Privacy Policy
Last Updated: August 25th, 2025
Your privacy is important to us. This Privacy Policy describes how ELAV8.ai ("ELAV8.ai", "we", "us", or "our") collects, uses, and shares your personal information when you use our website, mobile application, and related services (collectively, the "Services"). By using the Services, you agree to the collection and use of information in accordance with this Policy. If you do not agree with our practices, please do not use the Services. If you have any questions or concerns about this Policy, contact us at contact@elav8.ai.
1. Information We Collect
In Short: We collect personal information that you provide to us, information from your use of our Services (including through connected third-party services), and information collected automatically (like device and usage data).
1.1 Information You Provide to Us
We collect personal information that you voluntarily provide when using ELAV8.ai. This includes:
- Account Information: When you create an account, we collect information such as your name, email address, password, and profile details, and may collect information such as your address, or if a business entity, the address of your office. If you sign up or log in via third-party identity providers (Google, Apple, Facebook, etc.), we receive certain profile information from those services (e.g. your name, email, and profile picture). We use this information to set up your account and authenticate your identity.
- Content and Inputs: We collect the content you input into the Services in order to perform the tasks you request. This includes text, voice recordings, images, calendar events, task lists, shopping lists, and any other data you submit. For example, if you use our AI assistant to enter proprietary data or information, create business plans, plan tasks or create a shopping list, the details of your requests and any files or data you provide (such as voice notes or photos for a vision board) are collected so we can assist you. Audio Data: If you use voice features, we may collect and process audio recordings or transcripts of your voice commands to understand your requests and respond appropriately (e.g., using speech-to-text technology).
- Sensitive Data: We do not intentionally collect sensitive categories of personal information such as health data, biometric identifiers, financial account details, Social Security numbers, or government-issued IDs. Please do not submit this type of information to our Services. If you do, it will be processed only as necessary to fulfill your request, and we disclaim liability for handling of such sensitive data outside the intended scope of our Services.
- Third-Party Integrations: If you choose to connect external accounts or services to ELAV8.ai (such as your calendar, to-do list, or other apps), we will access and process information from those services with your permission in order to provide the integration. For example, if you authorize ELAV8.ai to sync with your Google Calendar, we may access your calendar events and basic profile info to add or update events on your behalf. We abide by the terms of those third-party APIs; for instance, if we integrate with Google APIs, we will use your Google data only to perform the requested tasks and not for any other purposes like training our models. We do not transfer Google user data to any third-party AI or use it to improve or train unrelated models. Any data obtained from third-party services will be handled in accordance with this Privacy Policy and the permissions you grant.
- Communications: If you contact us directly (for support, feedback, or other inquiries), we will receive the content of your communications and any contact information you provide (like your email or phone number). We will use this information to respond to you and resolve any issues.
- Payment Information: If you make a purchase or subscribe to a paid feature (now or in the future), we may collect payment information. This can include billing name, billing address, and a payment method (e.g. credit card details). Note: We use third-party payment processors (such as Stripe) to handle your payment transactions. Payment details are transmitted directly to the processor and are not stored on our servers, except for basic information like transaction identifiers or the last four digits of your card for record-keeping. The third-party processor's privacy policy will apply to your payment information.
1.2 Information We Collect Automatically
When you use our Services, we automatically collect certain information about your device and usage of the Services:
- Device and Technical Data: We collect data about the device and app you use to access ELAV8.ai. This includes your device type, operating system version, unique device identifiers, browser type, IP address, and device settings. If you use a mobile device, we may also collect mobile network information and the device's name and model.
- Usage and Log Data: We gather information about how you interact with our Services. This includes timestamps of access, pages or screens viewed, features used, links clicked, and actions taken (for example, tasks created or voice commands given). We also log diagnostic details like crashes, errors, and load times to help us fix issues and improve performance.
- Cookies and Tracking Technologies: Like many online services, we use cookies and similar tracking technologies to provide and personalize our Services. Cookies are small text files stored on your browser or device. They help us remember your preferences, maintain your login session, and understand how users navigate through our site. We may use both first-party and third-party cookies (for analytics and functionality). You can control or delete cookies through your browser settings, but note that some parts of our Service may not function properly without them. For more detailed information about our use of cookies and tracking technologies, please see our separate Cookie Policy, which is incorporated by reference into this Privacy Policy.
- Location Information: We do not collect precise GPS location by default, but we may infer your general location (e.g., city or region) from your IP address when you use the Services. This helps us customize content (such as time zone settings or relevant results) and for security (e.g., detecting unusual account access). If in the future we offer features that use precise location (for example, location-based reminders), we will only collect that with your explicit permission. You can always choose not to share precise location by adjusting your device settings.
- Device Permissions: Depending on your device and how you use ELAV8.ai, we may request certain device permissions. For example, we might ask to access your microphone (to enable voice assistant features), camera or photos (to allow you to add images to a vision board or scan items for a shopping list), or contacts/calendar (if you want to import contacts or schedule events). We will only access these features if you give consent, and you can revoke access at any time via your device or app settings. If you decline permissions, some features may not function (for instance, voice input will be disabled if microphone access is not granted).
1.3 Information from Third Parties
Apart from the third-party integrations you connect (discussed above), we may also receive information from other sources:
- Social Login Providers: If you register or log in via a third-party platform (like Google, Apple, or Facebook OAuth), that platform may send us information such as your name, email, and profile image, as noted in Account Information above. We do not receive your password from these providers. We use this data solely to streamline your registration/login and for account management.
- Service Providers and Partners: We might receive technical data or usage analytics from service providers we work with (for example, an analytics service might provide aggregated insights about how users use our app). We may also receive basic transaction data from app store platforms or distribution partners if you install the app through such channels (e.g., confirmation of download or purchase).
We do not purchase personal data from data brokers or other third-party sources. Also, as of now, we do not collect information about you from social media or public databases unless you explicitly interact with us there or grant permission.
2. How We Use Your Information
In Short: We use personal data to operate and improve our Services, to communicate with you, to integrate with third-party services at your request, for internal analytics, and to ensure security and compliance. We do not sell your data to third parties, and any usage of data for improving our services is done in an aggregated or de-identified manner.
We may use the personal information we collect for purposes including:
- Providing and Improving the Service: We use your information to perform the core functionality of ELAV8.ai – for example, using the content you provide (tasks, voice queries, etc.) to generate responses or plan your schedule, and integrating with your calendar or other tools as you direct. This also includes using data to maintain and optimize our Services, fix bugs, and develop new features that enhance your experience.
- Personalization: We may use data such as your past activities, preferences, and general location to personalize the Services to you. For instance, we might tailor task suggestions or reminder times based on your usage patterns, or adjust responses to be more relevant to your context.
- Analytics and Product Development: We analyze usage data and feedback to understand how our Services are used and to make improvements. For example, we might look at which features are most popular or where users encounter difficulties, and use those insights to improve the interface or functionality. Importantly, when doing broader product research or development, we aggregate or de-identify personal data so that it no longer identifies any individual. This de-identified data may be used to analyze trends, monitor the effectiveness of our Services, or guide our development of new features (in line with the purposes described in this Policy). We do not use any personal information in a way that would publicly reveal your identity.
- AI Processing: ELAV8.ai uses artificial intelligence to power our assistant features. This means that some of your data (like the prompts or questions you give the assistant) may be sent to our AI processing engines or third-party AI service providers (for example, to OpenAI or similar providers, if we use their technology) in order to generate a response. We only share the data necessary for these AI services to function (such as the text of your query or relevant context), and we ensure that such providers are bound to protect your data and use it only for providing the service. Your inputs and the AI's outputs may be stored for troubleshooting or to improve our algorithms, but any use of this data for improving the system is done in accordance with this Privacy Policy and, where feasible, in an anonymized form. We will not use your personal data to train generalized machine learning models without applicable notice or consent. (If in future we decide to use user-provided content to train our own AI models, we will provide a way for you to opt out, consistent with industry practices.)
Please note: outputs generated by ELAV8.ai's AI may be inaccurate or incomplete and should not be relied on as a substitute for professional advice (medical, legal, financial, etc.). Users are responsible for how they use or share outputs. - Communication: We use contact information (like your email) to send you service-related communications. These include confirmations (for sign-ups or changes to your account), administrative messages, and reminders or alerts you set via the app (for example, a daily agenda email if you enable that). We may also send product updates, newsletters, or promotional offers if you have subscribed to them. You can opt out of marketing emails at any time by clicking the unsubscribe link in those emails or contacting us. (Transactional or account-critical emails, such as password resets or privacy updates, may still be sent as needed.)
- Security and Fraud Prevention: We process certain data to maintain the security of our Services and users. This includes using information to authenticate users, monitor for suspicious or unauthorized activity, debug and repair errors, and protect against fraudulent, abusive, or illegal behavior. For example, we may use IP addresses and other identifiers to detect potential malicious activity and prevent unauthorized access to accounts.
- Legal Compliance: We may use your information to comply with legal obligations or respond to lawful requests from authorities. For instance, keeping transaction records for accounting/tax purposes, or using data to meet obligations under consumer protection laws. Additionally, if we need to use your data to enforce our Terms of Service, to collect owed fees, or to resolve disputes, we will do so as necessary.
We will not use your personal information for purposes that are materially different from the ones described in this Policy without informing you and obtaining consent if required.
5. Data Retention
In Short: We keep your personal information for as long as needed to fulfill the purposes for which it was collected, or as required by law. We do not keep your data indefinitely by default. When your information is no longer necessary, we will either delete it or anonymize it.
We retain personal data for only as long as it is necessary to provide our Services and meet the purposes described in this Policy, unless a longer retention period is required or permitted by law. In determining how long to keep data, we consider factors such as the duration you have an account with us, the nature and volume of data, the potential risk of harm from unauthorized use or disclosure, and any legal obligations to retain certain records.
Typically, this means:
- Account Data: Information associated with your account (profile, content, settings) is kept as long as you have an active account. If you decide to delete your account or if it becomes inactive for an extended period, we will initiate the deletion of your personal data. Inactive account data may be deleted or anonymized after a reasonable period in accordance with our data retention schedule.
- Content and User-Provided Data: Content you have created (tasks, notes, events, etc.) will generally be deleted when you delete the content or your account, or earlier if you remove it manually. If you want us to delete specific personal data you provided, you can request that (see Your Rights below) and we will honor such requests in accordance with applicable law.
- Third-Party Integration Data: If you disconnect a third-party integration (like your calendar), we will stop collecting new data from that integration. We may retain information that was previously synced for consistency of your account (for example, events that had been imported) unless you delete them or request deletion.
- Transaction Records: If there are financial transactions (such as subscription payments), we may retain related personal information (like purchase records and invoices) for the period required by tax and financial regulations.
When we have no ongoing legitimate business need or legal requirement to keep your personal information, we will delete or anonymize it. If immediate deletion is not feasible (for example, because the data is stored in secure backups), we will securely store the data and isolate it from any further use until deletion is possible.
Backups: Please note that residual copies of your information might persist in backup media for a short period (due to our routine backup procedures), but they will be purged according to our backup retention policies. During that time, we will ensure the data remains protected and not used for any active purpose. Users may also request early deletion of their data at any time, even before the standard retention period expires, by contacting us at contact@elav8.ai.
6. Data Security
In Short: We take reasonable and appropriate measures to protect your personal information from loss, misuse, and unauthorized access. However, no system is 100% secure, and we cannot guarantee absolute security of your data.
We have implemented a combination of technical, administrative, and physical safeguards to protect your information. These measures include encryption of data in transit (e.g., using TLS/HTTPS for our website) and at rest (we encrypt sensitive data stored on our servers), access controls to restrict who within our company can access personal data, and security protocols and training for our team. We also regularly monitor our systems for vulnerabilities and attacks and will update our security measures as needed to address new threats.
Despite our efforts, please understand that no method of transmitting information over the internet or electronic storage is completely secure. For example, email or cloud storage can be subject to security breaches beyond our control. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You should also play a role in protecting your data by choosing a strong, unique password for ELAV8.ai, not sharing your account credentials, and using secure networks to access our Services.
In the event of a data breach affecting your personal information, we will notify you and relevant authorities without undue delay, and in no case later than 72 hours where legally required (e.g., under GDPR).
7. Children's Privacy
In Short: Our Services are not intended for children under the age of 13, and we do not knowingly collect personal information from them. Minors aged 13 to 17 should only use the Services with parental or guardian permission.
ELAV8.ai is designed for use by adults and individuals at least 13 years old. We do not knowingly solicit or collect personal data from children under 13 years of age. If you are under 13, please do not use our Services or provide any personal information to us. If we learn that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly.
If you are between 13 and 18 (or the age of majority in your jurisdiction), you must have permission from your parent or legal guardian to use ELAV8.ai. We encourage parents to be aware of and guide their teenagers' online activities and to inform them of potential risks of sharing personal information on internet platforms.
If you believe that we might have any information from or about a child under 13 (or an underage user without proper consent), please contact us immediately at contact@elav8.ai.
We comply with the U.S. Children's Online Privacy Protection Act (COPPA). If we discover that we have collected information from a child under 13 without verified parental consent, we will promptly delete it.
8. Your Privacy Rights and Choices
In Short: You have certain rights regarding your personal information. These may include the right to access, correct, or delete your data, and to opt out of certain data practices. We honor the rights of users as required by applicable laws (such as state privacy laws in the U.S.), and we provide ways for you to control your information.
Depending on your location and applicable law, your rights may include:
- Access and Portability: You can request a copy of the personal information we hold about you, and information about how we process it. This includes the right to receive your data in a common electronic format (to the extent required by law).
- Correction: If any of your personal data is inaccurate or outdated, you have the right to request that we correct or update it.
- Deletion: You can ask us to delete your personal information. For example, you may delete your account via the account settings (if available) or request account deletion through customer support. We will delete or anonymize information in response to a verified request, except for information we are required or permitted to retain by law (e.g., for safety, legal compliance, or legitimate business purposes). Keep in mind that removal from active databases may not immediately remove residual data from backups, which will be cleared in the normal backup retention cycle.
- Opt-Out of Marketing: If we send you promotional emails, you can unsubscribe at any time by clicking the unsubscribe link in those emails or by adjusting your email preferences in your account. You can also contact us to be removed from our mailing lists. (Note: Even if you opt out of marketing, we may still send you non-promotional messages, like those about your account or service updates.)
- Opt-Out of Data Sharing for Advertising: We do not currently share data for cross-context behavioral advertising or sell your data, as noted above. If that ever changes, and if you are in a jurisdiction like California that grants the right to opt out of such sharing/sale, we will provide you with a method to do so (for example, a "Do Not Sell or Share My Personal Information" link). As of now, this is not applicable since we do not engage in those practices.
- Non-Discrimination: We will not deny you our Services or provide a different level of service if you exercise any of your privacy rights. You are entitled to equal service and pricing, even after exercising your rights, as provided by law.
To exercise your rights, you (or an authorized agent acting on your behalf) can contact us at contact@elav8.ai with your request. We will need to verify your identity (and authority, if through an agent) before fulfilling certain requests, to ensure we protect your data from unauthorized access. Verification measures may include confirming control of your account email or other information we have on file. We will respond to valid requests within the timeframe required by law (typically within 45 days for California residents, for example, with the possibility of a reasonable extension). If we cannot fulfill your request, we will explain the reasons (such as if the data is exempt from deletion or if we cannot verify your identity).
Additional U.S. State Rights: If you are a resident of certain states (such as California or Virginia), you may have specific rights under state laws. For instance, California residents have the right to know what categories of personal information have been collected, used, and disclosed (and whether any has been "sold" or "shared"), the right to opt out of sale/sharing of personal information, and the right to limit use of sensitive personal information. Because we do not sell or share personal data for targeted advertising, the opt-out rights may not apply in a conventional sense. California and Virginia residents also have the right to correct inaccurate personal data and to appeal a refusal to act on a rights request. We will make disclosures and honor rights requests in accordance with those state laws. For a detailed list of the categories of data we collect and how we use/share it, you can refer to the relevant sections of this Policy (which together provide the information required by the California Consumer Privacy Act (CCPA) and similar laws).
If you have any questions about your privacy rights or need assistance exercising them, please contact us. We are committed to respecting your rights and ensuring you have control over your personal information.
9. International Users and Data Transfers
While ELAV8.ai is currently focused on users in the United States, our Service may be accessed from outside the U.S. If you use the Services from another country, be aware that your information will be transferred to and processed in the United States (or other jurisdictions where we or our service providers operate). The data protection laws in these jurisdictions may differ from those in your home country.
We will take steps to ensure that appropriate safeguards are in place to protect your data in transit and at the destination. For example, we may rely on standard contractual clauses or other lawful transfer mechanisms for any transfer of personal data from the European Economic Area (EEA), United Kingdom, or other regions with data transfer restrictions. By using our Services, you consent to your information being transferred to our facilities and those third parties with whom we share it as described in this Policy.
If you are an international user, you may have additional rights under your local laws (for example, the GDPR in Europe grants rights to access, delete, object, restrict processing, and more – see Your Privacy Rights above). We aim to provide a privacy-respecting service globally, and we will comply with applicable legal requirements. If you have any concerns about our data practices as an international user, please contact us.
10. Changes to this Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will post the updated Policy with a new "Last Updated" date at the top. If the changes are significant, we may also notify you by email (sent to the address specified in your account) or through a notice on our website or app. We encourage you to review this Policy periodically to stay informed about how we are protecting your information.
Your continued use of ELAV8.ai after any changes to this Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by law. If you do not agree with any update, you should stop using the Services and can request that we delete your personal data.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: contact@elav8.ai
Address:
ELAV8.ai, Inc.
1343 Main St. Ste 205
Sarasota, FL 34236
United States
Attn: Privacy Department
We will do our best to address your inquiry promptly. Your trust is important to us, and we welcome feedback on how we can better protect and respect your privacy.
Thank you for reading our Privacy Policy. By using ELAV8.ai, you entrust us with your information, and we are committed to honoring that trust by managing your data in a safe and transparent manner.