Privacy Policy

Last updated: April 8, 2026

1. Introduction

ElevatedIQ ("we," "our," or "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

2. Information We Collect

Information you provide

• Name and business email when you create an account or request a demo
• Company name, role, and phone number (optional)
• Billing and payment information (processed by Stripe; we do not store card numbers)
• Support inquiries and correspondence

Information collected automatically

• IP address, browser type, operating system, and device identifiers
• Pages visited, time spent, and referral source
• Cookies and similar technologies (see Section 6)

Cloud environment data

• Resource metadata, IAM policies, cost data, and configuration snapshots from connected cloud accounts (AWS, Azure, GCP)
• This data is used solely to deliver governance, compliance, and optimization services, and is never sold or shared for advertising

3. How We Use Your Information

• Provide, operate, and improve the ElevatedIQ platform
• Send transactional communications (invoices, security alerts, product updates)
• Respond to support requests and communicate with you
• Comply with legal obligations and enforce our Terms of Service
• Detect and prevent fraud, abuse, and security threats

4. Data Sharing

We do not sell your personal information. We may share data only with:

• Service providers — hosting (GCP, AWS), payment processing (Stripe), analytics (Plausible, no-cookie)
• Legal obligations — when required by law, court order, or lawful government request
• Business transfers — in connection with a merger, acquisition, or sale of assets (you will be notified)

5. Data Retention

We retain account data for the duration of your subscription plus 90 days. Cloud environment data is retained for 12 months for trend analysis. You may request earlier deletion at any time.

6. Cookies

We use only essential cookies required for authentication and security. We do not use third-party advertising or tracking cookies. You may disable cookies in your browser settings, but some features may not function correctly.

7. Security

We employ industry-standard safeguards including encryption at rest and in transit (TLS 1.3), mutual TLS for internal services, AES-256 for stored data, and continuous vulnerability scanning. We maintain SOC 2 Type II and FedRAMP Ready certifications.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict processing
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, contact us at [email protected].

9. International Transfers

ElevatedIQ is based in the United States. If you access our services from outside the U.S., your information may be transferred to and processed in the U.S. We rely on Standard Contractual Clauses (SCCs) and equivalent safeguards for lawful data transfers.

10. Children

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 30 days before they take effect.

12. Contact Us

If you have questions about this Privacy Policy, please contact:

ElevatedIQ — Privacy Team
Email: [email protected]