Privacy Policy

1. Scope and contact

This Policy applies to the website, free preview, paid benchmark reports, transactional emails, and related support.

• Privacy: privacy@jevbenchmark.app
• Product and payment issues: support@jevbenchmark.app
• Legal notices: legal@jevbenchmark.app

These addresses are planned and are not live until the domain and mailboxes are configured.

2. Information we process

Website and device information

We may process request time, requested page, coarse location derived from network information, browser/device category, referrer, security signals, and truncated or hashed identifiers needed for rate limiting and abuse prevention. We do not use this information for cross-site advertising.

Benchmark inputs

Your browser parses your CSV, JSON, or JSONL file. We do not store the original uploaded file as a file. We receive only selected fields needed to run the benchmark. Expected labels, buyer email, filename, order ID, and our internal row ID are not sent to the model provider.

Orders, support, and email

Creem provides limited order status and buyer email. We do not receive full card details. Transactional email contains status and report links, not datasets or full reports. Do not send benchmark content to support.

3. Information you must not submit

Do not submit passwords, API keys, private keys, payment-card data, financial credentials, government identifiers, precise location, medical or health data, genetic or biometric data, child data, or other sensitive or regulated personal information.

Do not use the service for employment, credit, insurance, medical, education, housing, law-enforcement, immigration, or other high-impact eligibility decisions. Automated warnings reduce risk but cannot identify every issue.

4. How we use information

• Provide sample, preview, report, exports, deletion, rerun, and refund flows.
• Authenticate report access and prevent unauthorized use.
• Operate, secure, debug, and improve the service.
• Measure aggregate acquisition and funnel performance.
• Process orders, entitlements, refunds, taxes, and disputes.
• Comply with law and enforce our Terms.

5. AI processing

Selected state/input text and configured criteria pass through OpenRouter to TypeSafe AI's Jev model. Expected labels, buyer email, filename, Creem order ID, and internal row IDs are not sent.

The production route requires a zero-data-retention TypeSafe endpoint, denies provider data collection, and passed a production canary before free live uploads were enabled. Never submit sensitive or regulated data.

6. Service providers and disclosures

• Cloudflare for delivery, compute, queues, encrypted objects, metadata, security, and logs.
• OpenRouter for model routing and usage accounting.
• TypeSafe AI for Jev inference.
• Creem as Merchant of Record.
• Resend for transactional email.
• Plausible for aggregate cookie-free analytics.

We do not sell personal information or share it for cross-context behavioral advertising.

7. Retention and deletion

• Original file: browser memory only; not stored as an original file.
• Encrypted temporary job data: deleted after completion/refund and always within 24 hours.
• Queue messages: job identifier only; planned one-hour retention.
• Encrypted report: available up to seven days; lifecycle deletion may take another 24 hours.
• Job metadata: 30 days, then deleted or irreversibly aggregated.
• Order linkage: up to 180 days unless law or an active dispute requires longer.
• Rate-limit hashes and redacted operational logs: up to 30 days.

8. International transfers

We operate from China and use providers that may process information in multiple jurisdictions. Where required, providers may rely on contractual safeguards such as standard contractual clauses.

9. Security

Required safeguards include transport encryption, application-layer encryption for temporary objects, high-entropy report links, least-privilege credentials, redacted logs, provider allowlists, automated expiration, and deletion tests. No system can guarantee absolute security.

10. Your choices and rights

Depending on location, you may have rights to access, correct, delete, restrict, object, port information, withdraw consent, or complain to a regulator. Email privacy@jevbenchmark.app with the order email and order or job identifier; do not attach the dataset.

11. Children

The service is not for anyone under 18, and we do not knowingly collect personal information from children.

12. Cookies and browser storage

We use strictly necessary security/session storage and Plausible's cookie-free aggregate analytics. Plausible is configured for aggregate site measurement and does not set analytics cookies. Non-essential trackers require an updated policy and consent controls before activation.

13. Changes

We may update this Policy when the product, providers, or law changes. Material changes do not retroactively reduce rights for information already collected.

14. Independent product notice

Jev Benchmark Lab is an independent third-party tool. It is not an official TypeSafe AI or OpenRouter product and is not sponsored, certified, or endorsed by them.