Privacy Policy

1. Who we are

LLM EvalForge ("we", "us", "our") operates this website to collect waitlist interest for our LLM evaluation platform. This privacy policy explains how we handle your personal data when you join the waitlist.

2. What data we collect

When you submit the waitlist form, we collect:

• Email address — to notify you when early access opens and to send a single confirmation email.
• Hashed IP address — a one-way SHA-256 hash of your IP address, used solely for abuse prevention. The original IP address is never stored.
• Timestamp — the date and time you submitted the form, serving as a record of your consent.

We do not use cookies, tracking pixels, analytics scripts, or any other form of behavioral tracking on this website.

3. Why we collect it (Legal basis)

We process your data based on your consent(GDPR Article 6(1)(a)), which you provide by voluntarily submitting the waitlist form. The disclaimer visible on the form states: "No spam. Unsubscribe anytime. By joining, you agree to our Privacy Policy."

4. How we use your data

• To send you a one-time confirmation email when you join the waitlist.
• To notify you when early access to LLM EvalForge becomes available.
• To prevent abuse and duplicate submissions (via the hashed IP).

We will never sell, rent, or share your email address with third parties for marketing purposes.

5. Sub-processors

We use the following third-party services to operate the waitlist:

All sub-processors maintain their own GDPR-compliant data processing agreements.

6. Data retention

We retain your waitlist data until 12 months after the public launch of LLM EvalForge, or until you request deletion, whichever comes first. After that period, all waitlist data is permanently deleted.

7. Your rights under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request permanent deletion of your data.
• Right to withdraw consent — you can withdraw your consent at any time.
• Right to lodge a complaint — you may file a complaint with your local data protection authority.

8. How to exercise your rights

To request access, correction, or deletion of your data, please contact us by replying to any email you received from us, or by sending an email to the address listed in our confirmation emails. We will respond to your request within 30 days.

9. Security

Your data is stored in an encrypted PostgreSQL database hosted by Neon. All connections use TLS encryption. IP addresses are hashed with SHA-256 before storage and cannot be reversed. Access to the database is restricted to authorized personnel only.

10. Changes to this policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.