Privacy Policy

1. Introduction

Elevare, Inc. ("Elevare," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered job search and career acceleration platform, website, browser extension, and related services (collectively, the "Service").

This Privacy Policy applies to users worldwide and is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the California Consumer Privacy Act (CCPA) for California residents, and other applicable privacy laws.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our privacy practices, please do not use the Service.

2. Information We Collect

We collect information in several ways depending on how you interact with our Service.

2.1 Information You Provide Directly

Account Information

When you create an account, we collect:

• Full name
• Email address
• Password (stored in encrypted form)
• Profile photo (optional)
• Phone number (optional)

Resume and Career Data

To provide our core services, we collect:

• Resume content (work history, education, skills, achievements)
• Cover letters and application materials
• Job descriptions you target
• Professional certifications and licenses
• Portfolio links and work samples
• Career goals and preferences
• Interview notes and preparation materials

Job Application Tracking Data

• Applications you track (company names, positions, dates)
• Application status and notes
• Recruiter and contact information
• Interview schedules and outcomes
• Offer details and negotiations

Payment Information

When you subscribe to paid plans, payment processing is handled by third-party payment processors (Stripe, PayPal, Paddle). We do not store your full credit card numbers. We receive:

• Last four digits of payment cards
• Billing address
• Transaction history
• Subscription status

Communications

• Support requests and correspondence
• Feedback and survey responses
• Email communications you opt into

2.2 Information Collected Automatically

Device and Usage Information

When you access the Service, we automatically collect:

• IP address and approximate location (city/country level)
• Browser type and version
• Operating system
• Device type and identifiers
• Pages visited and features used
• Time spent on pages
• Referring URLs
• Click patterns and navigation paths

Cookies and Similar Technologies

We use cookies, web beacons, and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Understand how you use the Service
• Analyze and improve performance
• Deliver relevant content

See Section 6 for details on cookies and your choices.

2.3 Information from Third Parties

Single Sign-On Providers

If you sign in using Google, LinkedIn, or other OAuth providers, we receive:

• Name and email address
• Profile photo
• Basic profile information permitted by your privacy settings

Calendar Integrations

If you connect calendar services (Google Calendar, Outlook), we access:

• Event titles and times (for interview scheduling)
• Availability windows

We do not read the content of events unrelated to job applications.

Browser Extension Data

When using our browser extension, we may collect:

• Job listing URLs you interact with
• Job description content for tailoring assistance
• Application form fields (with your explicit action)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Create and manage your account
• Provide AI-powered resume tailoring and optimization
• Generate cover letters and application materials
• Track and manage your job applications
• Provide interview preparation assistance
• Enable Job Copilot automation features
• Enable Lead Hunt and contact discovery features
• Connect you with career mentors
• Process payments and manage subscriptions

3.2 Service Improvement

• Analyze usage patterns to improve features
• Train and improve our AI models (using anonymized data)
• Develop new features and services
• Fix bugs and technical issues
• Conduct research and analytics

3.3 Communications

• Send transactional emails (receipts, account updates)
• Provide customer support
• Send product updates and newsletters (with consent)
• Respond to your inquiries

3.4 Security and Compliance

• Protect against fraud and unauthorized access
• Enforce our Terms of Service
• Comply with legal obligations
• Respond to lawful requests from authorities

3.5 Legal Basis for Processing (GDPR)

For users in the EEA, we process your personal data based on the following legal grounds:

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies to perform services on our behalf:

• Payment Processors: Stripe, PayPal, Paddle — to process payments securely
• Cloud Infrastructure: Amazon Web Services, Google Cloud — to host and store data
• AI/ML Services: OpenAI, Anthropic — to power AI features (see Section 4.5)
• Email Services: To send transactional and marketing emails
• Analytics: To understand usage patterns
• Customer Support: To provide help desk services

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• To protect our rights, privacy, safety, or property
• To investigate suspected fraud or violations of our Terms

4.3 Business Transfers

In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our Service before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent, such as:

• Connecting your account to third-party services you choose
• Sharing application materials with employers (Job Copilot)
• Participating in mentor programs

4.5 AI Service Providers

To provide AI-powered features, we may send portions of your content (resumes, job descriptions, cover letters) to AI service providers. We implement the following safeguards:

• Data is transmitted securely using encryption
• We use enterprise agreements prohibiting data retention for model training
• Personally identifiable information is minimized when possible
• You can opt out of AI features in your account settings

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

5.1 Active Accounts

While your account is active, we retain all data necessary to provide the Service.

5.2 After Account Deletion

When you delete your account:

• Personal data is deleted or anonymized within 30 days
• Backups are purged within 90 days
• Some data may be retained longer if required by law (e.g., tax records for 7 years)
• Anonymized, aggregated data may be retained indefinitely for analytics

5.3 Inactive Accounts

Accounts with no activity for 24 months may be flagged for deletion. We will notify you before taking action.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

Essential Cookies

Required for the Service to function. These cannot be disabled.

• Authentication and session management
• Security features
• Load balancing

Functional Cookies

Remember your preferences and settings:

• Language preferences
• Theme settings (light/dark mode)
• Recently viewed items

Analytics Cookies

Help us understand how you use the Service:

• Pages visited and time spent
• Error tracking
• Performance metrics

Marketing Cookies

Used for advertising purposes (with consent):

• Ad campaign effectiveness
• Remarketing (where permitted)

6.2 Your Cookie Choices

You can manage cookie preferences through:

• Our cookie consent banner (displayed on first visit)
• Browser settings to block or delete cookies
• Third-party opt-out tools (NAI, DAA, EDAA for advertising cookies)

Note: Disabling essential cookies may prevent the Service from functioning properly.

6.3 Do Not Track

We currently do not respond to Do Not Track (DNT) browser signals, as there is no consistent industry standard for compliance.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 Rights for All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Data Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications

7.2 Additional Rights for EEA Residents (GDPR)

• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Portability: Receive data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Lodge Complaint: File a complaint with your local data protection authority

7.3 California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information we collect, use, disclose, and sell
• Delete personal information (with some exceptions)
• Opt out of the sale of personal information
• Non-discrimination for exercising privacy rights

We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA.

7.4 How to Exercise Your Rights

To exercise any of these rights, you may:

• Use the privacy controls in your account settings
• Email us at privacy@elevare.io
• Contact our Data Protection Officer (for GDPR requests)

We will respond to requests within 30 days (or as required by applicable law). We may need to verify your identity before processing requests.

8. International Data Transfers

Elevare is based in [Country], and your data may be processed in countries other than your own, including the United States and other jurisdictions where our service providers operate.

8.1 Transfer Mechanisms

When transferring data outside the EEA or UK, we use appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (where applicable)
• Adequacy decisions (for countries deemed adequate by the EU)
• Your explicit consent (where other mechanisms are unavailable)

8.2 Data Localization

Where required by law or contract, we can ensure certain data remains within specific geographic regions. Contact us for enterprise data residency options.

9. Security Measures

We implement comprehensive security measures to protect your data:

9.1 Technical Safeguards

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Secure password hashing
• Regular security assessments and penetration testing
• Web application firewalls
• DDoS protection
• Automated vulnerability scanning

9.2 Organizational Safeguards

• Role-based access controls
• Employee security training
• Background checks for employees with data access
• Confidentiality agreements
• Incident response procedures

9.3 Your Responsibilities

You can help protect your data by:

• Using a strong, unique password
• Enabling two-factor authentication
• Keeping your login credentials confidential
• Logging out on shared devices
• Reporting suspected security issues immediately

9.4 Breach Notification

In the event of a data breach affecting your personal information, we will notify you as required by applicable law. For EEA users, notification will occur within 72 hours when feasible.

10. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe we may have information from or about a child under 18, please contact us at privacy@elevare.io.

11. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.

We are not responsible for the content, privacy practices, or actions of third parties.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Privacy Inquiries

Data Protection Officer (EEA/UK)

For GDPR-related inquiries, you may contact our Data Protection Officer:

EEA Representative

[If applicable, add details of your EU representative pursuant to Article 27 of GDPR]

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes:

• We will update the "Effective Date" at the top
• We will notify you via email or in-app notification for significant changes
• We may provide a summary of key changes

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

14. Additional Disclosures

14.1 California Shine the Light

California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

14.2 Nevada Privacy Rights

Nevada residents may opt out of the sale of covered information. We do not currently sell covered information as defined under Nevada law. If you are a Nevada resident and wish to submit a request, please contact us at privacy@elevare.io.

14.3 Virginia Consumer Data Protection Act

Virginia residents have rights similar to those under CCPA, including access, deletion, correction, and opt-out of data sales. We do not sell personal data.