EvidenceSignal Privacy Policy
Last updated: October 29, 2026
EvidenceSignal is operated by The Experience Design Studio (“XDS,” “we,” “us,” or “our”). This policy explains how we collect, use, share and retain information when you use EvidenceSignal through our hosted application or connected AI platforms, including ChatGPT.
This policy specifically covers EvidenceSignal. Our general XDS Privacy Policy covers the madebyxds.com website.
1. Information we collect
Account information
Our authentication service processes your sign-in email address and an account identifier. We use account identifiers to authenticate access and associate assessments with the appropriate account.
Assessment inputs
We collect information submitted to create an assessment, including:
- Company and product names, website URLs and indications or categories.
- Competitor names, products, URLs and related details.
- Additional public-source URLs.
- Selected audiences and assessment options.
- Questions and other task-specific information submitted through connected tools.
A company or product being researched is not necessarily your employer, client or business.
Research material and assessment results
We collect publicly accessible material relevant to your assessment, such as website content, publications, regulatory records, clinical-trial information and accessible professional or community sources.
We store retrieved material, source links, excerpts, generated questions, answers, scores, limitations, AI-visibility observations and reports. Public sources may contain professional names, affiliations or other information published by their original sources.
Optional XDS review requests
If you choose to request an XDS review, we collect your name, email address, organization and any optional role, message or discovery-source information you provide. We also store the assessment summary described on the request form and a record of your sharing confirmation.
Operational information
We maintain assessment status, submission dates, completion or failure information and technical logs to operate and troubleshoot the service.
Hosting and authentication providers may also process IP addresses, browser information, request times and security-related information as part of delivering their services.
2. How we use information
We use information to:
- Authenticate users and control access to assessments.
- Research public evidence and generate audience-specific findings.
- Provide reports, source references, comparisons and downloadable briefs.
- Perform optional AI-visibility observations.
- Monitor reliability, investigate failures and protect the service.
- Understand research demand and improve EvidenceSignal.
- Respond to support inquiries and explicit requests for an XDS review.
Authorized XDS administrators can review submitted website-assessment inputs, including researched URLs, companies, products, indications, competitors, audiences and assessment outcomes.
This research-activity dashboard does not display account email addresses or scanner names from operational assessment records. It does not automatically identify researched companies as prospects or associate them with your employer.
The dashboard records submitted assessments. It does not capture form entries that are abandoned without submission. Automatic campaign or referral attribution is not currently implemented; optional discovery-source answers are self-reported.
3. Requesting contact from XDS
Requesting an XDS review is optional. You can use your assessment without requesting contact.
Before submitting a review request, you must confirm that you want to share your contact details and the stated assessment summary with XDS. Authorized XDS administrators can then review that information and contact you about your request.
Requesting a review does not subscribe you to marketing emails. EvidenceSignal does not automatically add assessment users or review requests to a CRM.
You can withdraw a review request from the report’s review-request page. Withdrawal removes the shared contact details and summary from the active request record. It cannot undo contact already made, downloaded copies or separately retained correspondence.
4. When information is shared
Information may be processed by the following recipients where needed to provide EvidenceSignal:
- Authorized XDS personnel and service providers supporting operation, troubleshooting and requested follow-up.
- Hosting, storage, authentication and email providers supporting the application and account access.
- Web-search and research providers receiving relevant search terms, URLs and assessment details.
- AI-processing and AI-visibility measurement providers receiving relevant questions, assessment inputs or retrieved public evidence.
- Connected platforms, such as ChatGPT, receiving the tool results needed to display your requested findings.
We may also disclose information where required by law or reasonably necessary to address fraud, security incidents or threats to the service.
When you use EvidenceSignal through ChatGPT or another platform, that platform separately processes information under its own privacy policy. EvidenceSignal receives the inputs passed to its tools; connecting the service does not automatically provide XDS with your entire conversation history.
5. Cookies and browser storage
The EvidenceSignal application uses authentication cookies and browser storage to support sign-in and reconnect you to an assessment in progress.
The application does not currently include advertising pixels, session replay or cross-site advertising tracking. Hosting and authentication providers may maintain operational logs.
The madebyxds.com website, including this policy page, is separately covered by the general XDS Privacy Policy.
6. How long we retain information
| Information | Current retention |
|---|---|
| Operational website-assessment records, including submitted form details | Configured to expire after 30 days |
| Application logs | Configured for 14 days |
| Optional XDS review requests | Up to 180 days, unless withdrawn earlier |
| Saved reports and collected evidence | No automatic expiration; retained until removed |
| Previous versions of stored report and evidence files | Configured to expire after 30 days |
| Authentication account records | Retained until the account is removed |
Expiration-based deletion may take additional processing time. Removing an operational assessment record does not automatically delete its saved report or evidence.
Provider backups, downloaded reports and separately retained correspondence may remain beyond deletion of an active application record.
7. Your choices and requests
You can:
- Edit suggested assessment details before submitting them.
- Choose whether to request AI-visibility observations.
- Use an assessment without requesting contact from XDS.
- Withdraw a shared review request from its review-request page.
- Contact XDS to request access, correction or deletion of information associated with your account, or to raise a concern about its use.
Please submit requests through our contact page and identify EvidenceSignal as the service concerned. Include the email address used for your account so we can verify ownership. Do not send passwords or sign-in codes.
Disconnecting EvidenceSignal from a connected platform does not automatically delete previously saved assessments or account records. Contact us if you also want those records removed.
8. Information you should not submit
EvidenceSignal is intended for research about companies, products and publicly available evidence.
Do not enter patient records, protected health information, government identification numbers, payment-card details, passwords, API keys or other authentication secrets into assessment fields, tool requests or review messages.
Use only the designated authentication pages to sign in.
9. Security and international processing
We use authentication, access controls and encrypted connections to help protect information. No internet service or storage system can guarantee absolute security.
XDS operates in the United States. Information may be processed in the United States or other countries where our service providers operate.
10. Changes to this policy
We may update this policy as EvidenceSignal changes. The latest version will be published on this page with an updated date. Material changes to data collection or use will also be reflected in relevant application disclosures.
11. Contact XDS
For EvidenceSignal privacy questions or requests, please use our contact page and specify that your inquiry concerns EvidenceSignal.