Privacy Policy

• Account info: your email address and a bcrypt hash of your password (we never store your password in plain text).
• Tenant data: the gray-zone samples you submit — query text, candidate answer text, and your correctness label — via POST /v1/feedback, the Health Check tool, or the fine-tuning flow.
• Resulting model artifacts: any verifier checkpoint fine-tuned from your data.
• Standard request metadata (IP address, timestamps) in our infrastructure and reverse-proxy logs, used for rate limiting and abuse prevention.

Your gray-zone samples train and evaluate only your own tenant's verifier. Every table in our database (feedback labels, fine-tune jobs, model versions) is scoped by tenant ID, and every API request is authenticated to a single tenant — your data is never used to train or evaluate another tenant's model, and we don't pool customer data across tenants for any other purpose.

• All traffic to the API and dashboard is encrypted in transit (HTTPS/TLS).
• Passwords are hashed with bcrypt; we cannot recover your plaintext password.
• Tenant API keys are stored as a one-way hash — if you lose a key, we can revoke it but not retrieve it.
• Dashboard sessions are short-lived signed tokens (24 hours) rather than persistent cookies — the session token and your API key are held in your browser's local storage, not a cookie, and are cleared when you log out.

We retain account and gray-zone data for as long as your account is active. You can permanently delete your account and all associated data yourself from the dashboard's Danger Zone, or contact us at the address below.

We don't sell your data or share it with third parties for marketing. The service runs on infrastructure we operate directly; we don't route your query/answer content through any third-party LLM or analytics API. A small number of third-party services support the product's operation:

• Sentry — error tracking. Receives technical details when something breaks (stack traces, request metadata), so we can fix bugs; not used for analytics or advertising.
• Resend — transactional email. Receives your email address to deliver account emails like password resets, not your query/answer content.
• Antom (Alipay+) — payment processor for Managed subscriptions and top-ups. Receives billing/payment details for tenants on a paid plan; we don't receive or store your full card details ourselves.

CacheVerifier is operated by Hong Kong Chongde Industrial Limited, Unit C, 15/F, Hua Chiao Commercial Centre, 678 Nathan Road, Mong Kok, Kowloon, Hong Kong.

Questions about this policy or a data deletion request: [email protected]