PRIVACY POLICY
Last updated: October 20, 2026
GoElev8.ai (“we,” “us,” or “our”) operates the goelev8.ai website and platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
1. Information We Collect
Account Information: Name, email address, phone number, business name, and billing information when you create an account.
Lead Data: Information submitted through funnel pages by your leads, including name, email, phone number, and any additional form data.
Usage Data: Pages visited, features used, IP address, browser type, device information, and interaction timestamps.
Payment Data: Processed securely by Stripe. We never store credit card numbers on our servers.
Communications: SMS messages sent and received through our platform, call recordings and transcripts from AI phone agents.
2. How We Use Your Information
- To provide and maintain our services
- To process transactions and send billing notices
- To send SMS messages and make AI phone calls on behalf of our users
- To improve our platform and develop new features
- To communicate with you about your account and provide support
- To comply with legal obligations
3. Data Sharing
We do not sell your personal data. We share data only with:
- Service Providers: Stripe (payments), Twilio (SMS), Vapi (voice AI), Supabase (database), Vercel (hosting), Resend (email)
- Business Users: Lead data is shared with the business whose funnel page the lead submitted to
- Legal Requirements: When required by law, regulation, or legal process
4. Google User Data
The GoElev8.ai client portal lets a business owner connect their Google account. We request only the access listed below, and only when the owner chooses to connect.
Gmail (scope: https://www.googleapis.com/auth/gmail.send): Used only to send email that the owner, or the portal on the owner's behalf, writes to the owner's own customers (for example booking confirmations, follow-ups and messages the owner composes in the portal). Messages go out from the owner's address and appear in their Gmail Sent folder. We cannot read, search, or delete the owner's email, and we never access their inbox. A copy of each email the portal sends is delivered to GoElev8's operator mailbox for support and record-keeping.
Google Calendar (scopes: https://www.googleapis.com/auth/calendar.events and https://www.googleapis.com/auth/calendar.readonly): Used to read the owner's calendar events so times they're already busy are hidden from their public booking page, to list their calendars so they can choose which one to sync, and to add confirmed bookings to their calendar as events.
Basic profile (openid, email): Used to show which Google account is connected.
Storage and Security: OAuth tokens are stored on our servers, are never sent to the browser, and access is restricted to the systems that send email or sync the calendar.
Retention and Revocation: The owner can disconnect at any time in the portal (Settings) or at https://myaccount.google.com/permissions. When they disconnect in the portal, we revoke access with Google and delete the stored tokens. Tokens are also deleted if the account is closed.
No Sale or Other Uses: We do not sell Google user data, use it for advertising, or use it to develop, improve, or train generalized AI or machine-learning models. We do not allow humans to read it except with the owner's permission, for security purposes, or to comply with the law.
Limited Use: GoElev8.ai's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Data Retention
Account data is retained for the duration of your account plus 30 days after deletion. Lead data is retained according to the account holder's retention settings. Demo/test data is purged daily.
6. Your Rights (GDPR / CCPA)
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for data processing
- Object to automated decision-making
7. Data Deletion
To request deletion of your data, email privacy@goelev8.ai or use the “Delete Account” option in your portal settings. We will process your request within 30 days.
8. Security
We implement industry-standard security measures including encryption at rest and in transit, rate limiting, CSRF protection, and row-level security on all database tables.
9. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to registered users.
12. Contact
GoElev8.ai
Aaron Bryant
Email: privacy@goelev8.ai