Privacy Policy

1. Who is responsible

ElevAIte (“we”) is responsible for the personal data of people who create and use an ElevAIte Voice account (“account data”). For the personal data of the people our customers call, such as their phone number, voice, recording and transcript (“call data”), the customer is the controller or data fiduciary and we are the processor, acting on the customer's instructions.

Contact for privacy and our grievance officer: connect@elevaite.in.

2. What we collect

Account data: your name, email, phone number, company, country, what you plan to use the Service for, your password (stored only as a one-way hash), and, if you sign in with Google, your Google name, email address and profile picture. We never see your Google password.

Consent and safety records: the time and version of the Terms, Privacy Policy and Acceptable Use Policy you accepted, whether you opted in to marketing, the network address and browser details at sign-up, and the country of your network. We use these to prove consent, to protect the Service and to investigate misuse.

Usage data: calls made, minutes used, agents and campaigns you set up, integrations you connect (stored encrypted), support requests and sign-in times.

Call data: the numbers called, call times and length, the audio recording, the transcript, an AI summary, outcome and sentiment. This is processed for you.

Payment data: Razorpay handles card and bank details. We receive the payment result, amount, currency, billing name and country, and tax details you give us, such as a GSTIN. We do not store card numbers.

3. Why we use it

To create and secure your account and give you the Service; to place and record calls you ask for and report their results; to take payment, issue invoices and meet tax law; to support you; to detect and investigate abuse and to enforce our policies; to keep records of consent; to improve and fix the Service; and, only if you opted in, to send you product news. You can withdraw marketing consent at any time.

Our grounds are your consent, performing our contract with you, our legitimate interests in security and fraud prevention, and legal obligations. In India we rely on consent and the legitimate uses the Digital Personal Data Protection Act 2023 allows.

4. Who we share it with

We use service providers who process data for us under their own terms: ElevenLabs (voice agents and call audio), Twilio (telephony), OpenAI (call summaries and analysis), MongoDB Atlas (database), Render and Vercel (hosting), Razorpay (payments), Resend (email), Google (sign-in and an optional call-history archive in Google Drive) and Supabase (our internal billing, invoicing and admin systems). If you connect a CRM, we send results to it at your request.

We do not sell personal data. We may disclose data to authorities where the law requires it or to protect people from harm, and to a buyer if our business is sold, with the same protections.

Some providers are outside your country, including in the United States. We use providers with appropriate safeguards and, where required, rely on standard contractual protections.

5. How long we keep it

We keep account data while your account is open and for as long afterwards as needed to meet legal, tax and dispute obligations. Call recordings, transcripts and summaries are kept in your account until you delete them or ask us to, or the account is closed, after which we delete them within a reasonable time unless the law or an investigation requires us to keep them. Payment and invoice records are kept for as long as tax law requires. Records of consent and abuse investigations are kept as long as needed to defend our decisions and protect the Service.

6. How we protect it

Data is encrypted in transit. Each customer's data is isolated from others. Integration credentials are stored encrypted. Staff access is limited, and actions on accounts such as holds and bans are recorded. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

7. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, withdraw consent, object to or restrict some processing, receive a copy, nominate someone to act for you, and complain to a regulator. In India these rights come from the Digital Personal Data Protection Act 2023; in the UK and EU from UK GDPR and GDPR. Write to connect@elevaite.in and we will respond within the time the law allows.

If you are a person who was called by one of our customers, please contact that customer first, as they decide why and how your data is used. You can also write to us and we will pass your request on or act on it where we can.

8. Cookies and similar technology

We use your browser's local storage to keep you signed in and, with your permission, to remember choices such as your currency and theme. We do not use advertising or tracking cookies. See our Cookie Policy for the full list and how to change your choices. Fonts are loaded from Google Fonts, which may receive your network address.

9. United States privacy rights (California and other states)

If you live in California, Colorado, Connecticut, Virginia, Texas or another US state with a consumer privacy law, you may have the right to know what personal information we collect and why, to access and correct it, to delete it, to receive a copy, and not to be treated worse for using these rights.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We do not use advertising trackers. Because of that, there is nothing to opt out of, and we honour the Global Privacy Control signal from your browser as a refusal of optional analytics.

In the last 12 months we collected the categories described in section 2 (identifiers such as name, email and phone; commercial information such as plan and payments; internet activity such as sign-in times; and, for our customers, call recordings and transcripts processed on their behalf) for the business purposes in section 3, and disclosed them to the service providers in section 4.

To use a right, write to connect@elevaite.in from your account email. We may need to verify your identity. You may use an authorised agent. If you are a person called by one of our customers, that customer is the business responsible for your data and we process it only for them.

10. Children

The Service is for people aged 18 and over. We do not knowingly collect data from children.

11. Changes

We will post any update here with its date and tell you in the app or by email if the change is material.