Submit

Privacy Policy

How AI Agents Listing collects, uses and protects your information.

Effective date: October 10, 2026. AI Agents Listing is operated by GrubGuru, a company registered in British Columbia, Canada. This policy explains what personal information we collect, why we collect it, and what choices you have. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

AI Agents Listing is a public directory of AI agents, MCP servers, and agent skills. You can browse it without an account and without telling us who you are. When you use certain features, we collect:

  • Account information. If you create an account, we collect your email address and either a password or the basic profile details shared by the social sign-in provider you choose.
  • Listing submissions. When you submit a listing, the information you provide about the product (name, description, links, and similar details) is published publicly as part of the directory. The contact email you provide with a submission is used only to contact you about that submission and is never published.
  • Activity on the site. Upvotes, bookmarks, and reviews you create while signed in are associated with your account.
  • Ownership claims. If you claim a listing, we process the information needed to verify that you control the listing's domain.
  • Payment information. Payments for listing tiers, expedited review, and category sponsorships are processed by Stripe. We receive confirmation of your payment and basic billing details from Stripe, but we never see or store your card number.
  • Newsletter subscription. If you subscribe to our newsletter, we store your email address for that purpose.
  • IP addresses. We process IP addresses for rate limiting and abuse prevention. This is short-term operational use, not profiling.

How we use your information

  • To operate the directory and provide the features described above
  • To review submissions and contact submitters about their listings
  • To verify ownership claims
  • To process payments and keep records of purchases
  • To send transactional email (account, submission, and purchase notifications)
  • To send our newsletter to people who subscribed
  • To prevent abuse, spam, and misuse of the service
  • To understand how the site is used, in aggregate, through analytics

We do not sell personal information. We never have and we don't plan to start.

Cookies and analytics

We use session cookies to keep you signed in. We use Google Analytics 4 to measure how the site is used, and it sets its own cookies. Analytics is on by default; you can opt out at any time with Decline in the banner, after which no analytics cookies are set and Google Analytics receives only cookieless, aggregate signals. Google Signals and ad personalization are off. We also count a few events on our own servers, such as a listing being submitted or a payment completing, without any identifier from your browser. We don't run ad networks or third-party tracking beyond Google Analytics.

Bot protection

We use Cloudflare Turnstile to tell real visitors apart from bots on forms and endpoints that would otherwise be easy to abuse, such as sign-in, listing submissions, and newsletter signups. Turnstile runs invisibly, so there is nothing for you to solve. It works by checking signals from your browser (such as your IP address, user agent, and TLS fingerprint) to decide whether a request is automated, not by tracking you across sites or building a profile of you. Cloudflare processes this data as described in the Cloudflare Turnstile Privacy Addendum.

Email

Transactional email (things like sign-in and submission notifications) is delivered through Amazon SES and Resend. Our newsletter subscriber list is mirrored to beehiiv, the platform we use to send it. Every marketing email we send includes an unsubscribe link, and you can also opt out at any time on our unsubscribe page. Unsubscribing from the newsletter does not affect transactional email you receive as part of using the service.

Public content and APIs

The directory is public by design. Listing information, reviews, and upvote counts are visible to anyone, and the same public listing data is available through our read-only MCP API endpoint (which requires no account) and through a content API available to authorized API keys. Your submission contact email is never included in any of this.

Who we share information with

We share personal information only with the service providers we use to run the site: Stripe for payments, Google for analytics, Amazon SES and Resend for transactional email, beehiiv for the newsletter, and Cloudflare for bot protection. Each provider receives only what it needs to do its job. We may also disclose information if the law requires it.

Retention and deletion

We keep personal information for as long as it's needed for the purposes above. You can delete your account, which removes it from the service. You can also ask us to delete personal information we hold about you by emailing [email protected], and we'll act on the request unless we're legally required to keep something (for example, payment records).

Your rights

Under PIPEDA, you have the right to access the personal information we hold about you, to ask us to correct it, and to withdraw consent to its use. To exercise any of these rights, email [email protected]. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change this policy, we'll update this page and the effective date above. If a change is significant, we'll make reasonable efforts to bring it to your attention.

Contact

Questions about this policy or your personal information? Email us at [email protected].