Privacy Policy

How we protect and handle your personal data

Last updated: June 13, 2025

1. Introduction

IMProofBench ("we", "our", or "the platform") is an academic benchmarking platform for evaluating AI systems on research-level mathematics, operated as a research project at ETH Zürich. We are committed to protecting your privacy and handling your personal data transparently and securely.

This privacy policy explains what personal data we collect, why we collect it, and your rights regarding this data.

2. Data Controller

The data controller for IMProofBench is:

Johannes Schmitt
Department Mathematik
ETH Zürich
HG J16.1
Rämistrasse 101
CH-8092 Zürich, Switzerland
Email: johannes.schmitt@math.ethz.ch

For general data protection inquiries at ETH Zürich:
Data Protection Officer: Tomislav Mitar
Email: datenschutz@ethz.ch

3. What Personal Data We Collect

We collect and process the following personal data:

  • Name: Used for attribution of your contributions and display on the platform
  • Email address: Used for authentication and account management
  • Account metadata: Registration date, last login time
  • Your contributions: Mathematical questions, solutions, and grading schemes you create
We do NOT collect:
  • Passwords (only secure hashes are stored)
  • IP addresses or location data
  • Cookies for tracking or analytics
  • Any sensitive personal data

4. How We Use Your Data

We process your personal data for the following purposes:

  • Account management: Creating and maintaining your user account
  • Authentication: Verifying your identity when you log in
  • Attribution: Crediting you for your mathematical contributions
  • Communication: Sending essential platform-related emails (password resets, account verification)
  • Platform operation: Enabling collaboration features and maintaining platform integrity

5. Legal Basis for Processing

We process your personal data based on legitimate interest (Article 6(1)(f) of the GDPR):

  • We have a legitimate interest in facilitating academic collaboration and mathematical research
  • The processing is necessary for operating an academic benchmarking platform
  • Your interests and fundamental rights do not override these legitimate interests, given the minimal data collected and academic context

6. Data Storage and Security

Your data is:

  • Stored on secure ETH Zürich servers in Switzerland
  • Protected by ETH's institutional security measures
  • Encrypted in transit using HTTPS
  • Password-protected with industry-standard hashing (PBKDF2+SHA256)
  • Accessible only to authorized platform administrators

7. Data Retention

We retain your personal data:

  • Active accounts: As long as your account remains active
  • Inactive accounts: May be deleted after 3 years of inactivity
  • After deletion request: Removed within 30 days of your request

Your mathematical contributions may be retained for academic integrity but will be anonymized upon account deletion.

8. Data Sharing

We do NOT:
  • Sell your personal data
  • Share your data with third parties for marketing
  • Transfer your data outside of ETH systems

We MAY share data only:

  • With other registered platform users (your name on contributed questions)
  • If required by Swiss law or ETH policies
  • With your explicit consent

9. Your Rights

Under Swiss data protection law and the GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data (via your profile settings)
  • Erasure: Request deletion of your account and personal data
  • Portability: Receive your data in a machine-readable format
  • Object: Object to processing based on legitimate interest
  • Complaint: Lodge a complaint with supervisory authorities

To exercise these rights, contact us at johannes.schmitt@math.ethz.ch.

10. AI Model Testing

We test AI systems on mathematical questions submitted to the platform. This testing:

  • Evaluates mathematical reasoning capabilities only
  • Does NOT involve processing of personal data
  • Does NOT profile or make automated decisions about users
  • Results are used solely for academic research purposes

11. International Users

While we welcome international collaboration:

  • Data is processed and stored in Switzerland
  • Switzerland is recognized by the EU as providing adequate data protection
  • We comply with GDPR for EU/EEA users
  • Users from other jurisdictions participate under Swiss law

12. Children's Privacy

IMProofBench is intended for academic researchers and is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify registered users of significant changes via email.

14. Contact Us

For privacy-related questions or to exercise your rights:

Project-specific inquiries:
Johannes Schmitt
Email: johannes.schmitt@math.ethz.ch
Phone: +41 44 632 31 36
Office: HG J16.1
ETH data protection inquiries:
Data Protection Officer: Tomislav Mitar
Email: datenschutz@ethz.ch
Address: ETH Zürich, Legal Services, HG E 33.2, Rämistrasse 101, 8092 Zürich
Swiss Federal Data Protection Authority:
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1, 3003 Bern
Website: www.edoeb.admin.ch

By creating an account on IMProofBench, you acknowledge that you have read and understood this privacy policy.