Privacy policy

Last updated: 29 October 2026.

toolcrew.app is a price comparison for AI phone agents. You can use it without an account, and we collect as little personal data as we can. This page explains what we do process, why, and the rights you have under the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

Who is responsible

The data controller for toolcrew.app (brand: Toolcrew) is:

What we process and why

Visiting the site

Like any website, our hosting provider receives technical data when your browser requests a page: IP address, date and time, the page requested, referrer, and browser user agent. This is needed to deliver the page, keep the service secure, and fix errors.

• Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Usage statistics

We use Vercel Web Analytics to count page views and a small set of interactions, for example running a price search, changing a filter or sort, clicking through to a vendor, or sending the vendor form. Events carry details about the comparison (such as call volume, vendor and position on the page), never your name or email address.

Vercel Web Analytics does not use cookies or store anything on your device. To tell visits apart, it uses a hash derived from the request, which is discarded within 24 hours. We only see aggregated numbers and cannot identify individual visitors.

• Legal basis: our legitimate interest in understanding how the site is used so we can improve it (Art. 6(1)(f) GDPR).

The vendor contact form

If you use the For vendors form, we receive the details you enter: topic, company, company website, your name, your email address, an optional pricing page link, and your message. We use them only to read and answer your request. The form is delivered to us by email through our email provider.

To block spam, the form uses a hidden field, a minimum fill time, and a limit on how many messages one connection can send. For that limit, your IP address is held briefly in server memory and is not stored.

• Legal basis: your consent, given with the checkbox on the form (Art. 6(1)(a) GDPR), and, for spam protection, our legitimate interest in keeping the form usable (Art. 6(1)(f) GDPR). You can withdraw consent at any time; this does not affect processing that already happened.

What we don't do

• No accounts, logins, or newsletters.
• No advertising or cross-site tracking cookies.
• No sale of personal data and no profiling.

Links to vendors leave toolcrew.app. Some are affiliate links (see our affiliate disclosure). Once you are on a vendor's site, its own privacy policy applies, including any cookies it sets to attribute a referral.

Cookies and local storage

toolcrew.app does not set cookies. The only thing stored on your device is your light or dark theme choice, saved in your browser's local storage under the key pai-theme when you use the theme toggle. It never leaves your device and is used only to show the theme you picked. Because it is strictly necessary for a feature you asked for, it does not require consent. You can clear it at any time in your browser settings.

Fonts are served from our own domain, so loading a page does not contact third-party font services.

Who processes data for us

We use these service providers (processors). They act on our instructions under a data processing agreement:

• Vercel Inc. (United States): website hosting, request and server logs, and Web Analytics.
• Resend (United States): delivery of vendor form messages by email.

We may also disclose data where the law requires it, for example to courts or public authorities.

International transfers

Our providers are based in the United States, so some data may be processed outside the European Economic Area. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

How long we keep data

• Server logs: kept by our hosting provider for a short period, no longer than 30 days.
• Analytics: the visitor hash is discarded within 24 hours; we keep only aggregated statistics.
• Form messages: as long as needed to handle your request and any follow-up, and no longer than 24 months after our last contact, unless the law requires us to keep them longer or you ask us to delete them sooner.
• Theme choice: stays in your browser until you clear it.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased;
• restrict how we process it;
• receive data you gave us in a portable format;
• object to processing based on our legitimate interests;
• withdraw consent at any time, where processing relies on it.

To exercise any of these rights, write to us at the postal address above, or send a message through the contact form with the topic “Something else”. We may ask you to confirm your identity, and we will reply within one month.

You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es.

Changes to this policy

If we change how we process data, we will update this page and the date at the top.