Privacy Policy

This Privacy Policy explains how Elevate Innovations ("Elevate," "we," "us," or "our") collects, uses, and protects information when you visit elvt.io, contact us, or engage our services. We keep this policy short, plain-language, and honest.

1. Who we are

Elevate Innovations is a United States-based software engineering company. We design, build, and scale custom software for founders, product teams, SaaS companies, and government contractors. This policy applies to our website, marketing interactions, and the pre-contract phase of any engagement. Active client engagements are governed by the data-handling terms in the signed Master Services Agreement or Statement of Work.

2. Information we collect

Information you provide directly

When you fill out a contact form, request a consultation, subscribe to updates, or email us, we collect the information you share with us. That typically includes your name, email address, company, project stage, and any message or attachments you send.

Information collected automatically

When you visit our website, we and our analytics providers automatically collect technical information such as the pages you view, the referring site that sent you to us, the approximate geographic location derived from your IP address, and high-level details about your device and browser.

Information from our partners

If you arrive at our site through a partner referral or an integration (for example, HubSpot tracking cookies set on a partner site), we may receive limited referral attribution data from those partners.

3. How we use information

We use the information we collect to:

• Respond to your inquiries and schedule introductory calls.
• Scope and deliver engineering engagements you hire us for.
• Send project updates and, only if you have explicitly opted in, marketing content such as quarterly insights.
• Measure how our website performs and improve the content people read.
• Comply with our legal obligations and protect our rights.

We do not sell or rent personal information. We do not use personal information to train machine-learning models.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your personal information:

• Legitimate interests, for running our business, responding to inquiries, and improving our website.
• Consent, for marketing emails and non-essential cookies. You may withdraw consent at any time.
• Contractual necessity, when you are a client and we process information to deliver the services you hired us for.
• Legal obligation, when we are required to retain or disclose information by applicable law.

5. Third-party services we use

We rely on a short list of trusted third-party providers to run our business. Each provider only receives the information needed for the function we use them for.

• HubSpot, contact forms, CRM, lead management, and marketing email.
• Google Analytics, anonymized website analytics.
• Cloudways & WordPress, website hosting and content management.
• AWS, Google Cloud, and similar infrastructure providers, for hosting our clients' work, under the terms of each engagement.
• Video-conferencing tools, for scheduled calls.

All providers are required, contractually or by law, to protect the information we share with them.

6. Cookies

Our website uses a small number of cookies for:

• Essential site functions, required for the site to load correctly.
• Anonymized analytics, Google Analytics, to understand how visitors use the site.
• Form attribution, HubSpot tracking, enabled only after you submit a form.

You can disable or delete cookies in your browser settings. Some site features may not work as expected if you do.

7. Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Request that we delete your personal information.
• Opt out of marketing communications.
• Receive a copy of your personal information in a portable format.
• Object to or restrict certain processing activities.

To exercise any of these rights, email hello@elvt.io. We will respond within the timeframes required by applicable law (typically 30 days). We may need to verify your identity before acting on a request.

8. Data retention

We retain contact-form submissions and email correspondence for the duration of our business relationship with you plus three years, unless you ask us to delete the information earlier. Client-project data is retained per the terms of the signed agreement with each client and is typically returned or securely destroyed at the end of the engagement.

9. Security

We use reasonable technical and organizational measures to protect information, including encrypted storage, strong access controls, two-factor authentication on all admin accounts, and regular security reviews of our own practices. No method of electronic transmission or storage is 100% secure, but we take this responsibility seriously and will notify affected parties without undue delay if a breach occurs that materially impacts their data.

10. Children's privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please email us so we can delete it.

11. International transfers

We are based in the United States, and our service providers may process information outside the country where you reside. Where required by law, we use Standard Contractual Clauses or equivalent mechanisms to protect information transferred internationally.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify you directly (for example, by email if we have one on file).

13. Contact us