Privacy Policy

1. Data controller

The data controller responsible for your personal information is The Planet Deals LLC, a limited liability company registered in Wyoming, United States. For privacy-related questions, contact contact@theplanettools.ai.

2. Information we collect

Automatically collected

When you visit the Site, we automatically collect limited technical information about your device and visit:

• IP address (anonymized where possible)
• Browser type and version
• Operating system and device type
• Referring and exit URLs
• Pages viewed, time on page, and interaction patterns
• Affiliate click data for revenue attribution

Information you provide

We only collect information you voluntarily submit — for example, your email address when you subscribe to the newsletter, or a message when you contact us. We do not operate a user-account system.

3. How we use your information

• To operate, maintain, and secure the Site
• To understand how visitors use content (aggregate analytics)
• To send newsletters and site updates (only with your consent)
• To attribute affiliate clicks for revenue
• To detect and prevent fraud, abuse, or spam
• To comply with legal obligations

4. Legal bases for processing (GDPR)

Under GDPR, we process your personal data on the following legal bases:

• Consent (Art. 6(1)(a)) — analytics cookies, advertising cookies, newsletter subscription.
• Legitimate interest (Art. 6(1)(f)) — site security, fraud prevention, essential functional cookies, aggregated server logs.
• Legal obligation (Art. 6(1)(c)) — responding to lawful requests, tax and accounting where applicable.

You can withdraw consent at any time via the "Manage cookies" link in the footer or by emailing us for non-cookie-based consent.

5. Cookies and tracking technologies

We operate a three-category granular cookie consent system:

• Strictly necessary — always active. Required for the Site to function (consent storage, theme, security).
• Analytics — opt-in. Google Analytics 4 and Microsoft Clarity.
• Advertising — opt-in. Microsoft Bing UET and affiliate attribution pixels.

Analytics and Advertising tags do not load until you actively opt in. For the complete list of cookies, vendors, and retention periods, see the Cookie Policy.

6. Third-party services (sub-processors)

We share limited data with the following vendors, each acting as a sub-processor:

• Hosting: Vercel Inc. (USA)
• Database & storage: Supabase Inc. (USA, EU regions)
• DNS & edge security: Cloudflare Inc. (USA)
• Analytics: Google LLC (GA4), Microsoft Corporation (Clarity) — consent-gated
• Advertising / attribution: Microsoft Corporation (Bing UET), affiliate networks (Impact, PartnerStack, Rewardful, vendor-specific) — consent-gated
• Email delivery: Resend (newsletter), SMTP providers for transactional email
• Abuse prevention: reCAPTCHA (where applicable)

Each vendor has its own privacy policy and may independently collect data in accordance with its terms.

7. International data transfers

Some sub-processors are based outside your country of residence, including in the United States. Where personal data is transferred internationally, we rely on the European Commission's Standard Contractual Clauses (SCCs), the EU-U.S. Data Privacy Framework where applicable, or equivalent safeguards under the UK GDPR.

8. Affiliate links

The Site contains affiliate links. When you click one, the destination vendor may set its own cookies and collect data according to its privacy policy. We track affiliate clicks internally for revenue attribution only. For more context, see the Affiliate Disclosure.

9. Data retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. Newsletter subscribers are retained until they unsubscribe. Server logs are retained for up to 90 days. Analytics data is retained for up to 26 months.

10. Your rights

Depending on your location, you have the following rights over your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — ask us to delete your data where legal grounds allow.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, for any processing based on consent (cookies, newsletter).
• Lodge a complaint — with your national supervisory authority (for EU/UK residents).
• CCPA / CPRA rights (California residents) — right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

To exercise any of these rights, email contact@theplanettools.ai. We respond within 30 days.

11. Children's privacy

The Site is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover data has been collected from a child under 16, we will delete it promptly.

12. Security

We implement reasonable administrative, technical, and physical security measures — including HTTPS-only transport, database Row Level Security, rate limiting, and vendor-level encryption at rest. However, no transmission over the Internet is 100% secure; we cannot guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on the Site, and where consent is required, the cookie banner will reappear.

14. Contact

For privacy questions, data-rights requests, or any concern about how your data is processed: