Introduction

DevEval ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at deveval.com (the "Service").

By using the service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information You Provide

Account Information: Name, username, email address, password, and company membership details when you register
Profile Information: Avatar, bio, role, display preferences, and workspace settings
Payment Information: For paid company plans, payment details are processed securely by our payment processor. We do not store your full credit card number
Feedback: Any comments, suggestions, or feedback you submit

Usage Data Automatically Collected

Assessment Submissions: Code, prompts, critique notes, verification answers, test outcomes, timing, and related candidate work
Practice Data: Practice attempts, solve times, progress, saved preferences, and performance metrics
Company Workspace Data: Assessments, invite records, candidate pipeline data, reviewer notes, decisions, and team activity
Candidate Preparation Data: Practice, coaching, or mock-interview interactions when those features are enabled
Integrity Signals: Session events, proctoring events, paste activity, focus changes, and other signals used to protect assessment integrity
Navigation Data: Pages visited, features used, time spent on the service
Technical Information: IP address, browser type, device information, operating system
Cookies and Similar Technologies: Session identifiers, authentication tokens, preferences

Google User Data

Google Sign-In

DevEval does not load Google's sign-in service until you choose the Google option. That action may send technical request data to Google and allow Google to set sign-in-state cookies. Google then provides DevEval with your stable Google account identifier, verified email address, and name. We use this information only to authenticate you, create or link your DevEval account, confirm your email, and prefill your name. Google Sign-In does not give DevEval access to your Gmail, Google Drive, contacts, or Google Calendar.

We store your Google account identifier, email address, and name with your DevEval account. The Google identity credential is verified by our server and is not stored as part of your account profile. If you consent to analytics cookies, account details such as your DevEval user ID, username, and email address may be included in analytics events handled by our analytics service provider.

Google Calendar

Google Calendar access is separate and optional. When an authorized company user explicitly connects a calendar, DevEval receives the connected Google account identifier and email address, OAuth access and refresh tokens, the selected calendar identifier, free/busy time ranges, and identifiers for interview events DevEval creates.

We use that access only to check scheduling availability and to create, update, or remove DevEval interview events and attendee notifications. We do not use Google Calendar data for advertising, credit decisions, or training general-purpose AI or machine-learning models. Calendar access and refresh tokens are encrypted at rest and erased from DevEval when the integration is disconnected.

Control, Retention, and Limited Use

You can remove DevEval from your Google Account's third-party connections at any time. Removing the Google connection does not by itself delete your DevEval account or records already required for an interview workflow. Use account Settings or contact support@deveval.com to request access, correction, export, or deletion.

DevEval's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

How We Use Your Information

We use the collected information for the following purposes:

Provide and Maintain the Service: Enable company assessments, candidate invitations, practice mode, grading, reports, and review workflows
Company Workspaces: Help hiring teams manage candidates, assessments, teammates, notes, and decisions
Candidate Experience: Deliver assessment links, save work, support preparation, and communicate important service updates
Grading and Reports: Score submissions, produce decision-support reports, and surface relevant evidence to authorized reviewers
Process Payments: Handle company plan billing and account administration
Improve User Experience: Analyze usage patterns to enhance functionality and features
Communication: Send assessment, workspace, service, support, and promotional content where permitted
Integrity Enforcement: Monitor for cheating, abuse, unauthorized access, and violations of terms of service
Technical Support: Respond to inquiries and troubleshoot issues
Analytics: Understand how users interact with the service to improve performance
Legal Compliance: Comply with applicable laws and regulations

Optional Devy Conversations

The public Devy product guide offers quick answers in your browser. When available, you can separately enable AI conversation: your question and recent chat messages are sent through DevEval to Anthropic to generate a response using reviewed public product information. The public chat has no access to private account or candidate records and does not create a support ticket.

Live voice requires a separate start action and microphone permission. When enabled, OpenAI processes microphone audio and transcripts; sharing recent text-chat context is optional. Human-style AI video, when available, uses Tavus and Daily with its own consent notice. These assistant calls do not request your camera. Browser dictation and read-aloud are separate controls and may use your browser’s speech provider.

The public assistant keeps the visible transcript in page memory, not a saved DevEval chat history. Resetting it or leaving the public assistant scope clears that conversation. Closing a live call stops microphone access. Technical request metadata is used for service operation and abuse limits; provider processing and retention remain subject to the applicable provider terms. Disabling call recording does not disable speech processing or guarantee that providers retain no logs.

Do not share passwords, payment details, candidate information, or confidential work. Review the service provider list before enabling optional AI features. AI guidance can be incomplete or incorrect and does not make hiring decisions.

AI-Assisted Evaluation and Code Execution

Some DevEval features use specialized service providers to execute code, analyze responses, produce feedback, or assist with scoring. Depending on the assessment, the content processed may include code, written answers, critique notes, prompts and responses, interview content, test results, and the assessment context needed to evaluate that work.

Purpose: This processing is used to operate the assessment, run tests, produce evaluation evidence, secure the service, and support authorized human reviewers
Decision support: Automated and AI-assisted results may be incomplete or inaccurate and are not intended to make autonomous hiring decisions
Advertising and model training: We do not sell candidate assessment content, use it for targeted advertising, or opt it into general-purpose AI model training
Provider handling: Providers process data on our behalf and may temporarily retain inputs and outputs for service delivery, security, abuse prevention, or legal compliance under their applicable terms

We limit provider requests to the information needed for the relevant feature. Candidate results remain subject to review by the company that requested the assessment.

Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

Company Assessments: Candidate submissions, scores, integrity signals, and reports are visible to the company that invited the candidate and authorized reviewers in that workspace
Company Workspaces: Team members may see workspace activity, candidate records, assessment settings, and reviewer notes according to their role
Candidate Practice: Practice data is private to your account unless you choose to share it or connect it to a company flow
Payment Processing: Payment details are handled by a payment processor for paid company plans
Service Providers: Vendors that provide hosting, code execution, AI-assisted evaluation, email, analytics, error monitoring, authentication, calendar integration, and payment processing. They receive the information needed to perform those services on our behalf and are required to protect it under their applicable agreements. See our current subprocessor and integration list
Legal Requirements: When required by law, court order, or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
With Your Consent: When you explicitly agree to share information

Data Security

We implement reasonable security measures to protect your data, including:

Encrypted data transmission (HTTPS/TLS)
Secure server infrastructure with access controls
Regular security audits and updates
Limited employee access to personal data
Industry-standard authentication mechanisms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your data (subject to legal obligations)
Opt-Out: Unsubscribe from marketing communications
Data Portability: Receive your data in a structured, machine-readable format
Restriction: Request limitation of data processing
Object: Object to processing based on legitimate interests

You can exercise many of these rights directly in your account Settings: use Data Privacy → Export to download your data, and Danger Zone → Delete Account to erase your account. For other requests, contact us at support@deveval.com.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. We do not sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of Personal Information Collected: In the past 12 months, we have collected: identifiers (name, username, email), commercial information (plan and billing status), internet activity (usage and session data), professional information supplied through company workspaces, and inferences used for assessment scoring and service improvement.

Do Not Sell My Personal Information: DevEval does not sell, rent, or trade your personal information to third parties for monetary consideration.

To exercise your California privacy rights, email us at support@deveval.com with the subject line "CCPA Request" or use the account deletion feature in Settings.

European Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the General Data Protection Regulation (GDPR) and equivalent laws. In addition to the rights listed above, you have the right to withdraw consent at any time where processing is based on consent, and the right to lodge a complaint with your local data protection supervisory authority.

Legal bases: We process your data to perform our contract with you (providing accounts, assessments, and interviews), for our legitimate interests (securing the platform, preventing cheating and abuse, improving the service), to comply with legal obligations, and with your consent for marketing communications, which you can withdraw at any time via the unsubscribe link in any marketing email.

Candidate assessment data:When you take an assessment or interview at the invitation of a company, that company determines why and how your assessment data is used, and DevEval processes it on the company's behalf. Where that applies, we will refer requests concerning your assessment results to the inviting company, and we recommend contacting them directly as well.

International transfers: Our services are hosted in the United States. If you use DevEval from outside the US, your personal data is transferred to and processed in the US.

To exercise these rights, use Data Privacy → Export and Danger Zone → Delete Account in Settings, or email support@deveval.com with the subject line "GDPR Request".

Cookies and Tracking Technologies

We use cookies and similar technologies organized into the following categories:

Essential Cookies

Always active: required for the website to function

Authentication tokens to keep you logged in
Session management during assessments and practice
Security features to protect your account
Integrity protection for assessments and candidate work

Analytics Cookies

Optional: help us improve DevEval

Page views and feature usage statistics
Performance metrics and error tracking
Anonymous usage patterns to improve UX

Functional Cookies

Optional: enable enhanced features

Remembering your preferred coding language
Editor preferences and layout settings
Google sign-in state after you explicitly choose Google

You can change your cookie preferences at any time. Rejecting optional cookies will not affect essential site functionality.

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy. Specific retention periods:

Account Data: Retained until you delete your account
Assessment Records: Retained according to company workspace settings, legal obligations, and service requirements
Candidate and Reviewer Notes: Retained while needed for the company workflow unless deleted by an authorized user or required by law
Practice and Code Submissions: Retained while your account is active, then deleted or anonymized according to our retention process
Activity Logs: Retained for 90 days for security purposes
Cookie Consent Records: Retained for 3 years for compliance audit

Data temporarily held by a service provider may remain in that provider's secured systems for its contractual retention period after deletion from DevEval, including where necessary for security, abuse prevention, or legal compliance.

You can request early deletion of your data by deleting your account in Settings or contacting support@deveval.com.

Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using the service, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers.

Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will notify you of significant changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have privacy concerns, please contact us at support@deveval.com

DevEval
447 Sutter St, Ste 506-1440
San Francisco, CA 94108

Back to home