Privacy Notice

1. Scope

This notice applies to the Evalara website, commercial assessment process, implementation communications, and customer workspace administration. Customer content processed within a dedicated workspace may also be governed by the applicable statement of work, data-processing terms, and customer instructions.

Evalara does not provide public user registration. Workspace users are invited by an authorized customer administrator.

2. Information collected

Evalara may collect business contact details, role and organization information, assessment requests, communications, meeting records, workspace identifiers, administrative access records, support information, and technical website data such as IP address, device, browser, pages viewed, and cookie preferences.

When configured by a customer, the platform may process prompts, model responses, traces, span metadata, tool-call records, evaluation datasets, scores, annotations, cost information, and related technical content. The customer determines what application data is sent to its workspace and is responsible for the applicable legal basis and notices.

3. Purposes and legal bases

Information is used to respond to requests, assess technical requirements, prepare and perform agreements, provision and secure customer workspaces, provide support, maintain service reliability, prevent misuse, improve the service, meet legal obligations, and establish or defend legal claims.

Where required, processing relies on consent, performance of a contract, compliance with law, or legitimate interests that are not overridden by the rights of the individual.

4. Sharing and service providers

Evalara may use carefully selected hosting, security, communications, analytics, support, and professional-service providers. They may process information only for contracted purposes and subject to appropriate confidentiality and security obligations.

Information may also be disclosed where required by law, to protect rights and safety, in connection with a corporate transaction, or at the direction of an authorized customer.

5. International transfers

Service providers and customer environments may operate in more than one country. Where required, Evalara uses contractual and organizational safeguards appropriate to the transfer and the information involved.

6. Retention

Information is kept only for as long as reasonably necessary for the stated purpose, contractual commitments, security, dispute resolution, and legal requirements. Workspace retention is agreed during implementation and may vary by environment, data class, and customer instruction.

7. Security

Evalara uses administrative, technical, and organizational measures designed to protect information, including access controls, encryption where appropriate, environment separation, monitoring, secure development practices, and incident procedures. No system can provide absolute security.

8. Individual rights

Depending on applicable law, individuals may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent. Workspace users should normally contact their customer administrator first because the customer controls the relevant workspace data.

Requests relating to Evalara's own commercial or website records may be submitted through the assessment form with the subject clearly identified as a privacy request.

9. Changes

This notice may be updated to reflect service, legal, or operational changes. The current version and effective date will be published on this page.