Privacy Policy

Introduction

Elevait Labs (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, our websites, and our mobile applications.

Elevait is a personal and career development platform. Using it means sharing things about yourself — how you answer an assessment, what you talk about with Amber, what you are trying to change. This policy sets out exactly what happens to that information.

Information We Collect

Information you provide

• Contact information, such as your email address and name
• Account credentials, handled by our authentication provider
• Demographic details you choose to enter during onboarding
• Your responses to the HEXACO personality assessment, and the trait and facet scores calculated from them
• The content of your conversations with Amber, including messages you write and the narrative material you share about your life and work
• Anything you send us directly, such as support requests or feedback

Voice conversations

If you use voice features, your audio is transmitted to our speech-processing provider and converted to text. We do not store your audio recordings — audio is processed in memory and discarded once transcription completes. The resulting transcript is stored as part of your conversation history.

During voice conversations we also derive speech characteristics such as speaking rate and pause patterns. These are used momentarily, together with the words you speak, to help Amber recognise when someone may be in distress and respond appropriately. These speech characteristics are not stored and are not used for any other purpose. See “Wellbeing signals” below.

Information generated by the platform

• Your progress through onboarding and the stages of your journey
• A personality summary and profile generated from your assessment results
• Mathematical representations (embeddings) of your narrative content, used so Amber can recall relevant context in later conversations
• Engagement data such as experience points, levels, and streaks
• Subscription and billing status
• Technical error logs used to diagnose faults

Website analytics

We record anonymous, cookieless events on our public website — for example that a button was clicked on a particular page. These contain no personal identifiers and are not linked to your account.

We also use cookie-based analytics and advertising measurement tools. These load only if you accept cookies when prompted. If you decline, they are not loaded at all. You can change your choice at any time by clearing your browser storage for our site.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate your personality profile and personalise Amber's responses to your situation
• Maintain continuity, so Amber can recall relevant context across conversations
• Process subscriptions and manage billing
• Communicate with you about updates, new features, and service changes
• Understand aggregate usage patterns so we can improve the platform
• Protect against unauthorised access, fraud, and abuse
• Comply with legal obligations

We do not sell your personal information, and we do not share it with advertisers, employers, or data brokers. We do not use the content of your conversations or your assessment results to train publicly-available AI models.

AI Processing and Service Providers

Amber is built on large language models operated by third-party providers. To generate a response, the relevant parts of your conversation, and context drawn from your profile and earlier sessions, are transmitted to those providers for processing.

We work with the following categories of service provider, who process personal data on our behalf and under contract:

Payment card details are collected and processed directly by our payment provider and never reach our servers.

Wellbeing Signals

Amber is designed to notice when a conversation suggests someone may be struggling, and to respond by encouraging them toward real human support. To do this, it evaluates the words you use and — in voice conversations — characteristics of your speech such as pace and pauses.

This evaluation happens in the moment and is not retained. It is not a diagnosis, not a medical assessment, and not a clinical record. Elevait is not a medical device, not therapy, and not a substitute for professional care. If you are in crisis, please contact your local emergency services or a crisis line.

Sharing Your Information

We share your information only in these circumstances:

• With service providers listed above, to operate the platform
• When you choose to share results. If you create a shareable link to your personality results, anyone holding that link can view the results and first name it contains, without signing in. Treat these links as public. You can ask us to revoke a link at any time.
• If required by law, or to protect the rights, safety, or property of our users or the public
• In a business transfer, such as a merger or acquisition, in which case we will notify you before your information becomes subject to a different policy

If you access Elevait through an organisation, that organisation does not receive your individual assessment results or the content of your conversations.

Data Retention

We retain your information for as long as your account remains active. If you delete your account, we delete your personal data — including your assessment responses, profile, conversation history, stored narrative content, and any shareable result links — from our production systems. Deletion means deletion, not archiving.

Limited records may be retained where we are legally required to keep them, such as billing records needed for tax and accounting purposes. Backups are retained on a rolling basis and are overwritten in the ordinary course.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. Data is encrypted in transit and at rest, and internal access is restricted to those who need it to operate the service. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. You may also withdraw consent for cookie-based analytics at any time.

We will not discriminate against you for exercising any of these rights. To make a request, contact us at the address below and a person will handle it.

Deleting Your Account

You can request deletion of your account and all associated personal data at any time by writing to privacy@elevaitlabs.ai. We will confirm once deletion is complete.

Children's Privacy

Elevait is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

International Transfers

We and our service providers operate internationally, which means your information may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for those transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date above.

Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us at privacy@elevaitlabs.ai.