Privacy Policy

1. Introduction

PeerLM Inc. ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our LLM evaluation platform.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google.

Evaluation Data

We store the evaluation configurations you create (personas, topics, criteria, model selections), generated model responses, evaluation scores, and aggregated results. This data is necessary to provide the Service.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, eval credits consumed, and error logs. We use Sentry for error tracking and Axiom for structured logging.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or full payment details. We receive and store your subscription status, plan type, and billing period from Stripe.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process evaluation runs and generate results
• Manage your account and subscription
• Send transactional emails (run completions, billing receipts)
• Monitor and prevent abuse or security incidents
• Generate aggregated, anonymized analytics to improve the platform

4. Data Sharing

We do not sell your personal information. We share data only with:

• LLM Providers (OpenRouter, Groq): We send your evaluation prompts to generate model responses. Responses are governed by each provider's data policies.
• Stripe: For payment processing.
• AWS: Our infrastructure provider. Data is stored in the us-east-1 region.
• Sentry / Axiom: For error tracking and logging. No evaluation content is sent to these services.
• Resend: For transactional email delivery.

5. Data Retention

Evaluation data (responses, scores, reports) is retained for as long as your account is active. When you delete a suite or run, it is soft-deleted and retained for 30 days before permanent removal. Account data is deleted within 30 days of account closure, except where retention is required by law.

6. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.2+), encryption at rest for sensitive data (AES-256), SHA-256 hashed API keys, network isolation via VPC security groups, and audit logging on key actions. However, no method of transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your evaluation data (CSV/JSON)
• Object to certain data processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@peerlm.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Our analytics are server-side only.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

11. Contact

For privacy-related inquiries, contact us at privacy@peerlm.com.