Privacy Policy

Elvtera

AI-Powered Systems. Built Around Your Business.

1. Introduction

This Privacy Policy explains how Elvtera collects, uses, stores, shares, and protects personal and business information when you visit our website at https://elvtera.com, communicate with us, or use our services.

Elvtera is a technology brand operated by two legal entities:

• Collins Enterprise Solutions LLP, Tamil Nadu, India
• Josh Global Brands LLC, Florida, United States

The entity that acts as the data controller for your information depends on your location and on the contracting entity named in your proposal, quotation, invoice, contract, or order confirmation. Throughout this policy, "Elvtera", "we", "our", and "us" refer to whichever of these entities is responsible for your engagement.

By using our website or services, you agree to the practices described here. If you do not agree, please stop using our website and services.

2. Information We Collect

We collect information in a few different ways, depending on how you interact with us.

2.1 Personal Data

Information that identifies you as an individual, which may include your name, email address, phone number, job title, company name, billing address, and any details you share when you contact us or fill out a form.

2.2 Business Data

Information relating to your organisation and the projects we deliver for you. This can include company records, operational data, workflow configurations, customer databases you ask us to work with, CRM and ERP data, documents, and other material you provide so we can perform our services.

2.3 Usage Data

Technical information collected automatically when you visit our website, such as your IP address, browser type and version, device information, pages viewed, time spent on pages, referring URLs, and general interaction patterns.

2.4 Communication Data

Records of your correspondence with us across email, chat, WhatsApp, voice calls, support tickets, and meeting platforms, including the content of those communications and any attachments.

2.5 Payment Data

When you pay us, limited billing information is processed. We do not store full card numbers on our own systems. Payment details are handled directly by our payment processors, described in Section 5.

3. Cookies and Analytics

Our website uses cookies and similar technologies to operate correctly, remember your preferences, and understand how visitors use the site. We also use analytics tools that generate aggregated statistics about traffic and behaviour.

You can control cookies through your browser and through the choices described in our separate Cookie Policy, which forms part of this Privacy Policy.

4. How We Use Your Information

We use the information we collect to:

• Provide, deliver, and maintain our services
• Respond to enquiries and communicate with you about projects
• Prepare proposals, quotations, invoices, and contracts
• Process payments and manage billing
• Configure, build, and support the software and automations you engage us for
• Improve our website, services, and customer experience
• Send service updates and, where permitted, relevant marketing
• Comply with legal, tax, and regulatory obligations
• Detect, prevent, and address fraud, abuse, and security issues

We rely on one or more lawful bases for processing, including your consent, the performance of a contract with you, our legitimate business interests, and compliance with legal obligations.

5. Third-Party Service Providers

We work with trusted third parties to run our business and deliver our services. These providers process information only as needed to perform their functions.

5.1 Payment Providers

Depending on your location and the contracting entity, payments may be processed through Bank Transfer, Stripe, Razorpay, Wise, PayPal, or UPI. Each provider handles your payment information under its own privacy terms.

5.2 AI Providers

Our services often involve artificial intelligence platforms including OpenAI, Anthropic, and Google Gemini. When a project requires it, data may be sent to these platforms to generate outputs, power AI agents, chatbots, voice agents, and automations. We take reasonable steps to limit what is shared and to select providers with appropriate data protection commitments. Where a provider offers options to exclude data from model training, we prefer those options for client work.

5.3 Infrastructure and Tooling Providers

We use cloud and software platforms such as AWS, Oracle Cloud, Azure, GCP, Supabase, Docker, n8n, ERPNext, Frappe, and Twenty CRM to host, build, and operate solutions. These providers may store or process data on our behalf.

5.4 Analytics and Communication Tools

We use analytics services and communication platforms, including WhatsApp for messaging automations, to run our website and interact with you.

A more detailed description of processors used in a specific engagement is available in our Data Processing Addendum.

6. Data Retention

We keep personal and business data only for as long as necessary to fulfil the purposes described in this policy, to provide ongoing services, and to meet our legal, accounting, and tax obligations.

When data is no longer required, we delete it or anonymise it. Retention periods vary by data type and by the legal requirements that apply to each contracting entity. On request, and subject to any legal holds, we will delete or return project data after an engagement ends, as set out in your contract and our Data Processing Addendum.

7. Security

We apply reasonable and appropriate technical and organisational measures to protect information against unauthorised access, loss, misuse, and alteration. These measures include access controls, encryption in transit where supported, restricted credentials, secured infrastructure, and internal policies limiting who can access client data.

No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security, and you share information with us at your own risk.

8. International Data Transfers

Elvtera operates across India and the United States and works with clients worldwide. Your information may be transferred to, stored in, or processed in countries other than your own, including India and the United States, and in the regions where our cloud providers operate.

Where required by law, we put appropriate safeguards in place for these transfers, such as standard contractual clauses or equivalent mechanisms. By using our services, you understand that your information may be processed outside your country of residence.

9. Your Rights

Depending on where you live and which laws apply, you may have some or all of the following rights over your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data
• The right to restrict or object to certain processing
• The right to data portability
• The right to withdraw consent at any time, without affecting processing already carried out
• The right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at hello@elvtera.com. We will respond within the timeframes required by applicable law and may need to verify your identity first.

10. GDPR (European Economic Area and United Kingdom)

If you are located in the EEA or the UK, we process your personal data in line with the General Data Protection Regulation and equivalent UK legislation.

Where we act as a data controller, we rely on a lawful basis for each processing activity. Where we process personal data on your behalf as part of delivering services, we act as a data processor, and that relationship is governed by our Data Processing Addendum. You have the rights listed in Section 9, and you may contact us to exercise them or to raise concerns about how your data is handled.

11. CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act, as amended, gives you specific rights regarding your personal information. These include the right to know what personal information we collect and how we use it, the right to request deletion, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights.

Elvtera does not sell your personal information. If you would like to exercise your California rights, contact us at hello@elvtera.com.

12. India (Digital Personal Data Protection Act)

Where Collins Enterprise Solutions LLP is the contracting entity, we process personal data in accordance with India's Digital Personal Data Protection Act, 2023, and applicable rules. This includes processing data for lawful purposes, obtaining consent where required, and honouring your rights to access, correct, and erase your personal data. You may contact us to exercise these rights.

13. Children's Privacy

Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under the age of 16 (or the minimum age set by local law). If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top and, where appropriate, notify you. Your continued use of our website or services after an update means you accept the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please reach out.

Email: hello@elvtera.com

Website: https://elvtera.com

Collins Enterprise Solutions LLP

1508C Devangar Nagar, Madhurapuri PO

Turaiyur, Tiruchirappalli

Tamil Nadu 621010, India

Josh Global Brands LLC

7901 4th Street North, Ste 300

St. Petersburg, FL 33702

United States

This Privacy Policy should be read together with our Terms of Service, Cookie Policy, Acceptable Use Policy, and Data Processing Addendum.