Privacy Policy
A plain account of the data we collect, why we collect it, and what we do with it.
1.Who Operates This Site
GavelBot is operated by Brandon Webb, a sole proprietor doing business as "GavelBot," based in the State of Maryland, United States. We are the "data controller" for the personal information collected through this service.
2.What We Collect
We collect different categories of data depending on how you use the service.
From sponsors (businesses)
| Category | What it is and why we have it |
|---|---|
| Contact details | Name, email address, optional website. Used to set up your listing, send payment receipts, and contact you about your account. |
| Business details | Business name, category, region, physical address. Published on your public listing so customers can find and visit you. |
| Listing config | Your prompt, reward terms, persona selection, band configuration, retry mode, redemption format preferences. Stored on your sponsor record. |
| Calibration runs | The most recent five test arguments you run through our calibration tool, with their resulting scores. Helps you tune your listing. |
| Payment metadata | Stripe customer ID, last four digits of the card used, transaction history. We never see or store full card numbers — Stripe handles that. |
| Hashed IP | A one-way hash of your IP address at reservation, used to detect duplicate reservations and abuse. Not reversible to your actual IP. |
From customers (the public)
| Category | What it is and why we have it |
|---|---|
| Argument text | The written argument you submit to a listing. Sent to Anthropic for AI scoring; stored on your session record for the duration of the hearing. |
| Session data | The persona you chose, your scores per attempt, which attempt you accepted. Used to render your verdict and (if you win) generate a redemption code. |
| Email (optional) | If you choose to email a redemption code to yourself or to a merchant, we collect the email address for that purpose only. We do not subscribe you to anything. |
| Hashed IP | A one-way hash of your IP, used to enforce rate limits and detect abuse. Not reversible. |
| Redemption record | If you win a reward, we create a redemption record with the code, the sponsor, the score, the reward, and an expiration timestamp. The sponsor can verify the code through our verification system. |
From everyone
Basic browser metadata (user agent, page visited, approximate timing) collected by Firebase Hosting and standard server logs. We do not run third-party tracking pixels, advertising trackers, or session replay tools.
We do not use cookies for advertising or analytics purposes. We may use minimal session cookies necessary for the service to function (e.g., to persist a hearing in progress).
3.How We Use Your Data
We use the data described above to:
- Operate the service — render listings, process arguments, score verdicts, mint redemption codes, validate redemptions at the point of sale
- Process payments and send receipts (sponsors only)
- Send transactional emails — listing confirmations, redemption codes, support replies
- Detect and prevent abuse — rate limiting, content moderation, fraud prevention
- Improve the service — analyzing aggregate, anonymized patterns of use to improve scoring quality, persona behavior, and product features
- Comply with legal obligations when required by valid legal process
We do not sell your personal data. We do not rent it. We do not share it with advertisers. We are not in the data brokerage business.
4.The AI Disclosure
When you submit an argument, the text of that argument is transmitted to Anthropic, PBC — the company that makes the Claude AI model that performs the scoring. Your argument is processed by Anthropic to generate a score, written feedback, and a strength assessment. The result is returned to GavelBot and shown to you.
Anthropic's handling of your argument is governed by their own Privacy Policy and Commercial Terms. Per their commercial terms, customer inputs and outputs delivered through their API are not used by Anthropic to train their models.
If you do not want your argument processed by AI, do not submit an argument. There is no non-AI mode for the service.
5.Third Parties We Work With
We deliberately keep this list short. Each of these vendors plays a specific operational role and is named here so you know exactly where your data goes.
We do not share your data with third parties beyond what is described above, except where required by law or to enforce these terms.
6.How Long We Keep Data
| Type | Retention |
|---|---|
| Sponsor account | For as long as your account is active. Closed accounts retained for 7 years for tax and accounting purposes, then deleted. |
| Customer argument text | Stored on the session record indefinitely, used to display verdict history and produce share cards. Deleted on request (see Section 7). |
| Redemption records | Retained for 24 months after the expiration of the redemption, then deleted. Lets us resolve disputes about whether a code was valid. |
| Rate-limit hashes | Auto-purged after their relevant window (typically 24 hours for daily caps, 1 hour for calibration runs). |
| Payment metadata | Retained for 7 years for tax and accounting purposes, per IRS and Maryland record-keeping requirements. |
| Email correspondence | Retained in our support inbox indefinitely unless you ask us to delete it. |
7.Your Rights and Choices
Regardless of where you live, you have the right to:
- Access the personal data we hold about you. Email support@gavelbot.com and we will send you a copy within 30 days.
- Correct any inaccurate or out-of-date information.
- Delete your data, except where we are required to retain it by law (such as payment records for tax purposes).
- Object to specific uses of your data.
- Withdraw consent — though note that the service cannot function without some processing of your data, so withdrawal will typically mean account closure.
To exercise any of these rights, email support@gavelbot.com with the subject line "PRIVACY REQUEST." We will respond within 30 days.
For California residents
Under the California Consumer Privacy Act (CCPA), California residents have the rights listed above, plus the right to know whether their personal information is sold or shared for cross-context behavioral advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
For residents of the European Union or United Kingdom
GavelBot is operated from the United States and our servers are located in the United States. If you use the service from the EU or UK, your data is transferred to the United States for processing. By using the service, you consent to this transfer.
You have all the rights listed above under GDPR. The legal basis for our processing is contract (necessary to provide the service you requested), legitimate interest (operating and securing the service), and where applicable, consent (which you may withdraw at any time).
8.Children's Privacy
GavelBot is intended for use by adults. We do not knowingly collect personal information from children under 13 years of age (or under 16 in the European Union). If we learn we have collected information from a child under that age, we will delete it.
If you are a parent or guardian who believes your child has provided us with personal information, contact us at support@gavelbot.com and we will delete that information promptly.
9.Security
We use industry-standard security measures appropriate to the size of our operation. Data in transit is encrypted via HTTPS. Data at rest in Firestore is encrypted by Google. Payment information is handled by Stripe and never touches our servers.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you in accordance with applicable law.
10.Changes to This Policy
We may revise this Privacy Policy from time to time. Material changes will be announced on the homepage and (for sponsors) via email to your registered address. The "Last updated" date at the top of this page will reflect the most recent revision.
Continued use of the service after a revision constitutes your acceptance of the revised policy.
11.Contact
How to reach us
OperatorBrandon Webb, d/b/a GavelBot
JurisdictionMaryland, United States
Supportsupport@gavelbot.com
Privacysupport@gavelbot.com (subject line "PRIVACY REQUEST")