Who is responsible
Rate AI Agent (rateaiagent.com) is run by [Company legal name], [registered address], which is responsible for the personal data described here. Contact us about privacy at [Contact email].
The short version
- We collect only what you type into the site, plus what's needed to sign you in.
- There is no analytics, advertising or tracking code on the site, and we don't sell personal data.
- The only cookies are the sign-in session cookies needed to keep you logged in.
- Payments go through Stripe. We never see or store card details.
What we collect and why
Account
What: Your email address, to send one-time sign-in links. A user ID, an optional display name and your role (user, reviewer or admin) are stored with it.
Why: To let you sign in, track your submissions and requests, and keep reviewers from acting on their own work.
Listing submissions
What: The agent details you enter (name, description, organisation, links, models, tools, pricing) and a contact email.
Why: To review and publish the listing. The agent details are published once approved; the contact email is never published.
Evaluation requests
What: Your name and email, the agent name, version and link, the models to test, your instructions for running the agent, any notes, and your agreement that results are published.
Why: To check whether we can run the agent, send you a quote and payment link, run the evaluation, and keep you updated. Reviewers' status notes are visible to you on your submissions page.
Evaluation runs
What: For runs we perform: the agent's diffs, transcripts, tool calls, test output, token usage and cost, plus the name of the publisher that requested and funded the run.
Why: To publish the result, share the evidence with the publisher, and audit disputed results. The publisher's name is shown on the run; your personal email is not.
Public agent data
What: Public information about agents from their websites and public GitHub repositories (stars, licence, latest release, last push).
Why: Shown as clearly labelled context. It never feeds a score. This is data about software projects, not about individuals.
Like most websites, our hosting provider records basic request logs (such as IP address, browser and the page requested) to run and secure the service. [Confirm what the hosting provider logs and for how long.]
[Legal basis for each use, if GDPR or similar laws apply, to be added after legal review.]
Cookies
When you sign in, our authentication provider sets cookies that hold your session. They are strictly necessary to keep you signed in and are not used for tracking. If you never request a sign-in link, none are set. We don't use analytics, advertising or third-party tracking cookies.
Payments
If you accept a quote, we email you a Stripe Payment Link. You pay on Stripe's own page, and Stripe processes your card details under its own privacy policy. We receive confirmation of the payment and the details Stripe shares with merchants (such as your name, email and amount paid), but never your full card number.
Who processes data for us
We use these service providers. They process data on our behalf and only for running the service.
- Supabase: database and sign-in (accounts, submissions, evaluation requests). [Region.]
- [Hosting provider, e.g. Vercel]: hosts the website and its request logs.
- [Email provider, e.g. Resend]: sends sign-in links.
- Stripe: payments for evaluations.
- [Sandbox provider, e.g. E2B] and model API providers: run agents during an evaluation. They receive the agent and our benchmark tasks, not your account details.
- [Business email provider]: quotes and correspondence.
[Confirm this list before launch, and describe international transfers if data leaves your users' region.]
What is public
- Approved listings, labelled publisher-provided.
- Evaluation results, with their conditions and the name of the publisher that requested and funded each run.
- Never public: your email address, submission contact email, run instructions, private notes, or quotes.
How long we keep it
- Account, submission and request data: until you ask us to delete your account. [Set a retention period.]
- Deleting your account deletes your submissions and evaluation requests. Approved listings and published evaluation results stay on the site, because results are never removed; they don't contain your personal email.
- Payment records: as long as tax and accounting law requires. [Period.]
Your choices and rights
Email [Contact email] to see the personal data we hold about you, correct it, or delete your account. There is no self-service deletion yet, so we handle these requests by hand within [30] days. [Add the rights that apply under your jurisdiction's law, and how to complain to a data-protection authority.]
Children
The site is for software developers and businesses, and isn't aimed at children. [Minimum age.]
Changes
We'll update the date at the top when this policy changes. See also our terms of service.