1. Introduction
The Great Commission Benchmark ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform (the "Service").
By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this policy, please do not use the Service.
We reserve the right to modify this Privacy Policy at any time. Material changes will be communicated through the Service or via email. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.
2. Information We Collect
2.1 Information You Provide to Us
We collect information that you voluntarily provide when you:
- Create an account: Email address (required), name (optional), and any other information you choose to provide
- Run benchmark tests: Your test selections, model preferences, and any comments or notes you submit
- Make payments: Payment information is processed through Stripe (see Section 4.2)
- Contact us: Information you provide when contacting us for support or inquiries
- Participate in moderation: Information you provide if you serve as a moderator or reviewer
2.2 Information Automatically Collected
When you use the Service, we may automatically collect:
- Usage data: Information about how you interact with the Service, including pages visited, features used, and time spent
- Device information: Browser type, operating system, device identifiers, and IP address
- Log data: Server logs, error reports, and diagnostic information
- Cookies and tracking technologies: See Section 6 for details
2.3 Test Results and Model Responses
When you run benchmark tests, we collect:
- Test results: Scores, responses, and performance metrics
- Model responses: Full responses generated by AI models during testing
- Test metadata: Timestamps, model versions, test configurations, and related information
This data is essential for:
- Publishing results to public leaderboards
- Verifying test accuracy and integrity
- Enabling research and analysis
- Maintaining historical records
3. How We Use Your Information
We use the information we collect to:
3.1 Service Operation
- Provide, maintain, and improve the Service
- Process your test requests and payments
- Authenticate your account and manage access
- Communicate with you about the Service, including updates and notifications
- Respond to your inquiries and provide customer support
3.2 Benchmark Publication
- Publish aggregate test results to public leaderboards
- Display your contributions (if you choose to be credited)
- Maintain historical records of benchmark performance
- Enable comparison and analysis of model performance
3.3 Research and Analysis
- Conduct research on AI model performance
- Analyze trends and patterns in benchmark data
- Improve our testing methodology and question sets
- Generate insights and reports (using anonymized data where appropriate)
3.4 Legal and Security
- Comply with legal obligations
- Enforce our Terms of Service and Tester Agreement
- Detect, prevent, and address fraud, security issues, or violations
- Protect the rights, property, or safety of the Service, users, or others
4. How We Share Your Information
4.1 Public Sharing
We publish the following information publicly on our leaderboards:
- Aggregate test results: Scores, performance metrics, and rankings
- Model information: Model names, versions, and configurations used
- Test metadata: Timestamps and general test parameters
- Contributor credits: Your name (if you choose to be credited)
Note: Once results are published to the leaderboard, they become part of the public record and cannot be deleted, even if you request account deletion. This ensures the integrity and historical accuracy of benchmark data.
4.2 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Stripe: Payment processing (see Stripe's Privacy Policy)
- OpenRouter or model providers: To execute benchmark tests against AI models
- Hosting and infrastructure providers: To operate and maintain the Service
- Analytics providers: To understand usage patterns and improve the Service
These service providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.3 Researchers
We may share anonymized or aggregated data with researchers upon request for legitimate research purposes. Personal identifying information will be removed before sharing.
4.4 Model Providers
We may share test results with the providers of the AI models being tested. This includes:
- Their own model's results for transparency and verification
- Aggregate comparisons (without identifying individual testers)
4.5 Moderators
We share full test data with authorized moderators who verify test accuracy and integrity. Moderators are bound by confidentiality agreements.
4.6 Legal Requirements
We may disclose your information if required by law or in response to:
- Valid legal process (subpoenas, court orders, warrants)
- Government requests or investigations
- Protection of rights, property, or safety
- Enforcement of our Terms of Service or other agreements
4.7 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.
5. Data Retention
5.1 Test Data
Test data is retained indefinitely to maintain historical records and ensure the integrity of benchmark results. This includes:
- Test results and scores
- Model responses
- Published leaderboard entries
Once published, test results cannot be deleted as they are part of the public record.
5.2 User Account Data
User account data (email, profile information, preferences) is retained until you request deletion, subject to the limitations in Section 5.1 regarding published results.
5.3 Payment Records
Payment records are retained as required by law and for accounting purposes. This information is shared with Stripe and may be subject to their retention policies.
5.4 Logs and Analytics
Server logs and analytics data are typically retained for a limited period (e.g., 12-24 months) unless required for security, legal, or operational purposes.
6. Cookies and Tracking Technologies
6.1 Cookies
We use cookies and similar tracking technologies to:
- Maintain your session and authentication state
- Remember your preferences and settings
- Analyze Service usage and performance
- Provide personalized features
6.2 Cookie Types
- Essential cookies: Required for the Service to function (cannot be disabled)
- Analytics cookies: Help us understand how the Service is used
- Preference cookies: Remember your settings and choices
6.3 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.
7. Data Security
We implement reasonable technical and organizational measures to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure storage of sensitive information
- Access controls and authentication
- Regular security assessments
- Monitoring for security threats
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Your Rights and Choices
8.1 Access and Correction
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Update your account information through your account settings
8.2 Deletion
You may request deletion of your account and personal information. However:
- Published test results cannot be deleted (see Section 4.1)
- We may retain certain information as required by law or for legitimate business purposes
- Payment records may be retained for accounting and legal compliance
8.3 Data Portability
You may request a copy of your personal information in a structured, machine-readable format, subject to applicable limitations.
8.4 Opt-Out
You may:
- Opt out of optional marketing communications (account-related communications may still be sent)
- Disable certain cookies through your browser settings
- Request that we stop processing your information for certain purposes (subject to legal and operational requirements)
8.5 Exercising Your Rights
To exercise any of these rights, please contact us using the information provided in Section 14.
9. Children's Privacy
The Service is not intended for individuals under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
The Service is operated from the United States. If you are located outside this jurisdiction, your information may be transferred to and processed in this jurisdiction or other countries where our service providers operate.
By using the Service, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.
10.1 European Users (GDPR)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Right to object: You may object to processing of your personal information for certain purposes
- Right to restriction: You may request restriction of processing in certain circumstances
- Right to lodge a complaint: You may file a complaint with your local data protection authority
We process your information based on:
- Consent: When you create an account and use the Service
- Contract performance: To provide the Service and process payments
- Legitimate interests: For research, security, and service improvement
- Legal obligations: To comply with applicable laws
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know: You may request information about the categories and specific pieces of personal information we collect
- Right to delete: You may request deletion of your personal information (subject to exceptions)
- Right to opt-out: You may opt out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination: We will not discriminate against you for exercising your privacy rights
To exercise these rights, please contact us using the information provided in Section 14.
12. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on the Service
- Sending an email notification (if you have an account)
- Updating the "Last Updated" date at the top of this policy
Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [email protected]
15. Acknowledgment
BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY AND CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN.