Privacy Policy

What We Collect

When you take an assessment on Evaluator, we collect:

• Your name and email — to identify your submission to the assessment creator.
• Your responses — the answers you provide to each question, including code you write.
• Time data — how long you spend on each question.
• Scores and AI feedback — generated by our AI evaluation system.

For account holders (companies, recruiters, teachers), we additionally collect:

• Account information (email, name, company).
• Job descriptions you submit for assessment generation.
• Hiring decisions and performance reviews you choose to log.
• Payment information (processed securely by Stripe — we never see your full card number).

How We Use Your Data

• Deliver the service — generate assessments, evaluate responses, and show results.
• Improve question quality — we analyze aggregate performance data to identify which questions best differentiate skill levels.
• Correlate outcomes — when recruiters log hiring decisions, we use this to validate which assessment patterns predict successful hires. This data is always aggregated and anonymized.
• Track class progress — for educators, we track student improvement over time.
• Platform analytics — we monitor usage patterns to improve the product.

Data Storage & Security

All data is stored in Supabase (hosted on AWS) with encryption at rest and in transit. Personally identifiable information (PII) is stored separately and can be deleted on request. We use Row Level Security (RLS) policies to ensure users can only access their own data.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Assessment response data is retained until a deletion request is processed. You can request deletion at any time.

Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — request a copy of all data we hold about you.
• Portability — export your data in JSON or CSV format.
• Deletion — request that we delete all your personal data.
• Restriction — ask us to stop processing your data.
• Objection — object to processing for analytics or profiling purposes.

Data Deletion

You can request deletion of all your data at any time. We will process your request within 30 days. This includes removing your responses, scores, and any personally identifiable information.

Third-Party Services

• Supabase — database and authentication.
• Anthropic (Claude) — AI-powered question generation and evaluation. Your responses are sent to Claude for scoring but are not used to train AI models.
• Stripe — payment processing for paid subscriptions.
• Vercel — application hosting.

Contact

For privacy questions or data requests, email us at privacy@evaluator.ai.