Legal
Privacy Notice
Last updated October 23, 2026 · ElevateAI
What this document covers. This notice explains how ElevateAI collects, uses, shares, and protects personal information, and the rights and choices you have. It applies when you visit elevatenext.ai or any site of ours that links to this notice, use our applications (LeadConnector or the ElevateAI app), or interact with us in sales, marketing, or support. It also explains the difference between the data we control ourselves and the data our business customers manage inside their own ElevateAI accounts.
1. About This Notice
1.1 This notice is issued by ElevateAI, 8 The Green, Ste R, Dover, Delaware 19901, United States. Questions and requests: [email protected].
1.2 This notice describes our practices; it is a disclosure, not a contract. Our contractual commitments about personal data processed on behalf of our customers are in the Data Processing Agreement.
2. Our Two Roles: Your Data vs. Our Customers' Data
2.1 When we are the controller. We decide how and why to process personal information about: visitors to our websites; people who sign up for, administer, or use a ElevateAI account; and people who interact with our own sales, marketing, support, and affiliate programs. This notice covers that processing.
2.2 When we are a processor. Our customers are businesses. They upload and manage their own contacts, leads, and customers ("Customer Data") inside the platform. For Customer Data, the business you dealt with, not ElevateAI, is the controller, and we process it only on that business's instructions under the Data Processing Agreement.
2.3 If a business that uses ElevateAI has your information (for example, they text you, email you, or record a call with you), direct your privacy questions and requests to that business. If you contact us instead, we will forward your request to them where we can, or tell you who to contact.
3. Information We Collect
3.1 Information you give us: name, phone number, email address, mailing and billing address, job title, company details, username and password, contact preferences, and the content of your communications with us (including support conversations).
3.2 Payment information. When you make a purchase, payment card details are collected and processed by our PCI-DSS-compliant payment processor, Stripe (https://stripe.com/privacy), which stores your card data. We do not store full payment card numbers on our own systems; we retain limited billing records such as transaction amounts, card type, and last-four digits.
3.3 Information collected automatically: IP address, browser and device characteristics, operating system, language preferences, referring URLs, approximate location derived from IP address, log and usage data (pages viewed, features used, timestamps, error reports), and information collected by cookies and similar technologies (see Section 9).
3.4 Mobile app information. Our apps may request device permissions, such as camera, microphone, contacts, calendar, storage, or notifications, only as needed for features you choose to use, and you can change permissions at any time in your device settings. We collect device identifiers, operating system and version, and app diagnostic information to operate and troubleshoot the apps. If you enable push notifications, you can turn them off in your device settings.
3.5 Social login information. If you register or log in through a third-party account (such as Facebook or Google), we receive basic profile information from that provider, such as your name, email address, and profile picture, as described in Section 10.
3.6 Voice and communications content. If you or a business you interact with uses our calling, recording, transcription, or voice AI features, we process call audio, recordings, and transcripts as content, as described in Section 5.
3.7 We do not knowingly collect biometric information used to identify you (such as fingerprints or voiceprints), and we do not ask you to provide sensitive personal information such as health, genetic, or precise geolocation data. Account log-in credentials are the only category of sensitive personal information we collect from our own users, and we use them only to authenticate you.
4. How We Use Information
4.1 We use personal information to: create and manage accounts and authenticate users; provide, operate, and improve the Services; process payments and manage billing; respond to inquiries and provide support; send administrative information about the Services, our terms, and our policies; send marketing communications you can opt out of at any time; understand how the Services are used and measure the effectiveness of our marketing; protect the Services, prevent fraud and abuse, and enforce our terms; comply with law; and protect someone's vital interests where necessary.
4.2 We do not use Customer Data to market to our customers' contacts, and we do not sell personal information for money.
5. AI Features, Voice Calls, and Call Recording
5.1 The Services include AI features such as content generation, conversation AI, and voice AI. When these features are used, the relevant content (messages, prompts, call audio, and transcripts) is processed by us and by the AI service providers listed as subprocessors in the Data Processing Agreement, Annex C, to deliver the feature.
5.2 Calls placed or received through the platform may be recorded or transcribed when the business using the platform enables those features. Laws on call recording and disclosure vary by jurisdiction; the business that initiates recording is responsible for providing any required notice and obtaining any required consent.
5.3 We do not use voice recordings to build voiceprints or to identify individuals biometrically.
6. SMS and Text Messaging
6.1 If you opt in to a ElevateAI text messaging program, you consent to receive text messages from us at the number you provided, which may include account alerts, appointment reminders, order updates, responses to inquiries, and, where you have agreed, marketing messages and offers.
6.2 You can stop at any time by replying STOP to any message; you may receive one confirmation message. Reply HELP, email [email protected], or call +1 212 287 9171 for help. Message and data rates may apply, depending on your carrier and plan. Message frequency varies. Consent to marketing texts is not a condition of purchase.
6.3 Mobile opt-in data and consent are not shared with third parties for their own marketing purposes.
7. Legal Bases for Processing (EEA and UK)
7.1 If you are in the European Economic Area or the United Kingdom, we process your personal information only with a valid legal basis: your consent (which you can withdraw at any time); performance of a contract with you; our legitimate interests (such as securing and improving the Services, marketing our products, and preventing fraud) where those interests are not overridden by your rights; compliance with legal obligations; or protection of vital interests.
11. Where Information Is Processed; International Transfers
11.1 We are a US company, and the Services are hosted in the United States. Certain subprocessors process limited data in other countries, as listed in the Data Processing Agreement, Annex C.
11.2 If you access the Services from outside the United States, your information is transferred to and processed in the United States and the other countries described above. Where European, UK, or Swiss data protection law applies to a transfer, we rely on appropriate safeguards, the Standard Contractual Clauses and the UK Addendum, as incorporated in the Data Processing Agreement, Section 14.
12. How Long We Keep Information
12.1 In plain terms: we keep your account information for as long as your account is active. When a subscription is canceled or terminated, account data is permanently deleted shortly after the cancellation takes effect, with residual copies aging out of encrypted backups shortly after that. We keep limited records longer where the law requires it, for example billing and tax records, and security logs. The authoritative retention and deletion schedule is in the Data Processing Agreement, Section 12. Because deletion is fast and permanent, export any data you need before your cancellation takes effect.
13. How We Protect Information
13.1 We maintain technical and organizational security measures designed to protect personal information, including encryption in transit and at rest, access controls, logging and monitoring, and vulnerability management. The measures we commit to contractually are described in the Data Processing Agreement, Annex B. No system is completely secure, so we cannot guarantee absolute security; use the Services in a secure environment and protect your credentials.
14. Your Rights and Choices
14.1 Depending on where you live, you may have the right to: know whether we process your personal information and access a copy of it; correct inaccurate information; delete your information; receive your information in a portable format; opt out of targeted advertising, "sale"/"sharing," and certain profiling; limit the use of sensitive personal information; withdraw consent at any time; and not be discriminated against for exercising any of these rights.
14.2 How to exercise your rights: email [email protected]. You can also review or update account information by logging into your account settings at crm.elevatenext.ai, and unsubscribe from marketing at any time using the link in any marketing email or by replying STOP to any text.
14.3 We will verify your identity before acting on a request, using information we already hold where possible; if we need more, we will ask only for what verification requires and delete it afterward. You may use an authorized agent, but we may require proof of the agent's authority and, where the law allows, direct confirmation from you.
14.4 If your request concerns Customer Data held in a business's account, Section 2.3 applies: the business is the controller, and we will refer your request to it.
15. US State Privacy Rights
15.1 This section applies to residents of US states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. Residents of these states have some or all of the rights listed in Section 14, exercisable through the channels in Section 14.2.
15.2 Response times and appeals. We respond to verifiable requests within 45 days and may extend once by a further 45 days where reasonably necessary, telling you why. If we decline a request, we will explain our reasons, and you may appeal by replying to our decision or emailing [email protected] with "Appeal" in the subject line; we will respond to appeals within 60 days with a written explanation. If your appeal is denied, you may contact your state attorney general; for example, Virginia residents may submit a complaint at https://www.oag.state.va.us/consumer-protection/index.php/file-a-complaint.
15.3 Targeted advertising and "sharing." We do not sell personal information for money. We do share online identifiers with advertising platforms for cross-context behavioral advertising, as described in Section 8.2. To opt out, manage cookies in your browser settings or through our cookie banner when available, enable an opt-out preference signal (Section 18), or email [email protected]. We act on opt-out requests as soon as feasible and within 15 business days.
15.4 California disclosures. In the last 12 months we have collected the following categories of personal information, for the purposes in Section 4, from the sources in Section 3, and disclosed them to the service-provider categories in Section 8:
- (a) Identifiers (name, alias, address, phone, email, IP address, account name): collected.
- (b) Customer-records information (name, contact information, employment, financial information): collected.
- (c) Protected classifications (e.g., gender, date of birth): not collected.
- (d) Commercial information (transactions, purchase history): collected.
- (e) Biometric information: not collected.
- (f) Internet or network activity (browsing, usage, interactions with our sites and ads): collected.
- (g) Geolocation data (approximate, derived from IP address): collected.
- (h) Audio, electronic, or visual information (support call recordings; content you provide): collected.
- (i) Professional or employment-related information (business contact details; applicant information): collected.
- (j) Education information: not collected.
- (k) Inferences drawn from the above (preferences, characteristics): collected.
- (l) Sensitive personal information (account log-in credentials only): collected.
We retain each collected category for the period described in Section 12. We use sensitive personal information (log-in credentials) only to provide the Services and for security, which does not trigger a right to limit under the CCPA. California's "Shine the Light" law also lets California residents request, once a year and free of charge, information about disclosures to third parties for their direct marketing; we do not disclose personal information to third parties for their own direct marketing.
16. EEA, UK, Swiss, and Canadian Rights
16.1 If you are in the EEA, UK, or Switzerland, you have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR, UK GDPR, or Swiss data protection law, exercisable through the channels in Section 14.2. You also have the right to complain to your supervisory authority: EEA authorities are listed at https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm, and the Swiss authority at https://www.edoeb.admin.ch/edoeb/en/home.html.
16.2 If you are in Canada, we process your personal information with your express or implied consent, which you can withdraw at any time, except in the limited situations where processing without consent is permitted by law (such as fraud investigations, legal compliance, or emergencies).
17. Children
17.1 The Services are for adults and businesses. We do not knowingly collect information from, or market to, anyone under 18. If we learn we have collected personal information from someone under 18, we will deactivate the account and delete the data promptly. If you believe this has happened, contact [email protected].
18. Opt-Out Preference Signals and Do-Not-Track
18.1 We recognize opt-out preference signals such as the Global Privacy Control (GPC): when your browser sends one, we treat it as a request to opt out of targeted advertising and "sharing" for that browser. Because there is no finalized standard for legacy Do-Not-Track signals, we do not respond to DNT signals other than recognized opt-out preference signals.
19. Changes to This Notice
19.1 We may update this notice from time to time. The updated version will be posted on this page with a new effective date, and we will notify you of material changes by a prominent notice or by direct communication.
20. Contact and How to Exercise Your Rights
Privacy questions, requests, and appeals: [email protected]. Mail: ElevateAI, 8 The Green, Ste R, Dover, Delaware 19901, United States. Phone: +1 212 287 9171.
21. Prior Versions
21.1 This version of the Privacy Notice takes effect on the date at the top of this page and replaces all earlier versions.
10. Social Logins
10.1 If you register or log in using a third-party social account, we receive profile information from that provider, typically your name, email address, and profile picture, plus anything you have made public. We use it only for the purposes described in this notice. Your social provider's own use of your information is governed by its privacy notice, which we encourage you to review.