Legal

Privacy Policy

Last updated: April 1, 2026

01

Information We Collect

We collect information you provide directly when creating and using your Peeld account, as well as data generated through your use of the platform.

  • Account information — name, email address, organization name, and role within your organization.
  • Usage data — feature usage patterns, evaluation results metadata, and interaction logs within the platform.
  • Technical data — IP address, browser type and version, device information, and operating system.
  • AI deployment data — model endpoints, evaluation configurations, and pipeline settings you configure within workspaces.

02

How We Use Your Information

We use the information we collect to operate, maintain, and improve the Peeld platform. Specifically:

  • Provide, maintain, and secure the platform and its features.
  • Process evaluations, generate reports, and deliver assessment results.
  • Improve platform features, performance, and the accuracy of evaluation modules.
  • Send important service updates, security alerts, and administrative notifications.
  • Comply with legal obligations and respond to lawful requests from authorities.

03

Data Security

We implement enterprise-grade security measures to protect your data at every layer of the platform.

  • Encryption — AES-256 encryption at rest and TLS 1.3 for all data in transit.
  • Infrastructure — SOC 2 Type II certified cloud infrastructure with continuous compliance monitoring.
  • Testing — regular security audits and third-party penetration testing on a quarterly basis.
  • Access controls — role-based access controls, audit logging, and principle of least privilege across all systems.

04

Data Retention

We retain your data only as long as necessary to provide our services and fulfill the purposes described in this policy.

  • Account data is retained for the duration your account remains active.
  • Evaluation data is retained according to your workspace-level retention settings.
  • Deleted data is permanently purged from primary systems within 30 days of deletion.
  • Backup copies of deleted data are purged within 90 days.

05

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data, subject to legal retention requirements.
  • Portability — export your data in a machine-readable format (GDPR Article 20).
  • Marketing opt-out — opt out of marketing communications at any time via account settings or email unsubscribe.
  • Complaints — lodge complaints with your local data protection supervisory authority.

06

Third-Party Services

We work with a limited number of trusted third-party service providers to operate the platform. All providers are vetted for security and compliance.

  • Cloud infrastructure — SOC 2 certified providers for hosting and data storage.
  • Authentication — Clerk for secure identity management and session handling.
  • Analytics — anonymized usage analytics with no personally identifiable information collected.

We never sell, rent, or trade your personal data to third parties.

07

Cookies

We use a minimal set of cookies to ensure the platform functions correctly and to understand how it is used.

  • Essential cookies — required for authentication, session management, and security. These cannot be disabled.
  • Analytics cookies — optional cookies that help us understand usage patterns. You can disable these in your account settings.

We do not use advertising or third-party tracking cookies.

08

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements.

Significant changes will be communicated via email to the address associated with your account at least 14 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

Continued use of the platform after changes take effect constitutes your acceptance of the revised policy.

09

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: