Privacy Policy

1. Introduction

Senority B.V., trading as Evaluetor ("we," "us," or "our"), is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and share information when you use the Evaluetor platform and related services.

We comply with the General Data Protection Regulation (GDPR), the Dutch Implementation Act (UAVG), and other applicable data protection laws. Senority B.V., registered in Rotterdam, The Netherlands, acts as the data controller for the personal data processed through our services.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, company name, job title, and password when you create an account.
• Contract Data: Documents and contracts you upload to the platform for analysis, including extracted metadata, clauses, obligations, and other structured data derived from those documents.
• Usage Data: Information about how you interact with our platform, including features used, pages visited, search queries, and session duration.
• Cookies and Technical Data: Browser type, device information, IP address, and other technical identifiers collected through cookies and similar technologies.

3. How We Use Information

We use your information for the following purposes:

• Service Delivery: To provide, maintain, and improve the Evaluetor platform, including contract analysis, obligation tracking, SLA monitoring, and relationship governance features.
• AI Processing: To extract intelligence from your contracts using our AI agents, including metadata extraction, clause identification, risk detection, and obligation tracking.
• Analytics: To understand usage patterns, improve our services, and develop new features. We use aggregated, anonymized data for this purpose.
• Communication: To send you service updates, security alerts, and, with your consent, product news and educational content.

4. Data Processing for AI

Evaluetor uses artificial intelligence to extract and analyze information from your contracts. When you upload a document, our AI agents process its contents to identify clauses, obligations, risks, renewal terms, and other contractual intelligence.

Your contract data is processed solely to provide you with the Evaluetor service. We do not use your contracts or extracted data to train third-party AI models. Our AI processing is performed within our secure infrastructure, and your data is isolated from other customers' data at all times.

5. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Encryption at Rest: All stored data is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your browser and our servers is protected with TLS 1.2 or higher.
• Data Residency: We offer data residency options in the European Union and the United States. Your data is stored in the region you select during account setup and is not transferred outside that region without your explicit consent.
• Access Controls: We implement role-based access controls, multi-factor authentication, and comprehensive audit logging.

6. Data Sharing

We do not sell your personal data. We share information only in the following limited circumstances:

• Service Providers: We work with trusted third-party providers who assist in delivering our services (e.g., cloud hosting, AI processing). These providers are bound by data processing agreements and may only use your data to provide services on our behalf.
• Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you before your data becomes subject to a different privacy policy.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances.
• Right to Object: You may object to the processing of your personal data for specific purposes, including direct marketing.

To exercise any of these rights, please contact us at privacy@evaluetor.com. We will respond within 30 days.

8. Data Retention

We retain your contract data and account information for as long as your account is active and as needed to provide you with our services. Upon account closure, we will delete your contract data and extracted intelligence within 30 days. We may retain anonymized, aggregated data that can no longer be linked to you for analytical purposes.

Certain information may be retained for longer periods where required by law, including financial records, audit logs, and data necessary to comply with legal obligations or resolve disputes.

9. Cookies

We use cookies and similar technologies as follows:

• Essential Cookies: Required for the platform to function. These cannot be disabled and include session management and security tokens.
• Analytics Cookies (Optional): Used to understand how users interact with our platform. These are only activated with your consent and can be disabled at any time through your account settings.
• No Advertising Cookies: We do not use advertising cookies or share data with advertising networks.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

• Email: privacy@evaluetor.com
• Company: Senority B.V.
• Address: Rotterdam, The Netherlands

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.