Privacy Policy
Effective date: November 3, 2026 · Version: 2026-11
This policy explains how ValiBench LLC ("ValiBench," "we") handles personal information on valibench.com and in the ValiBench application. We do not sell personal information, do not use it for targeted advertising, and do not use customer data to train AI models.
1. Our role
For website visitors, pricing and document requests, and our own business records, ValiBench decides how information is used. For information an agency puts into the application, the agency is in charge and ValiBench processes it on the agency's behalf under its Customer Agreement. Questions about an agency's data should go to that agency first.
2. What we collect
- From the website: what you type in a pricing, demo or Trust Center request (name, work email, company, role, systems or documents of interest, message) and basic technical data such as IP address and browser type, which our hosting provider records to deliver and protect the site.
- From the application: agency staff names, work email addresses, roles, departments and sign-in records; testing content such as scripts, results, comments and screenshots; release notes; vendor SOC reports, agreements and related documents; audit log entries.
- Billing: billing contact details and payment records. Card and bank details are collected and stored by our payment processor, Stripe; ValiBench does not store full card or bank account numbers.
- Support: emails to support@, info@ or [email protected].
3. What should not be in ValiBench
ValiBench is built for testing with fictional records. Agencies agree not to upload real client information, such as consumer nonpublic personal information, health information, payment card data, Social Security, driver's license or bank account numbers. The screenshot privacy check covers personal and health details before a screenshot is saved, but it is an aid, not a guarantee.
4. How we use information
To provide, secure and support the service; to send invitations, notices and reminders; to bill; to answer requests; to improve ValiBench using usage data and aggregated or de-identified information; and to meet legal obligations. We do not add people who contact us to a mailing list.
5. AI features
Some features use AI, including Ask Vali, release note organizing and document reading in ValiSR and ValiCR. Content sent to these features is processed by our AI provider only to produce the result. We do not use agency data to train AI models, and our provider's terms do not permit it to train on that data. AI output is reviewed by people, who make every decision.
6. Who we share it with
We share personal information only with service providers that help us run ValiBench, under contracts that limit their use of it: cloud hosting, website hosting and security, email delivery, payments, business email and AI processing. A current list of these providers is published in the Trust Center. We may also share information when the law requires, to protect rights and safety, or in a merger or sale of the business, subject to this policy. We do not sell or share personal information for cross-context behavioral advertising.
7. How long we keep it
| Information | Kept for |
|---|---|
| Screenshots and vendor documents | 3 years after upload, then deleted automatically |
| Other agency data in the application | The subscription term plus 30 days for export, then deleted (backups roll off on their normal cycle) |
| Pricing, demo and document requests | 24 months after the last contact |
| Billing and tax records | As long as tax and accounting law requires (generally 7 years) |
| Security and audit logs | Up to 12 months, or longer during an investigation |
8. Security
Data is hosted in the United States, encrypted in transit and at rest, separated by agency, and protected by role-based access, two-step sign-in and audit logging. ValiBench is designed around SOC 2 trust services criteria. No system is perfectly secure; we will notify affected agencies of a confirmed incident as our agreements require. Report security concerns to [email protected]. More detail is in our Trust Center.
9. Your choices and rights
Depending on where you live, you may have the right to know, access, correct, delete or get a copy of your personal information, to opt out of targeted advertising, sale or profiling (we do none of these), and to appeal our decision. We honor these requests for everyone, wherever they live. Send requests to [email protected]. We will confirm receipt within 10 business days and respond within 45 days. If we decline, you may appeal by replying to our decision, and we will answer the appeal within 60 days. If your information is in an agency's account, we may refer you to that agency. We will not treat you differently for using these rights.
10. Cookies and similar technology
The website and application use only what they need to work: a sign-in cookie for the application and browser storage to remember, for example, whether you have finished the product tour. We do not use advertising or analytics cookies, and the website loads no third-party trackers or fonts.
11. Children
ValiBench is for businesses. We do not knowingly collect information from anyone under 16 and will delete it if we learn we have.
12. Where data is stored
ValiBench stores data in the United States. If you use ValiBench from outside the U.S., your information will be transferred to and processed in the U.S.
13. Changes
We will post any change here with a new effective date, and notify agency administrators by email of material changes.
14. Contact
ValiBench LLC, Virginia, United States · [email protected] · Security: [email protected]
Questions: [email protected] · ValiBench LLC, Virginia, United States