GDPR Compliance
Last Updated: March 2026
ELAV8.ai is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This page explains your rights under GDPR and how we handle your personal data in accordance with European data protection law.
ELAV8 is not currently available in the UK. We are actively developing our platform to ensure compliance and availability in the future. Our policies are being built to support this.
1. Overview
The GDPR is a regulation in EU law on data protection and privacy that gives individuals control over their personal data. As a company that serves users in the European Union, we are committed to complying with GDPR requirements.
This page supplements our Privacy Policy and provides specific information about how we process personal data of individuals in the European Economic Area (EEA) and the United Kingdom.
2. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
Right to Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete personal data.
Right to Erasure
You can ask us to delete your personal data in certain circumstances.
Right to Restrict Processing
You can ask us to limit how we use your personal data.
Right to Data Portability
You can request your data in a structured, commonly used format.
Right to Object
You can object to certain types of processing, such as direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you can withdraw it at any time.
3. Data We Collect
We collect and process the following categories of personal data:
- Contact information (name, email address)
- Account information (username, password hash)
- Voice data (audio recordings you submit for processing)
- Usage data (how you interact with our services)
- Device information (browser type, IP address)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract: Processing necessary to provide our services to you
- Consent: Where you have given explicit consent
- Legitimate Interests: For our business operations, provided they don't override your rights
- Legal Obligation: Where we are required by law
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymize it. You can request deletion of your data at any time by contacting us.
6. International Data Transfers
We may transfer your personal data to countries outside the EEA. When we do so, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Transfers to countries with adequate data protection laws
- Your explicit consent where appropriate
7. Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within one month, though this may be extended by two months for complex requests.
You also have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
8. Contact Information
For any GDPR-related questions or to exercise your rights, please contact us:
Data Protection Email: privacy@elav8.ai
Subject Line: GDPR Request