Privacy Policy
Last updated: March 20, 2026
EvaLoops (“we,” “us,” or “our”) is an AI evaluation platform operated by its founding team. We are currently in the process of establishing a formal legal entity. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at evaloops.app.
1. Information We Collect
Account Information
When you create an account, we collect:
- Name and email address (via Google OAuth or email sign-up)
- Profile picture (if provided by your OAuth provider)
- Organization name and industry
Evaluation Data
When you use the platform, we process:
- Agent endpoints — the URL and API key of the AI agent you connect for testing
- Conversation logs — synthetic conversations generated between our personas and your agent
- Evaluation results — scores, highlights, suggestions, and summaries produced by our analysis
- Knowledge files — documents you upload (CSV, JSON, TXT, PDF, Markdown) to provide context for evaluations
- Personas and tasks — test configurations you create or that we generate for you
Usage Data
We automatically collect basic usage information such as pages visited, features used, and browser/device type. We do not currently use third-party analytics or tracking tools.
Cookies
We use only essential cookies:
- Authentication session — managed by Supabase to keep you logged in
- Language preference — to remember your chosen language (en/es/pt)
We do not use advertising, marketing, or third-party tracking cookies.
2. How We Use Your Information
- To provide and operate the evaluation service
- To generate synthetic personas and run evaluations against your agent
- To produce evaluation results, highlights, and improvement suggestions
- To manage your account, organization, and team members
- To send transactional emails (team invitations, run completions)
- To maintain and improve platform security and performance
3. AI and Your Data
No Training on Your Data
We do not use your agent endpoints, conversation logs, evaluation results, or uploaded files to train any AI or machine learning models. Your data is processed solely to deliver the evaluation service you requested.
Third-Party AI Providers
To generate personas and evaluate agent responses, we send evaluation prompts to third-party LLM providers (such as OpenAI and Anthropic) via their APIs. These providers:
- Do not train their models on API inputs by default
- Process data under their own data processing agreements
- Receive only the data necessary to perform the evaluation
AI-Generated Content
Personas, conversations, and evaluation results are AI-generated. They should be reviewed by humans before making business decisions based on them.
4. How We Share Your Information
We do not sell your personal information. We share data only with:
- Service providers who help us operate the platform (see Subprocessors below)
- Your organization members — team members within your org can access shared evaluations
- Legal obligations — if required by law, regulation, or valid legal process
- Business transfers — in the event of a merger, acquisition, or asset sale
Subprocessors
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud | Batch processing, infrastructure | US |
| Supabase | Authentication, database | US |
| Fly.io | Application hosting | US (IAD) |
| OpenAI | LLM for evaluations | US |
| Anthropic | LLM for evaluations | US |
5. Data Retention
- Account data — retained while your account is active, deleted within 30 days of account closure
- Evaluation data (conversations, results, knowledge files) — retained while your account is active; you can delete individual runs or files at any time
- Waitlist data — retained until you request removal or we contact you
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), access controls, role-based permissions, and row-level security policies in our database. However, no method of transmission or storage is 100% secure.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent at any time
To exercise these rights, contact us at evaloops.ai@gmail.com. We will respond within 30 days.
8. International Transfers
Our team is based in Peru and our infrastructure is hosted in the United States. If you are located outside of these countries, your data will be transferred to and processed in the US. By using our platform, you consent to this transfer.
9. Children's Privacy
EvaLoops is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us and we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the platform after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
- Email: evaloops.ai@gmail.com
- Website: evaloops.app