Privacy Policy & Legal Notice
Effective Date: April 1, 2026
1. Legal Information
The AI Toll (theaitoll.com) is operated by:
YC INTELLIGENCE, SAS — Share capital: 1,000 EUR
200 rue de la Croix Nivert, 75015 Paris, France
SIREN: 999 632 250 · SIRET: 999 632 250 00018 · VAT: FR45999632250
RCS Paris · Publication director: Yasmine Mamoun
Hosting: Netlify, Inc. — San Francisco, CA, United States
Contact: contact@theaitoll.com
2. Overview
The AI Toll is an independent AI risk intelligence company. We are committed to protecting visitor privacy. This policy explains what data is collected and how it is used.
3. Data Collected
The company website collects minimal data:
- No cookies are set by default. No tracking cookies, no advertising cookies.
- No personal data is collected through the website unless voluntarily provided via email contact.
- Server logs may record IP addresses, browser type, and pages visited for security and performance monitoring. These logs are retained for 90 days maximum.
We do not use analytics tools that collect personal data.
4. How We Use Your Data
- To respond to your enquiries
- To provide requested intelligence reports and data
- To maintain website security and performance
5. Legal Basis (GDPR)
- Consent (Art. 6(1)(a)) when you voluntarily contact us
- Legitimate interest (Art. 6(1)(f)) for website security and performance
6. Third-Party Services
We do not sell or trade your data. We may share data with:
- Netlify — hosting provider. Subject to Netlify's Privacy Policy.
- Google Fonts — loaded from Google servers. Subject to Google's Privacy Policy.
All providers comply with GDPR.
7. Data in The AI Toll
The company dataset contains publicly available information collected from public sources (government databases, academic repositories, news outlets). No personal data of private individuals is included in the dataset. Data subjects referenced in The AI Toll are public figures, institutions, or anonymised statistical aggregates.
8. Data Retention
Contact information is retained for the duration of our business relationship plus 3 years. Technical logs are retained for 90 days maximum.
9. Your Rights
Under GDPR, you have the right to access, rectify, erase, object to processing, and data portability. Contact: contact@theaitoll.com. Supervisory authority: CNIL (France).
10. International Transfers
Data may be processed in the US by our hosting provider (Netlify, Inc., San Francisco, CA), protected by Standard Contractual Clauses approved by the European Commission.
11. Changes
We may update this policy. The date at the top indicates the latest revision.
12. Contact
For all enquiries: contact@theaitoll.com