Privacy Policy
Scope and operator
Effective date: October 7, 2026
Skube Labs, Inc. operates Benchmark. Benchmark is based in the United States. This policy covers benchmark.app, benchmark.social, the dashboard, API, MCP server, webhooks, gallery, documentation, and related account services. It also covers public-content information processed for research and editorial examples.
Information and sources
We receive information from you, workspace administrators, connected clients, service providers, public source pages, and source-data providers.
Accounts and support. We process names, email addresses, account identifiers, sign-in records, workspace names, roles, memberships, invitations, and messages you send us. Profile information can include a picture supplied during sign-in. Workspace administrators control membership and may access member activity related to their workspace.
Newsletter contact information. The benchmark.social sign-in flow currently saves account email addresses to a newsletter contact list and can share them with a communications provider. This processing can occur before any newsletter is sent. Contact privacy@benchmark.app to request removal from that list.
Billing and service settings. We process plans, subscription status and dates, usage, credit balances, invoices, payment identifiers, and billing settings. Subscription purchase records can include the Terms version, presented conditions, and acceptance evidence. Payment providers process payment details. We also process API-key identifiers and permissions, webhook settings, and encrypted signing-secret information. We do not store raw customer API keys.
Service and security activity. We process request timing, operations, outcomes, errors, usage, connection records, device or browser information, and ordinary server or security logs. Technical logs may include IP addresses. Analytics and feature-management information can include account and workspace identifiers and account contact information.
Public-content information. We process supported public profiles and posts on Instagram, TikTok, YouTube, and X, and public web links identified by customers. Information can include names, handles, biographies, captions, titles, links, timestamps, metrics, identifiers, excerpts, media metadata, and structured analysis. Public availability does not remove the personal nature of information.
Enriched operations can process public image, video, audio, and text. Customer results contain documented structured fields, including selected source-text excerpts where supported. They do not provide stored source-media locations, full transcript artifacts, or a dedicated transcript field. Selected excerpts can reproduce a complete short script. Gallery examples may display selected third-party media, excerpts, thumbnails, or embeds.
Uses and purposes
We use information to:
- Provide accounts, workspaces, API and MCP access, research results, gallery features, and support.
- Process subscriptions, credits, payments, cancellation, and workspace closure.
- Record subscription purchase agreements and the administrator’s reviewed billing facts and acknowledgment for a confirmed closure.
- Operate, maintain, troubleshoot, secure, and improve the Service.
- Understand service performance and manage available features.
- Maintain the newsletter contact list collected through benchmark.social sign-in.
- Review privacy and rights requests, prevent misuse, and enforce our terms.
- Meet legal obligations and respond to lawful requests.
Account, billing, security, and legal messages may still be necessary to provide the Service.
Legal bases and roles
Where the applicable law requires a legal basis, the basis depends on the information and purpose. These may include performing a contract, legal obligations, consent, or legitimate interests where permitted. Relevant interests include providing requested public-content research, operating the Service, security, and preventing misuse. You can withdraw consent for future processing when we rely on it.
Benchmark determines the purposes of its account operations, billing, security, and independently selected public-content research and gallery activities. A signed data processing addendum may cover an identified customer-controlled processing flow. It does not cover all independent public-content activity merely because a customer requested a result.
Recipients
We disclose information as needed for the purposes below.
| Recipient category | Purpose and information involved |
|---|---|
| Identity and account providers | Account contact information, sign-in, membership, and access management |
| Payment providers | Payments, subscriptions, invoices, and billing identifiers |
| Hosting, storage, security, and workflow providers | Operation, storage, protection, and delivery of service information and public-content data |
| Analytics and feature-management providers | Service performance and feature operation using relevant account, workspace, and activity information |
| Source-data, transcription, and AI-analysis providers | Retrieval and processing of supported public content and relevant request information |
| Support and communications providers | Responding to requests, delivering service messages, and managing newsletter contact lists |
| Authorized customers and gallery visitors | Documented requested results and selected public gallery examples |
We may disclose relevant information to authorities, advisers, or other parties when legally required or reasonably necessary to protect rights and address misuse. Information may transfer in a merger, acquisition, or business transfer, subject to applicable law.
Third-party sites, links, and embeds operate under their own privacy notices. They may receive technical information when you interact with them.
Cookies and device storage
The Service uses cookies for sessions and sign-in security. Hosted sign-in can use cookies on its own domain. Cookies and device storage can remember theme, sound, workspace, layout, and navigation preferences. They can also retain temporary purchase or workspace-creation state to support returns and prevent duplicate requests. These technologies can differ between Benchmark properties and features.
You can manage cookies and stored preferences through browser settings. Disabling required session cookies can prevent sign-in. Contact us about an applicable opt-out or other privacy right.
Retention and closure
We retain information for the period reasonably needed for the purposes above. We consider account status, service needs, information sensitivity, pending work, request history, legal obligations, disputes, and security requirements.
Workspace closure ends access. It does not immediately erase every record. Billing ledgers, invoices, payment reconciliation, purchase agreements, closure acknowledgment, and records needed for legal obligations or disputes may remain. Other information may remain where reasonably needed for security, service operation, or responding to a rights request. Removing a workspace does not necessarily remove independently sourced public content or public gallery examples.
A separate request to erase personal information remains available. We assess what can be removed and what must be retained under applicable law.
Privacy and public-content requests
Depending on applicable law, rights may include access, correction, deletion, portability, restriction, objection, and withdrawal of consent. Opt-outs for sale, sharing, or targeted advertising may also apply. Rights and exceptions depend on the processing and jurisdiction. You may complain to the appropriate privacy authority.
Email privacy@benchmark.app with your request and enough information to identify the account, workspace, profile, or content concerned. You do not need an account to make a request. We may request proportionate verification or evidence that you can act for another person. Do not send passwords or credentials.
We review requests and respond within applicable legal deadlines. Where required, we explain a lawful refusal and any available appeal route. We do not discriminate for exercising an applicable privacy right. See Public Data and Removal Requests for content-related requests. A change at Benchmark does not delete the original source or independently held customer copies.
International processing
Benchmark is based in the United States and processes information there. Service providers may process information in other countries. Their laws can differ from those where you live. Contact privacy@benchmark.app for information about safeguards relevant to an applicable restricted transfer.
Children
Accounts and paid features require users to be at least 18, or the age of majority where they live if higher. Public browsing is not directed to children under 13. If you believe a child supplied personal information to us, contact us for review and appropriate action.
Changes and contact
We will post changes with a revised effective date and provide notice where applicable law requires it.
Operator: Skube Labs, Inc., United States.
Privacy requests: privacy@benchmark.app. Security reports: security@benchmark.app. Account and billing support: support@benchmark.app. Legal notices: legal@benchmark.app.