Privacy Policy

The controller for personal data described in this policy is TODO_FILL, registered at TODO_FILL, company number TODO_FILL.

Data protection contact: TODO_FILL.

For any question about this policy, or to make a request about your data, write to our contact address.

• Account data at signup. Your work email address. If you sign in with Google, Microsoft or Apple, we receive the basic profile fields those providers return — typically name, email address and a provider account identifier. We do not receive your password.
• Product usage data. Records of the queries submitted to the model panel, the responses returned by each model, disagreement flags, the resolution, and the identity of the reviewer who acted on a held decision.
• Technical data. IP address, browser and device information, and log data generated when you use the service.
• Analytics data. Only if you accept analytics cookies. Analytics tags do not load before you accept.

Where you submit candidate or applicant information to the service, your organisation is the controller of that data and Evolyxis acts as processor under the terms of our data processing agreement.

• Contract. Creating and operating your account, authenticating you, and delivering the service.
• Legitimate interests. Securing the service, preventing abuse, maintaining decision records, and responding to enquiries. We balance these against your interests and rights.
• Consent. Analytics cookies and any marketing email. You can withdraw consent at any time.
• Legal obligation. Where we must retain records or respond to a lawful request.

• Authentication. Account creation and sign-in are handled by Supabase, which stores your account record and session credentials on our behalf.
• Model providers. Queries submitted to the panel are transmitted to independent third-party AI model providers for processing. Content you submit therefore leaves our infrastructure and is processed under those providers' terms. We do not control their internal processing beyond the contractual and API-level settings available to us.
• Hosting and infrastructure. Our application and databases are hosted with cloud infrastructure providers acting as processors.
• Analytics. Google Tag Manager and Google Analytics, loaded only after consent.

Some of these providers operate outside the UK and EEA. Where personal data is transferred, we rely on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses together with the relevant provider's transfer terms.

We keep account data for as long as your account is active, and for a limited period after closure to handle billing, dispute and legal obligations.

Decision records — including the query put to the panel, each model's response, the divergence and the resolution — are retained deliberately, because their purpose is to serve as an audit trail. Retention periods for those records are agreed with your organisation in the applicable contract and data processing agreement.

We do not claim zero data retention. Data submitted to third-party model providers is subject to those providers' own retention behaviour, which we describe on request rather than guarantee.

Under the UK GDPR and EU GDPR you have the right to access your personal data, to have inaccurate data corrected, to request erasure, to restrict or object to processing, to data portability, and to withdraw consent where we rely on it.

To exercise any of these rights, contact our contact address. We respond within one month. If you are dissatisfied, you may complain to the UK Information Commissioner's Office or to your local EU supervisory authority.

If your personal data was submitted to Evolyxis by an employer or recruiter, please direct your request to that organisation as controller; we will support them in responding.

We apply access controls, encryption in transit, and least-privilege access to production systems. Evolyxis does not currently hold any third-party security certification, and this policy makes no such claim.

Strictly necessary cookies keep you signed in and remember your cookie choice. Analytics cookies load only if you accept them in the consent banner. You can change your choice by clearing site data in your browser.

We will update this policy as the product develops and will change the "last updated" date above. Material changes will be notified to account holders by email.