Privacy Policy

// Last updated: July 28, 2026

1. Introduction

PromptEval ("we", "our") respects your privacy. This policy describes how we collect, use, and protect your information when you use our platform at prompt-eval.com.

2. Data we collect

Account data: email address provided during sign-up via magic link or Google OAuth.
Usage data: prompts submitted for evaluation, version history, and analysis results.
Payment data: processed exclusively by Stripe. We do not store card details.
Technical data: access logs, IP address, and browser information for security and diagnostics.
Analytics and behavioral data (with your consent): usage events, pages visited, traffic source, and session recordings. Sensitive fields such as email and password are masked in recordings.

3. How we use your data

Authenticate and manage your account.
Process prompt evaluations via the Anthropic API.
Enforce usage limits and subscription plans.
Send service-related communications (no marketing without consent).
Improve service quality using aggregated and anonymized data.

4. Data sharing

We do not sell your data. We only share it with service providers necessary to operate the platform:

Supabase — database and authentication.
Anthropic — AI processing for prompt evaluation.
Stripe — payment processing.
Vercel — hosting infrastructure.
Sentry — error monitoring and diagnostics.
PostHog — product analytics and session recordings (with your consent).
Google (Analytics and Ads) — audience measurement and advertising campaigns (with your consent).

5. Data retention

Your data is retained while your account is active. Upon account deletion request, we remove your personal data within 30 days, except where required by law (e.g., tax records).

6. Your rights

Under Brazil's General Data Protection Law (LGPD, Law 13.709/2018), you have the right to:

Confirm that processing exists and access your data.
Correct incomplete, inaccurate, or outdated data.
Request anonymization, blocking, or deletion of unnecessary data or data processed unlawfully.
Data portability to another provider, upon request.
Delete data processed on the basis of your consent.
Know which third parties we share your data with.
Withdraw consent at any time.

To exercise any of these rights, email our Data Protection Officer (DPO) at francisco@prompt-eval.com — we respond within the legal deadline. You may also file a complaint with Brazil's National Data Protection Authority (ANPD).

7. Security

We use HTTPS, Row Level Security in the database, and environment-scoped API keys. No system is 100% secure; in the event of an incident, we will notify affected users.

8. Cookies and tracking technologies

We use strictly necessary session cookies for authentication, which cannot be disabled. With your consent, we also use analytics and advertising cookies and technologies — including session recordings — to understand how the product is used and to measure campaigns (PostHog, Google Analytics, and Google Ads). None of these load before you accept in the consent banner; you can decline, and to withdraw consent you already gave, simply clear this site's cookies and data in your browser. Session recordings mask sensitive fields such as email and password.

9. Changes to this policy

Changes will be published on this page with a new update date. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Data Protection Officer (DPO) and contact

Our Data Protection Officer, responsible for handling data-subject and ANPD requests, is Francisco Ferreira. Questions about this policy or requests regarding your data: francisco@prompt-eval.com