Privacy Policy

1. Information We Collect

Account Information

When creating an account, we collect:

• Email address
• Password (stored securely using industry-standard hashing)
• First and last name
• Username (for public profile, if enabled)
• Profile photo (optional)
• Work experience and professional background (optional)

Evaluation Data

During assessments, our platform collects:

• Responses during AI evaluation conversations
• Assessment scores across competency categories
• AI-generated feedback and learning recommendations
• Timestamps and session metadata

Payment Information

When purchasing credits, we collect:

• Transaction records (purchase date, amount, credits purchased)
• Payment method details processed and stored securely by Stripe; full credit card numbers are not stored

Technical Information

Our platform automatically collects IP address, browser type, device information, and usage patterns to improve services and maintain security.

2. How We Use Your Information

Your information is used to:

• Provide services: Conduct AI fluency evaluations, generate scores, create personalized learning plans
• Process transactions: Manage credit purchases, subscriptions, and refunds
• Improve platform: Analyze usage patterns to enhance AI models and user experience
• Communicate: Send account notifications, respond to inquiries, provide customer support
• Maintain security: Detect and prevent fraud, abuse, and unauthorized access
• Enable public profiles: Display information on leaderboards and public profile pages (opt-in only)

3. Data Storage and Security

We employ multiple layers of protection:

• Infrastructure: Your data is stored securely using Supabase, which provides enterprise-grade PostgreSQL databases with encryption at rest and in transit
• Authentication: Secure protocols with encrypted password storage and optional multi-factor authentication
• Access controls: Row Level Security (RLS) policies ensure users access only their own data
• Regular audits: We conduct regular security reviews and maintain compliance with industry best practices

4. Third-Party Services

Stripe (Payment Processing)

Stripe securely processes payments as a PCI-DSS compliant service. We do not store your complete card information. Stripe's Privacy Policy

AI Providers (Evaluation Processing)

AI language models from Anthropic (Claude) and Google (Gemini) conduct evaluations and generate feedback. Evaluation conversations are processed by these services.

• Anthropic Privacy Policy
• Google Privacy Policy

Supabase (Database and Authentication)

Supabase handles database storage and user authentication. Supabase's Privacy Policy

5. Your Rights

You have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information through your account settings or by contacting support
• Deletion: Request deletion of your account and associated data (some data may be retained for legal or business purposes)
• Data portability: Request an export of your evaluation data in a machine-readable format
• Opt-out: Withdraw consent for optional data processing, such as marketing communications

To exercise these rights, contact us at the email address listed in the Contact Information section below.

6. Profile Visibility

AI Baseline offers optional public profiles with user control:

• Private (default): Your profile, scores, and evaluation history are visible only to you
• Public: Your profile page is accessible via your username URL; you may appear on the public leaderboard

You can change your profile visibility at any time in your account settings. Making your profile private immediately removes you from the leaderboard and makes your profile inaccessible to others.

7. Cookies and Tracking

We use minimal cookies necessary for platform operation:

• Essential cookies: Required for authentication and session maintenance
• No advertising cookies: We do not use third-party advertising or tracking cookies
• No cross-site tracking: We do not share your browsing data with advertising networks

8. Children's Privacy

AI Baseline is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will promptly delete that information.

9. Data Retention

We retain your personal data while your account is active or as needed to provide our services:

• Account data: Retained until you request account deletion
• Evaluation data: Retained for historical score tracking and progress visualization
• Payment records: Retained as required by financial regulations and for audit purposes

After account deletion, anonymized or aggregated data may be retained for analytics and service improvement.

10. International Data Transfers

AI Baseline is operated from the United States. Your data may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using AI Baseline, you consent to such transfers. We maintain appropriate safeguards to protect your data in compliance with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be posted on this page with an updated “Last updated” date. Continued use of AI Baseline after changes become effective constitutes acceptance of the revised policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

We will respond to all inquiries within 30 days.