What Elevate collects
Your account
- Your name and email address, used to sign you in with a single-use link and to send you messages about your workspace.
- Your business details from signup and setup: business name, website, services, audience, goals, brand colors, voice and logo.
- A record of sign-ins and of important actions in your workspace (for example approving or scheduling a post), so changes can be traced to the person who made them.
What you upload or create
- Photos, videos and other files you add to your content library.
- The posts, captions, hashtags, images and videos Elevate creates for you, and your edits and approvals.
Accounts you connect
When you connect Instagram and Facebook through Meta, you choose which permissions to grant. Elevate then receives:
- The name and ID of your Facebook Page and Instagram business account.
- An access token, stored encrypted, that lets Elevate act only within the permissions you granted.
- Results for your account and for the posts Elevate published, such as reach, views, likes, comments, shares and saves.
Elevate uses these permissions only to publish the posts you approve, at the times you choose, and to show you how they performed. It does not read your private messages, post anything you have not approved, or sell or share your Meta data for advertising.
If you connect Google Analytics or Search Console, Elevate reads website traffic and search results, read-only, to inform your plan.
Payments
Payments are handled by Stripe. Elevate receives your plan, payment status and billing history, never your full card number.
Who else receives it
Elevate relies on these services to run. Each receives only what it needs for its part:
- Cloudflare hosts Elevate and stores its database and your files.
- Meta (Instagram and Facebook) receives the posts you approve for publishing and returns their results.
- Stripe processes subscription payments.
- Resend delivers sign-in links and workspace emails.
- AI model providers (such as OpenAI, Anthropic, Google and Higgsfield, depending on the feature) receive your business details and the media needed to write captions and create images or videos for you.
- Google, only if you connect Google Analytics or Search Console.
Elevate does not sell personal information. It discloses information to others only as described here, when you ask it to, or when the law requires it.
How long it is kept
- Sign-in links expire after 15 minutes and work once. Sign-in sessions last up to 30 days.
- An unconfirmed signup expires after 14 days.
- Results for a published post are refreshed for 90 days after it posts.
- Disconnecting Instagram and Facebook deletes Elevate’s stored access token right away. You can also remove Elevate in your Meta settings.
- Everything else stays while your workspace is active, and is deleted when you ask (see below). Payment records stay with Stripe, which keeps them as the law requires.
Your choices
- Nothing is posted to your accounts unless you approve it.
- A workspace owner can disconnect any connected account at any time from Data Connections.
- You can ask for a copy of your information, a correction, or its deletion. See Delete your data.
Security
Connection tokens are encrypted before they are stored. Files you upload are private and are served only to signed-in members of your workspace, or to Meta for a post you approved. Every request is checked against your workspace and your role.
Children
Elevate is a tool for businesses and is not meant for anyone under 18.
Changes and contact
If this policy changes in a way that matters, we will tell workspace owners by email before it takes effect. For any privacy question, contact the Elevate operator and we will answer within 30 days.