Privacy policy · Elevare

Last updated: 24 October 2026

This policy explains how Elevare Research & Deployment Lab (“Elevare”, “we”, “us”) handles personal data when you visit elevare.in, join our waitlist, contact us, or use our apps and services. It is written to meet the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Digital Personal Data Protection Rules, 2025, and the Information Technology Act, 2000 and its rules.

For the personal data described here, Elevare is the Data Fiduciary. When an organization uses our Services and puts other people’s data into them, that organization decides how the data is used and we process it on its behalf; see “Data we process for organizations” below.

What we collect

Waitlist: your name, email, whether you are signing up for yourself or an organization, and optionally your organization and role, with a record of the consent you gave and when.
Contact form: your name, email and message.
Accounts and billing, when you use a paid Service: your name, email, organization, billing address, GST number if you give one, and records of payments. Card, UPI and bank details go directly to our payment partner; we do not receive or store them.
Use of the Services: what you do in them, settings, and support conversations, so we can run, secure and improve them.
Technical data: requests to our servers, browser type, and a salted, one-way hash of your IP address, used to stop form spam and abuse. We do not store your IP address itself with form submissions.

Cookies and analytics

This website sets no advertising or tracking cookies. If we measure visits, we use cookieless analytics that count page views in aggregate without identifying you or following you across sites. Our apps use cookies that are strictly necessary to keep you signed in and secure.

Why we use it

To contact you about early access, if you joined the waitlist and agreed to it.
To answer your messages.
To provide the Services you sign up for, bill for them, and support you.
To keep the website and Services secure, and to prevent fraud and abuse.
To meet legal obligations, such as tax and accounting records.

We rely on your consent, which you can withdraw at any time, or on the legitimate uses the DPDP Act allows, such as using data you gave us voluntarily for the purpose you gave it, and complying with the law. We do not sell personal data, and we do not use it for advertising.

Who we share it with

We share personal data only with service providers that help us run the Services, under contracts that limit them to processing it on our instructions:

Cloud hosting and database providers.
Email delivery providers.
Payment gateways, for payments and refunds.
AI model providers, when a Service needs them to process your request. We use them under terms that do not allow them to train their models on that data.

We may also disclose data when the law requires it, to a government authority with lawful power to ask for it, or to protect people from harm. If Elevare is merged or acquired, data may pass to the new owner under this policy.

Where it is stored

Our providers may store or process data outside India. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and require the same protection there as here.

How long we keep it

Waitlist entries: until early access opens and for 12 months after, or until you ask us to remove you.
Contact messages: up to 24 months after the conversation ends.
Account data: while your account is open, then up to 90 days, unless you ask us to delete it sooner.
Billing and tax records: 8 years, as Indian tax and company law requires.
Security logs: at least one year, as the law requires, and no longer than needed.

When the purpose ends, we delete the data or make it anonymous.

Your rights

Under the DPDP Act you can:

Ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with.
Ask us to correct, complete or update it.
Ask us to erase it, unless we must keep it by law.
Withdraw consent at any time, as easily as you gave it. Withdrawal does not affect what was done before.
Nominate someone to exercise these rights if you die or become unable to.
Raise a grievance with us, and, if you are not satisfied, with the Data Protection Board of India.

Write to [contact email] to exercise any of these. We may need to confirm who you are first, and we respond within 30 days.

Data we process for organizations

When an organization uses our Services, the personal data it puts into them is processed on its instructions under our agreement with it. If your data reached us that way, the organization is the Data Fiduciary, and requests about that data should go to it first; we will help it answer them.

See our Data protection page (elevare.in/legal/data-protection) for how we protect that data.

Security

We protect personal data with reasonable security safeguards, including encryption in transit and at rest, access limited to the people who need it, and monitoring. If a breach affects your personal data, we will tell you and the Data Protection Board of India as the law requires.

Children

The Services are not meant for anyone under 18, and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.

Changes to this policy

We post updates here with a new date, and tell you by email before any change that affects how we use data you have already given us.

Grievance officer

In line with the Information Technology Act, 2000, its rules and the Digital Personal Data Protection Act, 2023, our grievance officer is [grievance officer’s name]. Write to [contact email] with “Grievance” in the subject line, or by post to [registered address].

We acknowledge a grievance within 24 hours and resolve it within 15 days of receiving it, or tell you why we need longer.

Contact

Elevare Research & Deployment Lab
Registered address: [registered address]
Email: [contact email]
Phone: [phone number]