Information we collect
- Accounts: your email address, account identifier, and authentication records. Supabase manages password authentication; passwords are not published or made available to directory users.
- Creator profiles and submissions: the name, handle, description, category, links, and any optional information you submit, together with submission and review history.
- Votes: your account identifier, the bot you voted on, your vote, and its update time.
- Public source information: bot descriptions, creator names and handles, public profile links, source URLs, and related listing metadata imported from public directories or share pages.
- Technical information: our hosting and service providers may process IP addresses, browser and device information, request times, and diagnostic or security logs when you use the site.
- Support: information you include when contacting us.
How we use information
We use this information to run the directory, authenticate accounts, deliver confirmation and password reset emails, review submissions, display creator credits, calculate vote totals, respond to requests, troubleshoot problems, and protect the service against misuse.
You can browse without an account. An email address is needed to create an account; a signed-in account is needed to vote or submit. Required submission fields are marked in the form. Optional information can be left blank.
What becomes public
Approved listings display their bot and creator details, including public links and attribution. Imported public creator information can also appear in the directory without the creator having an account here. Pending submissions and reviewer notes are available to the submitting account and authorized reviewers as appropriate. Your account email and individual voting history are not displayed publicly; aggregate voting totals are public.
Do not include private credentials, personal conversations, or information you do not want published in a listing or shared bot template.
Cookies and browser storage
We use authentication cookies to maintain sessions and browser storage to remember your theme preference. Search and filter choices appear in page URLs, so they are included when you share a filtered page. The current app does not integrate advertising trackers or third-party visitor analytics. Hosting providers may still keep operational and security logs.
Service providers and overseas processing
Vercel hosts the application. Supabase provides our database and account authentication; our database project is hosted in Singapore. Resend delivers account emails, and Cloudflare provides domain and DNS services. These providers process the information needed to provide their services, and information may be processed in countries other than your own. Their own privacy policies also describe their processing.
We do not sell personal information. We may disclose information when needed to comply with applicable law, protect users or the service, or work with providers supporting the purposes described here.
Retention and security
We keep account, submission, vote, and source records while needed to operate the service, maintain listing history, resolve disputes, or meet legal obligations. Retention depends on the record and purpose. Deleted information may remain in provider backups until those backups expire.
We use access restrictions and encrypted connections to protect information. No internet service can guarantee complete security.
Your choices and requests
Contact support@grokbotstack.com to request access to or correction of your personal information, account deletion, or correction or removal of a public creator listing. Include the relevant account email or listing URL. We may need to verify your identity or authority before acting. Some information may need to be retained for legal, security, or recordkeeping reasons; we will explain any applicable limitation.
Your privacy rights and complaint options depend on the laws that apply to you. You may also contact your local privacy regulator.
External services and children
Installing a bot or opening a creator, kit, instructions, or source link takes you to a separate service with its own privacy practices. GrokBotStack does not receive your bot conversations or connected-app credentials through those links.
The account and submission features are not intended for children under 13. If you believe a child has provided personal information, contact us so we can investigate.
Changes to this policy
We may update this policy as the service changes. The date above identifies the latest revision. Where required, we will provide additional notice of material changes.