Privacy Policy

Elevayt Technologies Pvt. Ltd. (“Elevayt”, “we”, “our”) operates the platform at elevayt.in and provides AI-powered business tools for Indian SMBs and professionals. For questions about this policy, contact us at privacy@elevayt.in.

Account information: Phone number or Google account email and name when you sign up.

Business information: Your business name, type, city, area, services, pricing, photos, and any content you provide during onboarding.

Client data (via your WhatsApp): Names, phone numbers, booking history, and payment records of your clients — collected only when your AI Receptionist or Payment Chaser agents are active.

Usage data: How you interact with the platform — pages visited, features used, agent configurations. Used for product improvement and support.

Technical data: IP address, browser type, device info collected automatically by our hosting infrastructure (Vercel).

We use the data we collect to:

• Power your AI agents — generating website content, WhatsApp responses, social posts, payment reminders, and Google Business updates
• Provide customer support and resolve issues
• Send transactional notifications (billing, service alerts) via email or WhatsApp
• Improve and train our AI models using anonymized, aggregated patterns
• Comply with applicable laws and respond to legal requests

We do not sell your personal data or your clients' data to third parties.

Your business and account data is retained for as long as your account is active. After account deletion (requested via Settings), personal data is removed within 72 hours.

Anonymized, aggregated operational patterns (e.g., average booking frequency by business type, average response times) may be retained indefinitely to improve our service for all users. This data cannot be traced back to any individual business or person.

Deleted account data (non-PII) is soft-deleted for 90 days, then permanently purged.

We share your data only with the services required to operate the platform. Each is bound by their own privacy policy:

• Supabase — database and authentication hosting (data stored in India/Singapore region)
• Anthropic (Claude) — powers our AI generation features; your prompts and context are sent to their API
• Meta (WhatsApp / Instagram) — for WhatsApp Business messaging and Instagram publishing
• Google — for Google OAuth login and Google Business Profile management
• Razorpay — for subscription billing and payment processing
• Vercel — for hosting and CDN delivery

Under India's Digital Personal Data Protection Act (DPDP) and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Opt out of non-essential communications
• Data portability (export your business data from the dashboard)

To exercise these rights, go to Dashboard → Settings → Account or email privacy@elevayt.in.

All data is encrypted in transit (TLS) and at rest. OAuth tokens for Google and Meta are encrypted before storage. We follow responsible disclosure practices and conduct regular security reviews.

If you discover a security vulnerability, please email security@elevayt.in.

We use minimal cookies — primarily for authentication (Supabase session cookies) and your language preference. We do not use advertising or tracking cookies.

Elevayt is intended for business use by adults (18+). We do not knowingly collect data from minors.

We will notify you of material changes to this policy via email or in-app notification at least 14 days before they take effect.

For privacy requests or concerns: privacy@elevayt.in

Elevayt Technologies Pvt. Ltd., India.