Privacy Policy

This Privacy Policy explains how Elev8 ("Elev8," "we," "us," or "our") collects, uses, and shares information when you visit our website at elev8.inc, engage our marketing agency services, or use our software platform, Elev8 Agency, at app.elev8.inc (together, the "Services"). By using the Services, you agree to this Policy.

1. Information we collect

Information you provide. When you book a demo, contact us, subscribe to updates, or become a client, you may give us your name, email, company, phone number, and details about your business and goals. When you create a platform account, we collect your account and billing information.

Information you add to the platform. As a platform user, you input briefs, business details, and, if you manage clients, information about those clients and their brands. This is stored in your workspaces so the engines can produce work for you.

Information collected automatically. When you use the website or platform, we and our providers may collect device and usage data such as IP address, browser type, pages viewed, and interactions, using cookies and similar technologies.

Information from connected accounts. If you connect third-party accounts to the platform, such as Google Analytics or Google Ads, we access data from those accounts with your authorization to provide the Services. For Google accounts this is read-only performance data, such as website traffic, conversions, campaign metrics, and advertising spend. We use this data solely to generate strategies, reports, and recommendations within your workspace. Authorization credentials are stored encrypted. You can disconnect a connected account at any time from the platform or from your Google account's security settings, and you may request deletion of previously synced data by contacting us.

Elev8 Agency's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

2. How we use information

We use information to provide, operate, and improve the Services; to respond to inquiries and deliver agency work; to run and support your platform account and process payments; to personalize and secure the Services; to send service and, where permitted, marketing communications; and to comply with legal obligations.

3. AI processing and your data

The platform uses artificial intelligence to generate deliverables from the information in your workspaces. Your workspace data is used to provide the Services to you. We do not sell your data, we do not share one customer's data with another, and we do not use your private workspace content, including data from connected accounts, to train third-party foundation models. Content you choose to publish is, of course, public once you publish it.

4. Connected data sources

The platform lets you (or your account manager, with your authorization) connect third-party business accounts, such as Google Analytics and Shopify, so that the Services can analyze your real marketing and sales performance.

What we collect. When you connect a source, we collect only the reporting data needed to provide analytics and AI-generated marketing recommendations for your own business. For Shopify, this means order totals, product performance, and store-level sales aggregates. We store daily aggregates, not individual customer records, and we do not store your customers' names, email addresses, phone numbers, or shipping addresses.

How access works. Connections are read-only and use each platform's official authorization flow. You approve access directly on the platform (for example, in your Shopify admin), and you can revoke it there at any time. Access credentials are encrypted at rest using AES-256-GCM.

How it is used. Connected data is used solely to provide the Services to the workspace it belongs to: dashboards, reporting, and AI-generated strategy and recommendations for that business. It is never shared across customers, never sold, and never used to train third-party foundation models.

Deletion. Disconnecting a source stops all collection immediately, and you may choose to delete previously synced data at the same time. If the Elev8 app is uninstalled from a Shopify store, we automatically delete that store's synced data in accordance with Shopify's data deletion requirements. We honor customer data access and deletion requests relayed by the platforms we integrate with (including Shopify's GDPR webhooks).

5. How we share information

We share information only as needed: with service providers who host, process payments for, analyze, or support the Services under confidentiality obligations; when required by law or to protect rights, safety, and security; and in connection with a merger, acquisition, or sale of assets, in which case we will seek to ensure the receiving party honors this Policy. We do not sell personal information.

6. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. You can control cookies through your browser settings, though some features may not work without them.

7. Data retention

We keep information for as long as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Platform content is retained for the life of your account and deleted or anonymized within a reasonable period after account closure, unless we are required to keep it. Data synced from connected sources (such as Shopify or Google Analytics) is deleted when you disconnect the source and choose to remove it, and automatically when an app connection is uninstalled from the source platform.

8. Security

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address issues that arise. Credentials for connected data sources are encrypted at rest using industry-standard encryption (AES-256-GCM), and connected-source access is read-only.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of marketing. To exercise these rights, contact us at hello@elev8.inc. We will respond as required by applicable law, including the GDPR and the CCPA where they apply. You can unsubscribe from marketing emails at any time using the link in those emails.

10. International transfers

We are based in the United States and may process information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers of personal information.

11. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

12. Third-party links

Our Services link to third-party sites and tools that we do not control. This Policy does not cover their practices, and we encourage you to review their privacy policies.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes may be communicated through the Services. Your continued use after changes take effect means you accept the updated Policy.

14. Contact

Questions or requests about privacy can be sent to hello@elev8.inc, or by mail to Elev8, 30 N. Gould, Ste. R, Sheridan, WY 82801.