Privacy Policy · alphabench

This Privacy Policy explains how alphabench collects, uses, discloses, and protects information in connection with our research assistant platform and related services.

1. Scope and controller

This policy applies to the websites, applications, and services we operate. Where applicable data protection laws require identifying a data controller, alphabench is the controller for personal data we collect and process, unless we act as a processor on behalf of a customer.

2. Information we collect

Account information: name, email address, authentication identifiers, organization and role
Workspace content: prompts, messages, uploaded files, datasets, model parameters, generated artifacts, evaluation results
Usage and device data: browser type, OS, device identifiers, IP address, time zone, feature interactions, pages viewed, referrer URL
Logs and diagnostics: timestamps of tool invocations, error traces, performance metrics
Payment and billing data: handled by our payment provider; we store limited transactional metadata
Cookies and similar technologies: session cookies, preference cookies, analytics storage (see Cookies section)

We do not intentionally collect special categories of personal data. Please avoid submitting sensitive data unless strictly necessary and permitted by law and by your data licenses.

3. Sources of information

Directly from you when you create an account, use the platform, or contact support
Automatically from your devices when you access our services
From third‑party services you connect, subject to your permissions and their terms

4. How we use information and legal bases

Provide and operate the platform; maintain security and integrity (performance of a contract; legitimate interests)
Improve features, quality, and usability; develop new capabilities (legitimate interests)
Personalize experiences and recommendations where appropriate (consent; legitimate interests)
Communicate service updates and respond to inquiries (performance of a contract; legitimate interests)
Comply with legal obligations, enforce terms, and prevent abuse (legal obligation; legitimate interests)
Conduct analytics and measurement to understand performance (legitimate interests; consent where required)

Where consent is the legal basis, you may withdraw it at any time through provided settings or by contacting us.

5. How we share information

Service providers and subprocessors that support hosting, storage, analytics, communications, and payments under contracts that restrict use and require appropriate security
Integrations you enable, such as data vendors or broker/execution adapters, according to your configuration
Professional advisors, auditors, and insurers under confidentiality obligations
Legal and safety: to comply with law or protect rights, safety, and integrity of our users and the public
Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protections

We do not sell personal data. We do not share personal data for targeted advertising where prohibited by law.

6. International transfers

Information may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers. We evaluate local laws that may affect data and implement additional measures as needed.

7. Data retention

We retain information for as long as necessary to provide the services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by category (for example, security logs are kept for shorter windows than billing records). You may request deletion of certain data, subject to legal or contractual requirements.

8. Security

We employ administrative, technical, and physical safeguards appropriate to the nature of the data, including encryption in transit, access controls, monitoring, and vulnerability management. No system is perfectly secure; we work to reduce risk and promptly address issues.

9. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and request portability of your personal data. You also may have the right to lodge a complaint with a supervisory authority. For residents of certain US states, you may have rights to know, delete, correct, and opt out of certain sharing. We will verify your request and respond within applicable timelines. You may designate an authorized agent as allowed by law.

You can manage some settings directly in your account, including profile updates and communications preferences. You can also request workspace deletion or export of artifacts; note that deletion may not be immediate in backups.

10. Cookies and tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You can control cookies through your browser settings and applicable consent tools. Disabling certain cookies may limit functionality.

11. Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child provided us information, contact us and we will take appropriate steps.

12. Automated decision‑making

The platform automates research tasks and generates outputs based on your inputs and configured tools. We do not make decisions that produce legal or similarly significant effects solely by automated means without human involvement.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the service or by other reasonable means. Your continued use after changes take effect signifies acceptance.

14. Contact us

For privacy inquiries, requests, or complaints, please contact us using the information provided in the service. We will respond within applicable timelines.

If you have questions about this policy, please contact us.