Privacy Policy

This policy describes what Elevate24 (“we,” “us”) collects when you use the Service, how we use it, and who else processes it. Plain language, no surprises.

1. What we collect

• Account information: your email address, company name, and a hashed password. When you accept our terms we also record the acceptance time, terms version, and your IP address (as evidence of consent).
• Approved Facts and company details: the facts, website URL, and social/profile links you supply about your business. Note that this content is intended for publication — it is not confidential.
• Generated content and logs: the articles, scripts, captions, and videos generated for you; fact-check results; publishing status; and operational run logs.
• Snapshots: verbatim answers we collect from AI assistants about your business, stored to show before/after changes.
• Billing: your payments are processed by Stripe. We store your Stripe customer/subscription identifiers and plan status — we never see or store your card number.
• Usage: standard server logs (requests, timestamps, IPs) from our hosting provider. Google Analytics automatically collects page interactions, device/browser information, and approximate location on our public marketing pages and may set analytics cookies. Authenticated dashboards and token-bearing payment pages are excluded from this tracking.

2. How we use it

• To operate the pipeline: generate, fact-check, render, and publish content based on your Approved Facts.
• To measure results: querying AI assistants about your business and storing their answers.
• To bill you and manage your subscription via Stripe.
• To operate, secure, and debug the Service (rate limiting, abuse prevention, error alerts to our internal channel).
• To understand public website traffic and improve our marketing pages.
• To contact you about your account and the Service.

We do not sell your data, and we do not use your data to train AI models.

3. Who else processes your data

The Service is built on the following processors, which receive only what they need to do their job:

• Stripe — payment processing (your email and payment details go to Stripe directly).
• Anthropic and/or OpenAI — text generation and fact-checking (your Approved Facts and the drafts derived from them are sent to these APIs to produce content).
• Creatomate (with voiceover synthesis, e.g. ElevenLabs, where configured in the video template) — video rendering (receives the question and spoken script).
• Publer — scheduling social posts to our own accounts (receives captions, video, and links).
• Ghost — hosts our public content hub where articles are published.
• Railway — application and database hosting.
• Google Analytics — measurement of visits and interactions on our public marketing pages.
• Slack — internal operational alerts to our team (may include your company name and content topics, never your password or payment details).

4. Analytics controls

Google Analytics loads automatically on our public marketing pages. You can limit analytics cookies through your browser's privacy settings or use Google's Analytics Opt-out Browser Add-on. These controls may affect how other websites function.

Connected Google accounts and reporting

Connecting Google reporting is optional. After you approve Google's permission screen, Elevate24 lists the Analytics properties and Search Console sites available to the connected account so you can select the resources for your business. Customer reporting requests read-only Analytics and Search Console access; it does not edit your Analytics configuration or your website.

• Data accessed: property and site identifiers, names and website URLs; aggregate visits, users, page views, engagement, traffic sources, approximate city/region locations, and conversion/key-event counts and related page/campaign dimensions; and Search Console clicks, impressions, queries, pages, click-through rates and positions. We do not request visitor IP addresses from these reporting APIs.
• Purpose: display and refresh your traffic maps, trends, search reports and content-performance measurements. Measurements and summaries can also inform your customer-facing content plans, learning history and Avery recommendations. A reported change is not proof that Elevate24 caused it.
• Storage and access: we store selected resource identifiers, granted permissions, report snapshots and derived performance summaries in our hosted database. Refresh tokens are encrypted at rest and allow scheduled updates without repeated sign-in. Data is transmitted over HTTPS and scoped to the authorized business account.
• Service providers: Railway hosts this data. Relevant aggregate performance summaries may be processed by Anthropic and/or OpenAI to produce your in-product recommendations and content plans. OAuth tokens are not included in those AI requests. Google data is not used to train or fine-tune generalized or personalized AI models.
• Operator connections: the separate, administrator-only Analytics Hub requests the operator's email, Search Console management and Site Verification permissions to identify the connected operator, inspect and submit sitemaps, verify authorized domains and attach their Search Console properties to client reporting. Domain verification requires the corresponding ownership proof. This flow does not request GA4 access.

Elevate24 follows the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring Google API data. We do not sell this data, use it for advertising targeting, or use it to determine creditworthiness. Human access is limited to your affirmative permission, necessary security/debugging or legal purposes, or permitted internal use of aggregate data. Other transfers occur only as permitted by that policy, including to provide your disclosed features with your consent, for security or legal obligations, or a business transfer with your prior explicit consent.

Disconnect and deletion: use Disconnect Google reporting in your customer dashboard to remove Elevate24's stored client token and selected client resources, and delete their saved daily GA4, location and conversion reports. Client-connected Search Console daily reports are also deleted when there is no separate platform connection. An administrator-managed Search Console connection can continue independently; contact us to remove it. Previously derived search rankings, performance summaries and content plans may remain in your business history. To request deletion of that history or the operator connection, contact hello@elevate24.ai. You can also revoke the Google account grant at Google Account connections; revocation stops access under that grant but does not itself delete previously saved reports. Backups and operational logs age out on the hosting provider's normal retention schedule. Disconnecting does not delete data held by Google.

5. Retention

We keep your account data, Approved Facts, generated content, and snapshots while your account exists. If you delete your account (or ask us to), we delete your organization's data from our database; content already published on our public properties may remain published unless you ask us to unpublish it (see the Terms). Billing records are retained as required for accounting and tax purposes. Backups and logs age out on our hosting provider's standard schedule.

6. Your rights

You can view and edit your Approved Facts and company details in your dashboard at any time. You can ask us to export or delete your data, correct inaccurate account information, or unpublish content from properties we control, by contacting us. Depending on where you live you may have additional statutory rights (e.g. under GDPR or CCPA) — we will honor verified requests consistent with those laws.

7. Security

Passwords are stored hashed, sessions are signed, data is transmitted over HTTPS, and each organization's data is isolated per-organization at the query layer. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.

8. Children

The Service is for businesses and is not directed to children under 16; we do not knowingly collect their data.

9. Changes

Material changes to this policy will be posted here with a new “last updated” date.

10. Contact

Privacy questions or requests: hello@elevate24.ai.