Skip to content
Privacy notice · Last updated August 2026

Privacy

This notice covers visitors to bencheval.com, physicians who apply to our network, and buyer contacts. Plain language on purpose; your rights aren't improved by legalese.

VERSION 1.0 · AUGUST 2026 — material changes are emailed to network members; prior versions available on request.
01

Who we are

BenchEval is responsible for the personal data described in this notice. Contact: hello@bencheval.com.

02

What we collect

Site visitors: standard server logs (IP address, user agent, pages requested), kept briefly for security. No advertising trackers, no third-party analytics cookies.

Applicants: name, email, country of practice, specialty, licensing authority and licence or registration number, years in practice, languages, weekly availability, optional AI or annotation experience, a CV link, a professional profile link, and any notes you add.

Buyer contacts: work email, organisation, and what you tell us about your product, the claim you want tested, and your timeline.

03

Why, and on what legal basis

Applicants: to verify your licence and credentials, match you to projects, and pay you — legitimate interests and steps prior to a contract.

Buyers: to respond and scope work — legitimate interests.

Where law requires consent (e.g. optional communications), we ask for it separately and you can withdraw it at any time.

04

Verification

We check applicant licence details against the public register of the licensing authority you name. Licence and registration numbers are read at verification only. We do not enrich your data from other sources without telling you.

05

Who processes your data

We use a small set of service providers: Vercel (hosting), Supabase (database and form submissions), Google Workspace (email) and Resend (application-notification email) — and, for applicants, licence verification against public registers. Each acts under contract as a processor. We do not sell personal data, and we do not use applicant or buyer data to train AI models.

06

Where it's stored and for how long

Data is stored with our hosting and database providers (Vercel and Supabase). Unsuccessful or inactive applications are deleted after 12 months; network members' records are kept for the duration of engagement plus what tax and employment law require; buyer correspondence is kept while relevant.

Retention periods are enforced, not aspirational.

07

Your rights

Access, rectification, erasure, restriction, portability, and objection — email hello@bencheval.com. We won't hold a grudge; complaints improve the notice.

08

Forms and transmission

Forms submit over HTTPS via POST — personal details never appear in URLs, browser history or server access logs. We ask you not to send patient-identifiable information through any form or email.

09

Changes

We date this notice and keep prior versions available on request. Material changes are flagged to network members by email.

Questions or requests: hello@bencheval.com — we respond to data-rights requests within one month.