---
title: "Privacy policy"
description: "Privacy policy"
canonical: "https://www.evalgate.com/privacy"
last-updated: "2026-10-21"
---

# Privacy policy

Last updated: October 15, 2026

This notice explains the information EvalGate uses to provide AI evaluation, tracing, account management and optional product updates. It does not expand the access or release permissions configured in your workspace.

## Information handled by EvalGate

Accounts and organizations may provide names, email addresses, membership roles, authentication identifiers and billing-related status. The product processes evaluations, expected outcomes, prompts, test cases, traces, tool-call metadata, linked repositories and evidence that users choose to connect or submit. API and security logs can include operational metadata used to detect errors, abuse and unauthorized access.

Product content belongs to the appropriate workspace and is not intentionally submitted to optional browser product analytics. Workspaces should avoid entering information they are not authorized to process.

## Why information is processed

We use service data to authenticate people and agents, execute authorized evaluations, produce evidence and reports, administer subscriptions, support users, apply configured controls and maintain the reliability and security of the service. Retention and deletion depend on the resource, workspace settings, operational records and applicable obligations; do not assume every type of data uses the same retention period.

## Optional analytics and cookie choices

Optional PostHog product analytics and Vercel page analytics are disabled by default until you choose to allow them. We honor browser Do Not Track and Global Privacy Control signals by keeping optional analytics disabled. If allowed, events are limited to supported page categories, explicit feature actions, safe campaign labels and aggregate numeric counters. Prompts, trace contents, raw repository identifiers and full visited URLs must not be sent through these optional events. Necessary session and security cookies remain separate from this choice.

You may change or withdraw your optional analytics permission. Withdrawing permission stops future optional event capture, but it does not automatically erase historical events already processed by an analytics provider.

Analytics choices

## Email updates

An email signup request alone does not activate marketing communications. New and returning subscribers must confirm ownership using a time-limited email link; confirmation and unsubscribe actions require a signed, encrypted link and are not performed by merely opening an email or web page. Each confirmation email may be ignored. Optional update emails include an unsubscribe mechanism. Account-security and transactional service messages are handled separately from marketing opt-in.

## Service providers and security

Infrastructure and service providers may process data for hosting, databases, email delivery, authentication support, billing, observability and optional analytics. Depending on enabled features this can include Vercel, Resend, PostHog and payment or model providers. Different providers may process data in different regions. We apply scoped authorization, operational controls and transport protections, but do not claim a platform certification, universal data residency or an absolute security guarantee here.

## Your requests and changes to this notice

For access, correction, deletion, or an inquiry about information processing, contact EvalGate using the [contact page](https://www.evalgate.com/contact). Responses may require identity verification and may be limited by security, legal preservation or operational obligations. The notice may be updated as the service or its providers change; check the date above for revisions.