Privacy policy
What we collect, who handles it, and how to get it deleted. Written to be read, not skimmed past.
This policy covers aihustlesurfer.com, including the KDP tools at /kdp/. The site is operated by AIHustleSurfer from the Philippines. If anything here is unclear, write to team@aihustlesurfer.com.
Effective Sep 7, 2026.
The short version
- Reading the site needs no account and sets no tracking cookies. There is no analytics script and no advertising network on any page.
- If you subscribe to the newsletter, we keep your email address until you unsubscribe.
- If you create a KDP tools account, we keep your email, your usage counts and your subscription status. Payments are handled by Lemon Squeezy; we never see your card.
- We do not sell personal data, and we do not share it with anyone except the service providers listed below.
- Email us and we will delete your account and its data.
What we collect, and when
Browsing the site
Our host, Vercel, keeps standard server logs of each request: IP address, browser type, the page requested and the time. We use these only to keep the site running and to investigate abuse. We do not run analytics, and we do not use cookies on the review site. Page fonts load from Google Fonts, which means Google receives your IP address when a page loads, as it would for any site using that service.
The newsletter
The form asks for your email address and nothing else. It is added directly to our audience in Resend, the service we send from. Every email has a one-click unsubscribe link, and unsubscribing removes you from the list.
A KDP tools account
The keyword checker, category finder and niche scanner need an account. To run one we keep:
- Your email address, used to sign you in and to send the emails described below.
- Your name and profile picture, only if you sign in with Google. See the Google section below.
- A session record for each sign-in, holding a session token, the IP address and browser it came from, and when it expires. This is what keeps you signed in.
- Trial and subscription status: when your trial ends, whether you have a paid subscription, its status and renewal date, and the customer and subscription identifiers Lemon Squeezy assigns to you.
- Daily usage counts: how many checks you ran each day, used to enforce plan limits.
- A log of the emails we sent you (sign-in links, trial reminders), so we can answer "did you email me?" support questions.
The phrases you check are stored in a shared research database so they can be refreshed on schedule. They are kept as keywords, not as a record of who searched for what, and they are not shown to other users as yours.
Payments
Subscriptions are sold by Lemon Squeezy as merchant of record. When you subscribe, your card and billing details go directly to Lemon Squeezy and are covered by its privacy policy. We receive the order status, the email address you paid with, and the identifiers needed to match the payment to your account. We never receive or store card numbers.
Signing in with Google
If you choose "Sign in with Google", we ask Google only for your basic profile: your name, email address and profile picture. We use these to create your account and sign you in. We do not request access to your Gmail, Drive, Calendar or any other Google data, and we do not use Google profile information for anything other than running your account. The sign-in tokens Google issues are stored so that your account stays linked; they are deleted with your account. You can also sign in without Google, using an emailed link, in which case Google receives nothing from us.
Who processes your data
We use a small number of service providers. Each one handles data only for the purpose listed and under its own contractual and legal obligations.
| Provider | What it does for us | What it sees |
|---|---|---|
| Vercel | Hosts the site and runs its server code | Request logs, and all data passing through the site |
| Neon | Stores the KDP tools database | Account, session, usage and subscription records |
| Lemon Squeezy | Merchant of record for subscriptions | Billing details, payment card, order history |
| Resend | Sends sign-in links, trial reminders and the newsletter | Email addresses and the emails sent |
| Optional sign-in; page fonts | Sign-in events for accounts using Google; IP address for font requests |
These providers operate mainly in the United States, so your data is transferred there. Beyond them, we share personal data only if the law requires it, or if it is needed to protect the site or its users from abuse.
What we do not do
- We do not sell, rent or trade personal data.
- We do not show advertising or place advertising trackers.
- We do not build profiles of you from other sources.
- We do not send marketing email to account holders beyond the trial and account emails described above, unless you also joined the newsletter.
Cookies
The review site sets no cookies. The KDP tools set one strictly necessary session cookie when you sign in, so that you stay signed in; it is removed when you sign out or it expires. There are no analytics or advertising cookies, which is why there is no cookie banner.
How long we keep it
- Account data is kept while your account exists and deleted when you ask us to delete it.
- Newsletter addresses are kept until you unsubscribe.
- Billing records held by Lemon Squeezy are kept for as long as tax and accounting law requires, even after your account is deleted.
- Server logs are kept for a short period by Vercel and then discarded.
Your rights and how to use them
You can ask us to tell you what data we hold about you, to correct it, or to delete it. You can also object to a particular use of it. Depending on where you live, these rights come from the Philippine Data Privacy Act of 2012, the EU or UK GDPR, or other local law; we apply them to everyone regardless.
To delete your account, email team@aihustlesurfer.com from the address on the account. We will delete your account, sessions, usage counts and email log from our database, cancel any active subscription, and ask our providers to remove what they hold, within 30 days. Lemon Squeezy keeps the invoice records it is legally required to keep. If you only want to stop the newsletter, use the unsubscribe link in any email.
If you are not satisfied with how we handled a request, you can complain to the data protection authority where you live. In the Philippines that is the National Privacy Commission.
Security
The site is served over HTTPS only. Secrets and database credentials live in the hosting environment, never in the site's code, and no payment card data ever reaches our systems. No method is perfect; if we learn of a breach affecting your data we will tell you.
Age
The KDP tools are for people running a publishing business, and accounts are for adults aged 18 or over. We do not knowingly collect data from anyone younger; if you believe a minor has created an account, email us and we will delete it.
Changes to this policy
When we change this policy we update the date at the top. If a change materially affects account holders, we will email them before it takes effect.
Contact
AIHustleSurfer, operating from the Philippines. team@aihustlesurfer.com.