Introduction
Elevant.AI provides an AI-based software solution (the “Software) as a service (the “Services”) for automated strategy design, enterprise architecture, and change management. As part of running these services we collect data about you and your business. This data is not only essential to run our services, but also critical for the safety of our services and all our users.
This policy explains what information is collected, why it is collected, and how we use it.
Privacy Policy
Information we collect
Most of the personal data we collect is directly provided by our users when they register and use our services. Other data is collected by recording interactions with our services.
Account & Contact Data: When you register on our website to use our Services or fill in one of our contact forms, you voluntarily give us certain information. This typically includes your name, company name, email address, and sometimes your phone number, postal address (when an invoice or delivery is required), as well as a personal password.
We never record or store credit card information from our customers.
Job Application Data: When you apply for a job on our website or via an employment agency, we usually collect your contact information (name, email, phone) and any information you choose to share with us in your introduction letter and Curriculum Vitae. If we decide to send you a job proposition, we will also ask you to provide extra personal details as required to fulfill our legal obligations and personnel management requirements.
We will not ask you to provide information that is not necessary for the recruitment process. In particular, we will never collect any information about your racial or ethnic origin, political opinions, religious beliefs, trade union membership or sexual life.
Browser Data: When you visit our website and access our online services, we detect and store your browser language and geolocation in order to customize your experience according to your country and preferred language. Our servers also passively record a summary of the information sent by your browser for statistical, security and legal purposes: your IP address, the time and date of your visit and the page or resource you are accessing, your browser version and platform, and the web page that referred you to our website.
Your browser may also be used to store and retrieved your current session data, with the help of a session cookie (see also the Cookie section for more details).
Form protection: Some forms on our website may be protected by Google reCAPTCHA. This technology relies on heuristics that are based on technical characteristics of your browser and device and may also use specific Google cookies. See also Google Privacy Policy and Terms of Use.
Customer Account: When you subscribe to Elevant.AI services and create your own teams, projects and pages, any information or content you submit or upload into your database is your own, and you control it fully.
This data will often include personal information, for example: your list of employees, your contacts and customers, your messages, pictures, videos, etc. We only ever collect this information on your behalf, and you always retain ownership and full control on this data.
How we use this information
Account & Contact Data: We use your contact information in order to provide our services, to answer your requests, and for billing and account management reasons. We may also use this information for marketing and communication purposes (our marketing messages always come with a way for you to opt-out at any time). We also use this data in aggregated/anonymised form in order to analyze service trends.
If you have registered to participate in an event published on our website, we may transfer your name, email address, phone number and company name to our local organizer and to the sponsors of the event for both direct marketing purposes and in order to facilitate the preparations and booking for the event.
Job Application Data: We will only process this information for our recruitment process, in order to evaluate and follow-up with your application, and in the course of preparing your contract, if we decide to send you a job proposition. You may contact us at any time to request the deletion of your information.
Browser Data: This automatically recorded data is anonymously analyzed in order to maintain and improve our services. Google reCAPTCHA may also be used for security purposes, in order to prevent abuse of our services. In that case we only process the anonymous score that reCAPTCHA determines based on your browser and device.
We will only correlate this data with your personal data when required by law or for security purposes, if you have violated our Acceptable Use Policy.
Customer Account: We only collect and process this data on your behalf, in order to perform the services you have subscribed to.
Our Helpdesk staff and engineers may access this information in a limited and reasonable manner in order to solve any issue with our services, or at your explicit request for support reasons, or as required by law, or to ensure the security of our services in case of violation of our Acceptable Use Policy in order to keep our services secure.
Segregation by project: Elevant.AI is organized around the notion of projects. Each project is one instance of Elevant.AI's AI assistant. By design, all information uploaded inside a project stays in that specific project and is not used nor shared with other projects, unless the user decides to share the same information between projects.
Accessing, Updating or Deleting Your Personal Information
Account & Contact Data: You have the right to access and update personal data you have previously provided to us. You can do so at any time by connecting to your personal account on Elevant.AI. If you wish to permanently delete your account or personal information for a legitimate purpose, please contact our Helpdesk to request so. We will take all reasonable steps to permanently delete your personal information, except when we are required to keep it for legal reasons (typically, for administration, billing and tax reporting reasons).
Job Application Data: You may contact us at any time to request access, updates or deletion of your application information. The easiest way to do it is to reply to the last message you exchanged with our Human Resource personnel.
Customer Account: You can manage any data collected in your account on Elevant.AI at any time, using your administration credentials, including modifying or deleting any personal data stored therein.
Safety Retention Period: we retain a copy of your data in our backups for safety reasons, even after they are destroyed from our live systems. We always try to preserve your data from accidental or malicious deletion. As a result, after we delete any of your personal information (Account & Contact Data) from our database upon request from you, or after you delete any personal information from your database, it is not immediately deleted from our backup systems, which are secured and inalterable. The personal data could remain stored for up to 12 months in those backups, until they are automatically destroyed.
We commit not to use those backup copies of your deleted data for any purpose except for maintaining the integrity of our backups, unless you or the law require us to do so.
Security
We realize how important and sensitive your personal data is, and we take a great number of measures to ensure that this information is securely processed, stored and preserved from data loss and unauthorized access.
Data Retention
Account & Contact Data: we will only retain such data as long as necessary for the purpose for which it was collected, as laid out in this policy, including any legal retention period, or as long as necessary to carry out a legitimate and reasonable promotion of our products and services.
Job Application Data: If we do not hire you, we may keep the information you provide for up to 3 years in order to contact you again for any new job proposition that may come up, unless you ask us not to do so. If we hire you, your personal information will be stored for the duration of your employment contract with us, and afterwards, during the applicable legal retention period that applies in the country where we employed you.
Browser Data: we may retain this data for a maximum of 12 months, unless we need to keep it in relation with a legitimate concern related to the security or performance of our services, or as required by law. Any server-side session information is discarded maximum 7 days after it stops being actively used.
Server Logs & Security Logs: we retain those logs for a maximum of 12 months, unless we need to keep them in relation with a legitimate concern related to the security or performance of our services, or as required by law.
Customer Account: we will only retain this data as long as necessary for providing the services you subscribed to.
Physical Data Location
Customer data are hosted in France.
For customers concerned about EU data protection regulations, the mentioned countries are in EU or currently subject to an adequacy decision from EU authorities.
Third Party Disclosure
Except as explicitly mentioned above, we do not sell, trade, or otherwise transfer your personal data to third parties. We may share or disclose aggregated or de-identified information, for research purposes, or to discuss trends or statistics with third-parties.
Cookies
Cookies are small bits of text sent by our servers to your computer or device when you access our services. They are stored in your browser and later sent back to our servers so that we can provide contextual content. Without cookies, using the web would be a much more frustrating experience. We use them to support your activities on our website, for example your session (so you don't have to login again).
Cookies are also used to help us understand your preferences based on previous or current activity on our website (the pages you have visited), your language and country, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.
We also use third-party services such as Google Analytics, who set and use their own cookies to identify visitors and provide their own contextual services. For more information regarding those third-party providers and their Cookie Policy, please see the relevant references in the Third-Party Privacy Policies.
Here is an overview of the cookies that may be stored on your device when you visit our website:
|
Category of Cookie |
Purpose |
Cookies |
|
Session & Security |
Authenticate users, protect user data and allow the website to deliver the services users expect, such as maintaining the content of their cart, or allowing file uploads.
The website will not work properly if you reject or discard those cookies. |
session_id (Odoo) td_id (Odoo) fileToken (Odoo) __cfduid (CloudFlare) |
|
Preferences |
Remember information about the preferred look or behavior of the website, such as your preferred language, region and timezone. Your experience may be degraded if you discard those cookies, but the website will still work. |
frontend_lang (Odoo) cids (Odoo) odoo_no_push (Odoo) tz (Odoo) |
|
Interaction History |
Used to collect information about your interactions with the website, the pages you've seen, and any specific marketing campaign that brought you to the website. We may not be able to provide the best service to you if you reject those cookies, but the website will work. |
im_livechat_history (Odoo) im_livechat_previous_operator_pid (Odoo) utm_campaign (Odoo) utm_source (Odoo) utm_medium (Odoo) fs_uid (FullStory) |
|
Analytics |
Understand how visitors engage with our website, via Google Analytics. Learn more about Analytics cookies and privacy information.
The website will still work if you reject or discard those cookies. |
_ga (Google) _gat (Google) _gid (Google) _gac_* (Google) |
You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookies or look at the links below.
Chrome: https://support.google.com/chrome/answer/95647?hl=en
Edge: https://support.microsoft.com/en-us/help/4468242/microsoft-edge-browsing-data-and-privacy
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Policy Updates
We may update this Privacy Policy from time to time, in order to clarify it, to reflect any changes to our website, or to comply with legal obligations. The "Last Updated" mention at the top of the policy indicates the last revision, which is also the effective date of those changes. We give you access to archived versions of this policy, so you can review the changes.
Contacting Us
If you have are any question regarding this Privacy Policy, or any enquiry about your personal data, please reach out to the Elevant.AI Helpdesk or contact us via email at info@elevant.ai.
Acceptable Use Policy
Usage of Elevant.AI is subject to this Acceptable Use Policy (AUP). This AUP is incorporated by reference into, and governed by the Elevant.AI Agreement between you (Customer) and Elevant.AI (BV). Customers who are found to be violating these rules may see their subscriptions suspended without prior notice. The subscription fees will usually not be refunded.
Illegal or Harmful Use
You may not use Elevant.AI for storing, displaying, distributing or otherwise processing illegal or harmful content. This includes:
· Illegal Activities: promoting gambling-related sites or services, or child pornography.
· Harmful or Fraudulent Activities: Activities harmful to others, such as promoting fraudulent goods, services, schemes, or promotions (e.g., make-money-fast schemes, ponzi and pyramid schemes, phishing, false advertising, ...), or engaging in other deceptive practices.
· Infringing Content: Content that infringes the intellectual property of others.
· Offensive Content: Content that is defamatory, obscene, abusive, invasive of privacy, or otherwise objectionable, including content that constitutes child pornography, relates to bestiality, or depicts non-consensual sex acts.
· Harmful Content: Malicious and malware content, such as viruses, trojan horses, worms, etc.
· Deceptive Links: Links that deceive users into visiting malicious or dangerous websites, gather affiliate visitors/clicks, or artificially inflate the reputation of other websites.
· Spam Content: Content that is published for "black hat SEO" purposes, using tricks such a link building / link spam, keyword spam, in order to exploit the reputation of Elevant.AI services for promoting third-party content, goods or services.
Email Abuse
You may not use Elevant.AI for spamming. This includes:
· Unsolicited messages: sending or facilitating the distribution of unsolicited bulk emails and messages, either directly via Elevant.AI or indirectly via third-party email services. This includes the use of bulk emails lists. Any mass-mailing activity is subject to the applicable legal restrictions, and you must be able to show evidence of consent/opt-in for your bulk email distribution lists.
· Spoofing: sending emails or messages with forged or obfuscated headers, or assuming an identity without the sender's permission
Security Violations
You may not attempt to compromise Elevant.AI, to access or modify content that does not belong to you, or to otherwise engage in malicious actions:
· Unauthorized access: accessing or using any Elevant.AI system or service without permission
· Security research: conducting any security research or audit on Elevant.AI systems without written permission to do so, including via scanners and automated tools.
· Eavesdropping: listening to or recording data that does not belong to you without permission
· Other attacks: non-technical attacks such as social engineering, phishing, or physical attacks against anyone or any system
Network and Services Abuse
You may not abuse the resources and systems of Elevant.AI. In particular the following activities are prohibited:
· Network abuse: causing Denial of Service (DoS) by flooding systems with network traffic that slows down the system makes it unreachable, or significantly impacts the quality of service
· Unthrottled RPC/API calls: sending large numbers of RPC or remote API calls to our systems without appropriate throttling, with the risk of impacting the quality of service for other users.
· Overloading: voluntarily impacting the performance or availability of systems with abnormal content such as very large data quantities, or very large numbers of elements to process, such as email bombs.
· Unmetered Storage: On Elevant.AI, accounts exceeding 100 GB of storage may be reviewed to maintain optimal performance for all users.
· Crawling: automatically crawling resources in a way that impacts the availability and performance of the systems
· Attacking: using the Elevant.AI to attack, crawl or otherwise impact the availability or security of third-party systems
· Abusive registrations: using automated tools to repeatedly register or subscribe to Elevant.AI, or registering or subscribing with fake credentials, or under the name of someone else without their permission.
Reporting Abuse
Reports for any abusive behavior using Elevant.AI services may be sent to the responsible team via email at info@elevant.ai.