Privacy Policy
Last updated: August 3, 2026
1. What we collect
Account information: when you sign in (e.g. with Google), we receive your email address and display name through Firebase Authentication. Workspace data: the models, tasks, datasets, benchmark runs, results, and analysis you create inside the Service. Usage data: pages you visit, features you use, and interaction metadata, used to operate and improve the Service. Technical data: your IP address and, when available, the country derived from it (used to show localized prices and for security/rate-limiting). Cookies as described below.
2. How we use it
We use your data to: provide and operate the Service (executing your runs, generating analysis, syncing Search Console rankings); process payments and manage subscriptions; deliver support and transactional email; enforce security and acceptable use; and improve the product. We do not sell your personal data.
3. Cookies & similar technologies
We use a session cookie (via Firebase) to keep you signed in. Polar sets cookies as part of checkout. When you connect Google Search Console, we perform a one-time OAuth flow and store the refresh token to sync ranking data on your behalf.
4. How we share data
We share data only with the service providers needed to run the product: - Firebase (authentication) - Supabase (database/storage) - Vercel (hosting) - Polar (payment processing, merchant of record) - Resend (transactional email, when used) - Google Search Console (only when you connect it) When you publish results to the public leaderboard, that data is public by design. Private workspace data is never shared with other users.
5. API credentials & BYOK keys
When you connect your own model providers (bring-your-own-key), the API keys and credentials you provide are stored encrypted, used only to run your evaluations on your behalf, and are not used to train our models, sold, or shared with third parties. You can revoke or delete a key at any time from the product.
6. Data retention & security
We retain data as long as needed to provide the Service or as required by law. We use industry-standard security measures including encrypted transport (HTTPS), service-role access controls, and least-privilege keys. No system is fully secure; we cannot guarantee absolute security.
7. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can delete most workspace data from the product itself, or contact us to request deletion of your account and associated data.
8. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
9. International processing
Your data may be processed on servers located outside your country. By using the Service you consent to such processing in accordance with this policy.
10. Changes & contact
We may update this policy from time to time; material changes will be posted here. Questions? Contact us through the studio or at the support email shown in your account.
6. Your rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can delete most workspace data from the product itself, or contact us to request deletion of your account and associated data.
7. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
8. International processing
Your data may be processed on servers located outside your country. By using the Service you consent to such processing in accordance with this policy.
9. Changes & contact
We may update this policy from time to time; material changes will be posted here. Questions? Contact us through the studio or at the support email shown in your account.