Privacy Policy
Last updated: March 17, 2026
Overview
Iris (“we,” “us,” or “our”) is an open-source MCP server for AI agent evaluation and observability. This privacy policy explains how we handle data across our website (iris-eval.com) and the Iris software.
What we collect
Website (iris-eval.com)
- Waitlist email address: If you join the cloud tier waitlist, we store your email address. This is the only personal data we collect.
- Hashed IP address: For rate limiting only. We store a one-way SHA-256 hash of your IP — we cannot reverse this to identify you.
- Analytics: We use Vercel Web Analytics, which collects anonymous page view data. No cookies, no personal data, no cross-site tracking.
Self-hosted Iris software
- All data stays on your machine. The self-hosted version stores traces, evaluations, and metrics in a local SQLite database. No data is sent to us or any third party.
- We do not collect telemetry, usage data, or analytics from the self-hosted software.
How we use your data
- Waitlist emails: Solely to notify you when the cloud tier launches. We do not sell, share, or use your email for any other purpose.
- IP hashes: Solely for rate limiting to prevent abuse. Automatically expire after 1 hour.
Data storage and security
- Waitlist data is stored in Upstash Redis (encrypted at rest, served over TLS).
- We use CORS restrictions, rate limiting, and input validation to protect the waitlist API.
- We do not store passwords, payment information, or sensitive credentials.
Your rights
You have the right to:
- Access: Request a copy of any data we hold about you.
- Deletion: Request deletion of your waitlist email at any time.
- Correction: Request correction of inaccurate data.
- Portability: Request your data in a machine-readable format.
To exercise any of these rights, email hello@iris-eval.com. We will respond within 30 days.
Third-party services
- Vercel: Website hosting and serverless functions. Vercel Privacy Policy
- Upstash: Redis database for waitlist storage. Upstash Privacy Policy
- GitHub: Source code hosting. GitHub Privacy Statement
Cookies
We do not use cookies. Vercel Web Analytics is cookie-free. No tracking pixels, no fingerprinting, no cross-site tracking.
Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of the website after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Email hello@iris-eval.com.