Privacy Policy
Last updated: June 12, 2026
1. Information We Collect
We collect information you provide directly to us when you create an account, use our services, or contact us. This includes firm name, user names, email addresses, phone numbers, and case-related data you input into the platform. We also collect usage data such as log files, device information, and how you interact with the platform.
2. How We Use Your Information
We use the information to provide, maintain, and improve our services; to send you technical notices and support messages; to respond to your inquiries; and to comply with legal obligations. We do not sell your personal data or client data to third parties.
3. Data Isolation & Multi-Tenancy
Each law firm's data is isolated through row-level security (RLS) at the database level. No firm can access another firm's clients, cases, or communications. Our architecture ensures complete data separation between tenants.
4. Data Storage & Security
Your data is stored on Supabase-managed PostgreSQL databases hosted on AWS. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We implement regular backups and security monitoring.
5. Third-Party Services
We use Twilio for VoIP and SMS, SendGrid for email, Stripe for payment processing, and ElevenLabs for voice features. These services process data only as necessary to provide the functionality you use. Each has its own privacy policy.
6. Client Data
The personal data of your clients (names, addresses, immigration case details) is processed solely on your behalf. You are the data controller for your clients' data. We act as a data processor. You are responsible for obtaining appropriate consents from your clients.
7. Data Retention
We retain your data as long as your account is active. Upon account cancellation, we will retain your data for 30 days before permanent deletion, giving you time to export it. You may request data export at any time.
8. Your Rights
You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@elevanta.tech. We will respond within 30 days.
9. Contact
For privacy-related questions, email privacy@elevanta.tech or write to: Elevanta, Inc., United States.