GDPR Compliance
At GPTNest (gptnest.com), an educational blogging website covering artificial intelligence, AI tools, AI courses, and prompt generator tools, we value your privacy and are committed to protecting your personal information. This policy explains how we collect, use, and safeguard your data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and relevant U.S. privacy regulations such as the California Consumer Privacy Act (CCPA/CPRA).
By using this website, you agree to the terms of this policy. If you do not agree, please refrain from using the site.
1. What Data We Collect
We may collect the following types of information:
- Personal Data: Name, email address, or other details submitted through contact forms, prompt generator usage, AI course enrollments, or newsletter signups.
- Usage Data: IP address, browser type, device information, pages visited across our blog and course directory, time spent on the site, and referral URLs.
- Cookies & Tracking Technologies: Collected to serve relevant advertisements, analyze site traffic, remember your preferences, and enhance your overall learning experience.
2. Why We Collect Your Data
We use your information to:
- Operate and improve the functionality of our AI blog, tool directories, courses, and prompt generators.
- Serve personalized and non-personalized advertisements (via Google AdSense) to keep our educational content free.
- Send newsletters, course updates, or respond to user inquiries (only if you opt in).
- Analyze browsing behavior and optimize the user experience.
- Comply with legal obligations or protect the site from misuse.
3. Lawful Basis (GDPR) & Legal Grounds (U.S.)
We process your data relying on:
- Consent: For advertising cookies, analytics, and marketing communications.
- Contractual necessity: To fulfill a user request (e.g., granting access to a course or responding to a contact form).
- Legitimate interests: To improve, maintain, and protect the website.
- Legal compliance: When required to fulfill legal duties or respond to lawful requests.
4. Your Rights
EU Residents (GDPR):
- Access your personal data.
- Correct inaccurate information.
- Request deletion of your data (Right to be Forgotten).
- Withdraw consent at any time (e.g., via our Cookie Consent manager).
- Data portability to another service.
- Object to or restrict processing in certain cases.
U.S. Residents (CCPA/CPRA and Others):
- Know what personal data is collected and why.
- Request deletion of your personal data.
- Opt out of the sale of data (Note: GPTNest does not sell your personal data).
- Correct or update your personal data.
- Limit use of sensitive personal data (not applicable as we do not collect sensitive data).
5. Cookies, Consent & Advertising (Google AdSense)
We use cookies to personalize content, serve advertisements, analyze our traffic, and improve your experience.
- Google AdSense: We use Google AdSense to display ads. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to GPTNest’s blog, directories, or other websites.
- Google’s use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
- Opting Out: Users may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor’s use of cookies for personalized advertising by visiting www.aboutads.info.
- Consent: A cookie consent banner is displayed to European users to allow you to accept or manage your ad and tracking preferences.
6. Data Sharing
We do not sell or rent your personal data. We may share limited information with:
- Trusted service providers: (e.g., course hosting platforms, email marketing platforms, Google Analytics, Google AdSense) operating under strict confidentiality agreements.
- Legal authorities: If required to comply with applicable laws or valid legal requests.
- Business transfers: Buyers or successors in the event of a business transfer or acquisition.
7. Data Security & Retention
- We use encryption, access controls, and other industry-standard security measures to protect your data.
- Data is retained only as long as necessary for the original purpose it was collected for.
- When no longer needed, your data is securely deleted or anonymized.
8. Children’s Privacy
GPTNest is not intended for users under the age of 13. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
9. Cross-Border Data Transfers
If personal data is transferred outside the EU/EEA or U.S. (for example, to our hosting servers or analytics providers), we ensure protection through:
- Adequacy decisions.
- Standard Contractual Clauses (SCCs).
- Other appropriate legal safeguards.
10. Data Breach Response
In the unlikely event of a data breach:
- Affected users will be notified as soon as possible.
- We will report incidents to the relevant data protection authorities within the required 72-hour window (GDPR) or as required under applicable U.S. state laws.
11. Ongoing Compliance
- We regularly review and update our privacy practices to ensure alignment with changing laws.
- Privacy settings and this policy are reviewed periodically for compliance.
- We maintain records of processing activities where required.
12. Contact Us
For privacy inquiries, to update your cookie preferences, or to exercise your data rights, please contact us at:
[email protected]
GPTNest is committed to protecting your privacy and complying with applicable data protection laws in both the European Union and the United States.