Legal
Privacy Policy
Elevare Solutions (“Elevare,” “we,” “our”) respects your privacy. This Policy explains what information we collect, how we use it, when we share it, and the choices you have.
1. Information We Collect
- Account & contact: name, business name, email, phone, address, role.
- Business data: revenue, expenses, vendor list, payroll, BBB rating history, uploaded documents.
- Payment: processed by Stripe. Elevare never sees your full card number, CVC, bank account, or routing number.
- Identity verification: processed by Stripe Identity. Elevare receives only a “verified/unverified” result.
- Banking: connected via Stripe Financial Connections. Elevare stores only bank brand + last 4 digits.
- Usage: pages visited, features used, and diagnostic activity via standard analytics.
2. How We Use Information
- Deliver the Services you request (analyses, plans, reports, communications).
- Process bookings, payments, and refunds (see Terms § 3).
- Improve our AI models, dashboards, and tooling in aggregate/anonymised form.
- Send transactional email (Resend, via Emergent-managed integration).
- Comply with legal, tax, and audit obligations.
3. When We Share Information
We share information only with (a) sub-processors necessary to run the Services (Stripe, Emergent hosting, Apify for public BBB data, Resend for email); (b) our founders and contracted advisors bound by confidentiality; (c) authorities where legally compelled. We do not sell personal information.
4. Data Security
Client vault documents are encrypted at rest using Fernet symmetric encryption. Passwords are hashed with bcrypt. Portal sessions use JWT with HttpOnly cookies over HTTPS. Sensitive financial data (card, ACH, SSN, government ID) is handled entirely by Stripe — never stored on Elevare servers.
5. Retention
We retain business data for the life of the engagement plus 7 years for tax and audit purposes. You may request deletion of non-obligatory data at any time by emailing kalib@elevaresolutions.me; certain records (financial, transactional) must be retained per applicable law.
5A. Recurring Payment Authorization Records
When you sign a Recurring ACH Debit Authorization inside your Customer Portal, we record the name you typed as your electronic signature, the date and time you signed, the terms version you accepted, and the IP address and browser you signed from. We keep this record for as long as the authorization is active plus two (2) years after you revoke it, in order to comply with the E-Sign Act and NACHA operating rules. You may request a copy of your authorization record at any time by emailing kalib@elevaresolutions.me.
6. Your Rights
Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. Contact us at kalib@elevaresolutions.me to exercise these rights. If you are in the EU/UK/California you have additional rights under GDPR / CCPA; we will respond within statutory windows.
7. Cookies
We use strictly-necessary cookies for authentication (portal session) and preferences (time-zone). We do not use tracking cookies for third-party advertising.
8. Children
The Services are not directed to individuals under 18. We do not knowingly collect data from children.
9. International Transfers
Data may be processed in the United States or other countries where our sub-processors operate. By using the Services you consent to such transfers.
10. Changes
We may update this Policy by posting a new version on this page. Continued use of the Services after the “Updated” date constitutes acceptance.
11. Contact
Elevare Solutions
Kalib Whaley — Founder & CEO — kalib@elevaresolutions.me
John Caron — Co-Founder & COO — john@elevaresolutions.me
Kalib Whaley — Founder & CEO — kalib@elevaresolutions.me
John Caron — Co-Founder & COO — john@elevaresolutions.me
Last updated August 4, 2026. See also the Terms of Service.