Privacy Policy

alexndr.ai is a free, public index of openly published resources about AI agents. We hold almost no personal data, we sell nothing, and we track nobody. This page states exactly what we hold, why, for how long, and what you can do about it.

1. Who we are

alexndr.ai is operated by VDRTech LLC, a company established in Masdar City, Abu Dhabi, United Arab Emirates. VDRTech LLC is the data controller for the purposes described here.

We are not a data processor for anyone. We do not process personal data on behalf of any third party, we do not offer data-processing or data-storage services, and no other organisation instructs us to handle anyone's data. The only personal data we handle is our own, described fully on this page.

Because we are established outside the EU and the UK, we have chosen to apply GDPR and UK GDPR standards to everyone we serve rather than maintaining two tiers of treatment. Where the law requires us to appoint a representative in the Union or the United Kingdom, we will appoint one and publish its details here.

2. What this policy covers

This policy covers the alexndr.ai website, its public API, and the newsletter. It does not cover the third-party sites we link to: when you follow a link, that site's own privacy policy applies, and we have no control over it.

3. What we collect, and why

We do not ask for your name, address, telephone number, date of birth, government identifier, or payment card. We do not know who you are when you browse.

4. What we never do

• We never sell, rent, trade or broker personal data.
• We never share personal data for advertising, and we run no advertising trackers, pixels, or social widgets.
• We never build behavioural profiles, and we do not track you across other websites.
• We never process special-category data (health, religion, politics, biometrics, sexual orientation, criminal records).
• We never use your data to train an AI model that is sold or published.
• We never require an account. There is nothing to log into.

5. The library and personal data

The library indexes publicly available resources — papers, open-source repositories, articles and videos — and records only their bibliographic metadata: title, authors as published, date, topics, licence as displayed, a link, and a short description written by us.

Where a publicly published work credits an author, that attribution may amount to personal data. We handle it as follows:

• We index authorship only as it already appears in the public source, for the purpose of correct attribution and identification of the work.
• We do not index private email addresses, telephone numbers, home addresses, or identity documents. A deterministic filter blocks such patterns before publication.
• We describe the resource, never the character, competence or conduct of any person.
• If you are named in the library and object, email [email protected]. We will remove or amend the entry within 30 days, usually much sooner, without asking you to justify the request.

6. Lawful bases

Where we rely on legitimate interests, we have balanced those interests against your rights. You may object at any time and we will stop, unless we have compelling grounds that override your interests.

7. Cookies

The alexndr.ai site sets no tracking cookies and loads no third-party analytics. No consent banner is shown because there is nothing optional to consent to.

Our security provider, Cloudflare, may set strictly necessary security cookies (for example, a bot-management cookie) and the Turnstile challenge may set a security token. These exist solely to protect the service from automated abuse, are not used to identify or profile you, and are covered by the "strictly necessary" exemption in the ePrivacy rules. They expire quickly.

8. Retention

9. Who else touches the data

We use a small number of vendors, each under a data-processing agreement and each bound to use the data only on our instructions:

• Cloudflare — hosting, content delivery, security, and bot management.
• Resend — delivery of the newsletter and transactional email.
• Ko-fi — voluntary tips, handled under Ko-fi's own terms.

We may also disclose data where the law compels us, where it is necessary to establish or defend a legal claim, or to protect the rights and safety of others. If we are ever required to disclose data, we will disclose the minimum necessary and, where lawful, tell you.

We do not sell or share personal data with data brokers, advertisers, or list vendors. Ever.

10. International transfers

We operate a global service from the United Arab Emirates. Cloudflare and Resend process data on infrastructure in several countries, including the United States. Where personal data moves out of the EEA or the UK, we rely on the safeguards our providers maintain — the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and adequacy decisions where they apply.

Under the UAE PDPL, transfers outside the UAE are permitted where the destination provides an appropriate level of protection or where one of the statutory safeguards applies (Articles 22 and 23). We note honestly that the PDPL's Executive Regulations have not yet been published, so we apply the Law's own standards and keep our transfers to the minimum the service needs.

11. Your rights

Whatever your country, you may:

• Access the personal data we hold about you.
• Correct anything inaccurate.
• Delete it (and unsubscribe with one click).
• Restrict or object to processing, including direct marketing, at any time.
• Port the data you gave us in a common machine-readable format.
• Withdraw consent — as easily as you gave it.
• Not be subject to a solely automated decision with legal effect (we make none).

Write to [email protected]. We answer within 30 days. We do not charge a fee. We will not ask you to explain yourself, and we will not require you to use a form. If we genuinely cannot identify you in our records, we will tell you so plainly rather than demand documents.

12. How to complain

Please tell us first — we would rather fix it. If you are not satisfied, you may complain to a supervisory authority:

• United Arab Emirates: the UAE Data Office.
• European Union / EEA: the supervisory authority in your country of residence, work, or the place of the alleged infringement.
• United Kingdom: the Information Commissioner's Office (ICO).

13. Security

We hold very little, so there is very little to lose — that is deliberate. In addition, all traffic is encrypted in transit (HTTPS/TLS), access to our systems is restricted and credentialled, the published index is served from read-only infrastructure, and the forms are protected against automated abuse. We keep the minimum data necessary to run the service. If a breach ever affects your rights, we will notify you and the relevant authority without undue delay.

14. Children

alexndr.ai is a technical resource for people building AI systems. It is not directed at children, and we do not knowingly collect data from children. If you believe a child has given us their email address, write to us and we will delete it.

15. Automated decisions

We make no automated decisions about you and build no profiles. Our curation pipeline uses automated checks to decide whether a resource belongs in the library — a decision about content, not about any person.

16. Changes

If this policy changes materially, we will update the version and date above and, where the change affects subscribers, tell you by email. We keep prior versions available on request.