Privacy Policy

Last updated: March 27, 2026

1. Introduction

Evalingo Inc. ("Evalingo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered language assessment platform and related services.

By using Evalingo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, company name, and password when you create an account.
  • Assessment Data: Audio recordings of spoken responses and written text responses submitted during assessments.
  • Candidate Information: Names and email addresses of candidates taking assessments.
  • Payment and Billing Information: When you subscribe to a plan or purchase credits, payment details (such as credit card number, billing address, and transaction amounts) are collected and processed directly by our payment processor, Stripe, Inc. Evalingo does not store your full credit card number. We do receive and store limited billing information from Stripe, including your subscription status, plan tier, transaction history, and the last four digits of your card for display purposes.

2.2 Information Collected Automatically

  • Usage Data: Information about how you interact with our platform, including pages visited and features used.
  • Device Information: Browser type, operating system, and device identifiers.
  • Log Data: IP addresses, access times, and referring URLs.

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our language assessment services
  • Process and score assessments using our AI technology
  • Generate assessment reports and CEFR proficiency scores
  • Communicate with you about your account and our services
  • Ensure the security and integrity of our platform
  • Comply with legal obligations
  • Improve our AI models and assessment accuracy (using anonymized and aggregated data)

4. Data Retention

We retain data for the minimum period necessary to fulfill the purposes outlined in this policy. Typically:

  • Assessment recordings and responses: 90 days after assessment completion.
  • Assessment results and scores: As long as your account remains active.
  • Account information: Until you request deletion.
  • Billing and transaction records: For the duration of your account and for up to 7 years after account closure, as required for tax, accounting, and legal compliance purposes.

Organizations may request early deletion of candidate data in accordance with their data retention policies. Note that certain billing records may be retained beyond account deletion as required by law.

5. Data Sharing and Disclosure

We may share your information with:

  • Payment Processor: We use Stripe, Inc. to process payments. When you make a purchase, your payment information is transmitted directly to Stripe under their Privacy Policy. Stripe is PCI DSS Level 1 certified, the highest level of payment security certification.
  • Service Providers: Third-party vendors who assist in operating our platform, including cloud hosting (Vercel, Neon), AI processing (Google, OpenAI), and email delivery (Resend). These providers only receive data necessary to perform their services and are bound by contractual data protection obligations.
  • Employer Organizations: Assessment results are shared with the organization that requested the assessment.
  • Legal Requirements: When required by law, subpoena, or legal process, or to protect our rights, safety, or property.

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit and at rest
  • Secure cloud infrastructure with access controls
  • Regular security assessments and monitoring
  • Employee training on data protection

7. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent

To exercise these rights, please contact us at privacy@evalingo.ai.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable laws.

9. Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Evalingo Inc.
Email: privacy@evalingo.ai