your identity before processing your request.

7. Third-Party Service Providers (Sub-processors)

We use the following third-party service providers to operate our business. Each provider processes personal data on our behalf under a data processing agreement, in accordance with their respective privacy policies:

For each provider's privacy practices, please refer to their respective privacy policies: Creem.io, Neon, Netlify, Resend.

We may update this list from time to time. Material changes will be communicated via this page.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States, where our hosting and service providers operate. These countries may have data protection laws different from those in your jurisdiction.

Where transfers occur from the European Economic Area (EEA) or the United Kingdom to countries not deemed adequate by the European Commission, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission; and/or
• The EU-U.S. Data Privacy Framework (DPF) and UK Extension, where applicable to our providers.

You may contact us at support@aitoolstation.shop to request a copy of the relevant transfer mechanism.

9. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, not later than 72 hours after becoming aware of it, in accordance with GDPR Article 33. When the breach is likely to result in a high risk to your rights and freedoms, we will also communicate the breach to you without undue delay in accordance with GDPR Article 34, describing the nature of the breach, the likely consequences, and the measures taken to address it.

We maintain an internal incident response procedure to detect, investigate, and document any security incident. You may contact us at support@aitoolstation.shop if you suspect any unauthorised access to your data.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of changes by posting the new policy on this page and updating the "Last updated" date.

11. Children's Privacy

Our website is intended for adults aged 18 and over. We do not knowingly collect personal information from children under the age of 16 (or the age of digital consent in your jurisdiction, if lower). If you believe we have collected data from a child, please contact us immediately at support@aitoolstation.shop, and we will delete such data promptly.

12. Marketing and Unsubscribe

If we send marketing emails, each email will include an "unsubscribe" link. You may also opt out at any time by contacting support@aitoolstation.shop. Transactional emails related to your purchases (receipts, download links, security notices) do not include marketing content and cannot be unsubscribed from as they are necessary for contract performance.

13. Contact

If you have questions about this Privacy Policy, please contact us at support@aitoolstation.shop.