Compliance

Privacy

How Evalgist BV processes personal data when you use evalgist.ai. This notice is written under the EU General Data Protection Regulation (Regulation 2016/679) and Belgian implementing law.

Data controller

Evalgist BV (company number 1037.260.590), with registered seat at Bosstraat 13, 9820 Merelbeke, Belgium, is the data controller for personal data processed via this site. For privacy questions or to exercise your rights, contact privacy@evalgist.ai.

What we collect

When you submit the waitlist form on evalgist.ai, we collect the email address you provide. The site may also collect pageview and waitlist-funnel events through PostHog EU cloud when analytics is configured. We do not collect advertising identifiers, CV or exam content, candidate names, qualification text, or extracted document body text on this site.

Legal basis for waitlist email: your consent (Article 6(1)(a) GDPR), provided when you submit the form. Legal basis for privacy-preserving product analytics: our legitimate interest in measuring whether the site works (Article 6(1)(f) GDPR).

How we use it

We use your email address to notify you when products launch and to send any necessary product or compliance announcements related to the waitlist. We do not sell or share waitlist addresses for unrelated purposes.

How long we keep it

Waitlist addresses are kept until you withdraw consent or until the launch communications you registered for have completed, whichever is later. We delete the address within 30 days of a withdrawal request.

Product document content is not processed by evalgist.ai during the current waitlist period. Product apps will use a stricter baseline: AI providers do not keep customer documents, extracted text is deleted after analysis, and original uploaded files are deleted after a 14-day recovery window. Only evidence-backed results are retained until the customer deletes them.

Subprocessors

We rely on a small number of service providers to operate the site and store waitlist contacts. The current list, including legal entities, locations, and data residency, is published at /subprocessors. Material changes are communicated to active customers at least 30 days in advance.

Transfers outside the EEA

Some subprocessors are headquartered in the United States. Where a transfer occurs, we rely on the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914) with the processor, supplemented by the technical and organisational measures the processor documents publicly.

Your rights

Under the GDPR you have the right to access, rectify, erase, and port your data, to restrict or object to processing, and to withdraw consent at any time. To exercise any right, email privacy@evalgist.ai. We respond within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be.

Updates

We will reflect material changes in the timestamp below. For active customers, we will notify in advance of changes that affect them.

Questions? Email privacy@evalgist.ai.

Last updated 2026-05-03