Privacy Policy

1. Who we are

Evaluation AI (“we”, “us”) provides AI-assisted monitoring & evaluation training, templates and tools. We are the data controller for the personal data described here. Contact us or our privacy team at contact@evaluationai.com.

2. The personal data we collect

• Account data — your name, email address and authentication identifiers, via our authentication provider (Clerk) when you sign up or sign in.
• Order & billing data — the email address, plan and a receipt/transaction reference from Stripe when you buy. We never store full card details; Stripe handles payment data.
• Newsletter data — your email if you subscribe (delivered via Beehiiv) or download a free resource.
• Your workspace content — material you save to your account, such as chat-with-files projects, résumé drafts and course progress.
• Usage & technical data — pages viewed, device/browser type, coarse location (from IP) and timestamps, for security, diagnostics and (with consent) analytics.
• Communications — the content of emails and support messages you send us.

We do not ask for special-category data, and you should not put it into the tools (see §5).

3. How and why we use it (legal bases)

• To provide the Service (account, purchases, downloads, courses, support) — performance of a contract.
• To take payments and prevent fraud — contract and legitimate interests.
• To keep the Service secure and prevent abuse (rate limiting, logging) — legitimate interests.
• To send transactional email (receipts, downloads, account notices) — contract.
• To send marketing/newsletter (The Bridge) — consent (you can unsubscribe any time) or soft opt-in for existing customers.
• To measure and improve the Service — consent for analytics cookies; otherwise legitimate interests using aggregated data.
• To meet legal, tax and accounting obligations — legal obligation.

4. Cookies and local storage

We use essential cookies/local storage to run the site (keeping you signed in via Clerk, checkout via Stripe, remembering your cookie choice) and, only with your consent, privacy-friendly analytics. See the Cookie Policy for the full list and how to change your choice.

5. AI processing — what this means for your content

• Some tools (the assistant, résumé import, skill generation and research) send the text you supply to a third-party AI model provider, through OpenRouter and its model providers, so it can return an answer.
• These calls are made only for signed-in users, are used only to produce your result, and are not used to train third-party models under our agreements.
• You control what you paste. Do not submit personal data, beneficiary data or client-confidential material you are not permitted to process. Redact first, or use a local model for sensitive work.
• Rate limits and per-user quotas apply to protect the Service.

6. Who we share data with (sub-processors)

We share personal data only with the providers that make the Service work:

• Clerk — authentication and account management.
• Stripe — payments, receipts and fraud prevention.
• Cloudflare — hosting, storage and database at the edge.
• Resend — transactional email delivery.
• Beehiiv — newsletter delivery.
• OpenRouter and the underlying model providers — AI processing described in §5.
• Analytics providers (e.g. Google Analytics, PostHog) — only after you consent via the cookie banner.

We do not sell your personal data, and we do not share it for third-party advertising.

7. International transfers

These providers may process data in the UK, EEA, the United States and other regions. Where required, transfers rely on the providers’ standard contractual clauses and additional safeguards.

8. How long we keep it

• Account & order records — while your account is active and for as long as needed to meet tax and accounting obligations.
• Newsletter data — until you unsubscribe (plus a short suppression record to honour it).
• Workspace content — until you delete it or close your account.
• Usage & security logs — a short period, then deleted or aggregated.
• Analytics — retained per the analytics provider’s settings and our configuration.

9. Your rights

Depending on where you live, you can ask to access a copy of your data, correct it, delete it,restrict or object to certain processing, request portability, and withdraw consent (e.g. for cookies or marketing) at any time. Email contact@evaluationai.com and we will respond within the time the applicable law allows. You also have the right to complain to your local data-protection authority.

10. Security

We use encryption in transit, access controls, scoped credentials and least-privilege practices. No system is perfectly secure; keep your credentials safe and tell us promptly about any suspected compromise.

11. Children

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy as the Service evolves. We will change the “last updated” date and, for material changes, notify you in the Service or by email.

13. Contact

Privacy questions or requests: contact@evaluationai.com. If you need a signed data-processing agreement for your organisation, ask us.

See also the Terms of Service and Cookie Policy.