DOA
Help me choose

Privacy

Short version: you do not need an account to use DOA and we do not sell your data.

Controller

Data controller: Daniel Orlando Añez Añez. Contact: doaiacreativestudio@gmail.com

To exercise your rights of access, rectification, erasure, objection, restriction or portability, write to that address.

What data exists

This site is a static catalogue. We do not create user profiles or accounts. The host (currently Vercel) and the domain registrar may keep technical logs: IP, date, page, browser. If you use the assistant, the text you type is processed.

Purpose and legal basis (GDPR art. 6)

  • Serving the site, security and diagnosis (server technical logs and the assistant’s per-IP request limit): legitimate interest in a working site free from abuse (art. 6(1)(f)).
  • Answering the assistant when you describe your project: your own request (art. 6(1)(b)) and our legitimate interest in giving you the recommendation you ask for (art. 6(1)(f)).
  • Anonymous, aggregate visit measurement with Vercel Web Analytics, without cookies: legitimate interest in knowing which pages are used (art. 6(1)(f)).
  • Showing tool icons from Google’s favicon service: legitimate interest in a clear catalogue (art. 6(1)(f)).
  • Replying if you email us: your request and our legitimate interest in answering (art. 6(1)(f)).

You can object to processing based on legitimate interest by writing to the address above.

Third parties (processors)

  • AI assistant: if you describe your project in “Help me choose”, that text is sent from our server to Google (Gemini API), Groq or OpenRouter (depending on availability) to generate the recommendation. We do not store it in a database. Do not type personal data in that field.
  • Request limit: to prevent abuse of the assistant, the server counts requests per IP address for one minute, in the function’s memory. The code supports a shared counter in Upstash with a hashed IP; it is not active today.
  • Vercel Web Analytics: measures visits in aggregate. According to Vercel, it uses no cookies, identifies a visit with a hash of the request that is discarded after 24 hours, and stores data such as page, referrer, country, OS and browser.
  • Tool icons: loaded from Google’s favicon service, which receives your IP and the tool’s domain.
  • Fonts: served from our own domain. We do not load Google Fonts or ad networks.

International transfers

Vercel (hosting and analytics), Google (Gemini API and favicons), Groq and OpenRouter may process data outside the European Economic Area, mainly in the US. The server function runs in Vercel’s Paris region, but the company and some of these providers are based in the US. These transfers rely on the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses, as offered by each provider.

Affiliates

Some tool cards carry an affiliate or partner link, marked on the card itself. If you sign up through it, DOA may earn a commission at no extra cost to you. DOA sets no cookies for this; the provider may set its own once you reach its site, where its policy applies.

Official links leave DOA.

How long data is kept

  • Assistant text: DOA does not store it or write it to logs; it is only processed during the request to generate the answer. The AI provider handles it under its own terms.
  • Request limit: the per-IP count lasts the one-minute window and is then discarded.
  • Analytics: Vercel discards the visit hash after 24 hours; what remains are aggregate figures that do not identify you.
  • Server technical logs: the provider’s (Vercel’s) limited log retention period.
  • Emails: as long as needed to handle your message.

Rights

You have GDPR rights of access, rectification, erasure, objection, restriction and portability. Write to doaiacreativestudio@gmail.com. You may complain to the Spanish Data Protection Agency (aepd.es).

Children

The site is about AI tools. It is not meant to collect data from children.