Privacy Policy

1. Who We Are

Orion is operated by PromptEval ("we", "us", "our"). This policy explains how we collect, use, and protect your information when you use our voice assistant service at bot.prompteval.ai.

2. Information We Collect

Account information

Your email address, used for authentication via one-time verification codes. We do not collect passwords.

Voice and conversation data

When you use the Service, your audio is streamed directly from your browser to the AI model provider (currently OpenAI) via WebRTC. Your audio does not pass through our servers. However, we receive and store conversation transcripts, session events, and tool call logs from the AI model for the purpose of providing the Service and improving your experience.

Usage data

Session duration, timestamps, usage quotas, and basic analytics data (via privacy-respecting, cookie-free analytics). We do not use third-party tracking cookies.

3. How We Use Your Information

• To authenticate you and manage your account
• To provide the real-time voice assistant experience
• To enforce usage limits and prevent abuse
• To store conversation transcripts and session history
• To improve the Service

4. Third-Party Data Sharing

Your data may be processed by the following third parties:

• OpenAI — receives your audio stream directly via WebRTC for real-time AI processing. Subject to OpenAI's Privacy Policy.
• Hosting and infrastructure providers — to run our backend services and store data.

We do not sell your personal information to third parties.

5. Data Retention

We retain your account data and conversation transcripts for as long as your account is active. You may request deletion of your data at any time by contacting us. Session data associated with usage quotas may be retained in aggregate, anonymized form.

6. Data Security

We use industry-standard measures to protect your data, including encrypted connections (TLS) for all data in transit and secure storage for data at rest. However, no method of transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Request a portable copy of your data

To exercise these rights, contact us at the email below.

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the revised policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at [email protected].