Privacy Policy

• Account info: your email address and a bcrypt hash of your password (we never store your password in plain text).
• Tenant data: the gray-zone samples you submit — query text, candidate answer text, and your correctness label — via POST /v1/feedback, the Health Check tool, or the fine-tuning flow.
• Resulting model artifacts: any verifier checkpoint fine-tuned from your data.
• Standard request metadata (IP address, timestamps) in our infrastructure and reverse-proxy logs, used for rate limiting and abuse prevention.

Your gray-zone samples train and evaluate only your own tenant's verifier. Every table in our database (feedback labels, fine-tune jobs, model versions) is scoped by tenant ID, and every API request is authenticated to a single tenant — your data is never used to train or evaluate another tenant's model, and we don't pool customer data across tenants for any other purpose.

• All traffic to the API and dashboard is encrypted in transit (HTTPS/TLS).
• Passwords are hashed with bcrypt; we cannot recover your plaintext password.
• Tenant API keys are stored as a one-way hash — if you lose a key, we can revoke it but not retrieve it.
• Dashboard sessions are short-lived signed tokens (24 hours) rather than persistent cookies.

We retain account and gray-zone data for as long as your account is active. To request deletion of your account and associated data, contact us at the address below — during beta this is a manual process while we build self-serve deletion into the dashboard.

We don't sell your data or share it with third parties for marketing. The service runs on infrastructure we operate directly; we don't currently route your query/answer content through any third-party LLM or analytics API.

Questions about this policy or a data deletion request: privacy@cacheverifier.com