Compliance
Privacy
How Evalgist BV processes personal data when you use evalgist.ai, create a shared Evalgist account, or register interest in Evalgist products. Product-specific notices cover customer documents and product workflows.
Data controller
Evalgist BV (company number 1037.260.590), with registered seat at Bosstraat 13, 9820 Merelbeke, Belgium, is the data controller for personal data processed via this site. For privacy questions or to exercise your rights, contact privacy@evalgist.ai.
What we collect
When you submit the waitlist form on evalgist.ai, we collect the email address you provide. When you create a shared Evalgist account, we process account identifiers, authentication data, session metadata, and basic profile details through Clerk. The site may also collect cookieless pageview and waitlist-funnel events through PostHog EU cloud when analytics is configured. Sentry EU is used for error monitoring, with Session Replay disabled. These events do not use analytics cookies, localStorage, sessionStorage, persistent anonymous visitor IDs, session recording, heatmaps, advertising pixels, or autocapture. We do not collect advertising identifiers, resume or exam content, candidate names, qualification text, or extracted document body text on the public site.
Legal basis for waitlist email: your consent (Article 6(1)(a) GDPR), provided when you submit the form. Legal basis for account creation, authentication, and account-security processing: performance of the account terms and our legitimate interest in securing access to Evalgist products. Legal basis for privacy-preserving, non-persistent product analytics: our legitimate interest in measuring whether the site works (Article 6(1)(f) GDPR).
How we use it
We use your email address to notify you when products launch and to send necessary account, product, security, and compliance announcements. Account data is used to authenticate you across Evalgist products and to apply product-specific access controls. We do not sell or share waitlist addresses for unrelated purposes.
How long we keep it
Waitlist addresses are kept until you withdraw consent or until the launch communications you registered for have completed, whichever is later. We delete the address within 30 days of a withdrawal request.
Product document content is not processed by evalgist.ai during the current waitlist period. Product apps use a stricter baseline: AI providers do not keep customer documents, extracted text is deleted after analysis, and original uploaded files are deleted after a 14-day recovery window. Product-specific privacy notices describe retained results, evidence, notes, exports, and deletion controls.
Subprocessors
We rely on a small number of service providers to operate the site and store waitlist contacts. The current list, including legal entities, locations, and data residency, is published at /subprocessors. Material changes are communicated to active customers at least 30 days in advance.
Transfers outside the EEA
Some subprocessors are headquartered in the United States. Where a transfer occurs, we rely on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) with the processor, supplemented by the technical and organisational measures the processor documents publicly.
Your rights
Under the GDPR you have the right to access, rectify, erase, and port your data, to restrict or object to processing, and to withdraw consent at any time. To exercise any right, email privacy@evalgist.ai. We respond within one month.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be.
Updates
We will reflect material changes in the timestamp below. For active customers, we will notify in advance of changes that affect them.
Questions? Email privacy@evalgist.ai.
Last updated 2026-05-20