Published profiles, listings and community posts are public. Unpublished seller content and buyer results have access controls.
1. Scope and contact
This policy describes how EvalMarket handles information when you use the marketplace. ProDefense LLC operates EvalMarket and is responsible for the information handling described here. Privacy requests can be sent to legal@evalmarket.ai.
The marketplace uses the account and content data flows described below. Paid checkout uses Stripe.
2. Information we handle
Account information includes email, display name, provider identity and session information used for Google or email-link sign-in. Seller profiles may include a public handle, biography, expertise, professional links and published listings.
Marketplace records include unpublished seller content, cases, reference answers, rubrics, test evidence, submissions and review decisions; acquisitions, version grants, payment references, refunds and payout status; and public reviews, questions, replies, requests and suggestions.
Hosted grading receives the responses you submit and stores run information and results. Support messages and information you voluntarily share are also processed. Infrastructure providers process technical information such as IP addresses, request metadata and security logs. Do not submit secrets or unnecessary personal or sensitive information.
3. Why information is used
We use information to authenticate accounts, deliver acquired content, grade submitted deterministic responses, maintain entitlements, review submissions, operate support and moderation, reconcile transactions, investigate misuse and maintain service reliability.
Purely local execution does not automatically upload your local files or results to EvalMarket. A connected run sends responses when submitted to the hosted API. Any AI provider you choose receives information according to your integration and its own terms; EvalMarket does not supply an AI judging service.
4. Public and private information
Published seller profiles, listing information, designated samples, reviews, public questions/replies and request-board contributions are public-facing content.
Unpublished content, review evidence, complete paid/local material and buyer results are protected by role and entitlement checks. Sellers do not automatically see buyer responses or detailed results. Share them with a seller only when you intend to. Authorized internal support/security access to hosted result details is recorded.
5. Service providers and disclosures
Cloudflare serves and protects the site. AWS runs the API and operational services. Neon provides database and authentication services, with Google or email links used for sign-in. Stripe supports checkout and connected-account payment workflows. PostHog and Google Analytics measure marketplace use on the production site. Support email is forwarded to the operating team’s inbox.
These services process information needed for their functions. Information may also need disclosure to address a valid legal demand, security incident or rights claim; requests should be limited to what is necessary.
Cloudflare Turnstile checks for automated use of account and marketplace forms. Read Cloudflare’s Turnstile Privacy Addendum.
7. Retention and deletion
Detailed hosted run responses and results expire 30 days after the first valid submission, including partial-error submissions. Retries and revisions do not extend that date. Users can export or delete details earlier. Expiry/deletion removes detailed answers and results and revokes run grants; minimal identifiers and allowance counts remain for enforcement.
This 30-day rule does not cover every record. Account data, acquisitions, frozen seller versions needed for buyer access, transaction references, support records, audit logs, analytics and backups have separate needs. We retain these records as needed to operate the service, honor acquisitions, address disputes and meet legal obligations. Deletion of active records does not promise immediate removal from every backup or third-party system.
A purchase refund changes access but does not itself erase transaction or support history. Account-deletion requests must preserve legally necessary records and existing buyer rights where applicable; a complete self-service account deletion flow is not currently available.
8. Your choices and requests
Contact legal@evalmarket.ai to ask about access, correction, deletion or export of personal information. Include the account email and request type, but do not email passwords, sign-in links, payment-card details or unnecessary identity documents. We may need to verify ownership before acting.
Privacy rights and exceptions depend on your location and applicable law. We handle requests in accordance with those requirements and may retain records needed to meet legal obligations. Contact legal@evalmarket.ai with questions about a response to your request.
9. Security and policy updates
The service uses access controls, protected sessions and restricted infrastructure access. No service can promise absolute security. Protect downloaded packs, run credentials and any results you share. Contact support if you believe private data has been exposed.
We publish policy updates here with an updated effective date. Contact legal@evalmarket.ai with questions about changes.
Still have a question?
For legal or policy questions, write to legal@evalmarket.ai. For an order or a pack, our support page points you to the right place.