Privacy Policy

This policy describes how Elevations (“we,” “us”) collects, uses, and protects information when you use our Service. It applies to information you provide directly, information generated by your use of the Service, and information automatically collected by our infrastructure providers.

Account information. When you sign up we collect your name, email address, role within your organization, and (if you subscribe to a paid plan) information needed to process payment. Payment card details are collected and stored by our payment processor, not by us.

Content you upload. Photos, annotations, pin coordinates, notes, addresses, and other inspection details you enter into the Service. Photos you upload may incidentally include images of people, vehicles, license plates, signage, or other property that we do not control. You are responsible for your right to capture and upload such images under applicable law.

Usage data. Pages viewed, features used, IP-address-derived approximate location, browser and device metadata, and timestamps. This is collected automatically by our hosting provider for operational and security purposes.

We use the information described above to:

• Provide, maintain, and improve the Service.
• Generate and deliver reports, share links, and exports you request.
• Communicate with you about your account, our Service, and changes to either.
• Detect, prevent, and respond to fraud, abuse, or security incidents.
• Meet our legal and tax obligations.

We do not sell your personal information. We do not use uploaded content to train machine-learning models.

We rely on a small number of trusted vendors to operate the Service. We share only what each one needs to do its job.

• Supabase— database, authentication, and private file storage for the photos and content you upload.
• Vercel— application hosting and edge networking. Vercel processes request metadata as part of serving the Service.
• Stripe— payment processing and subscription management. Stripe handles all payment card data directly; we receive only a token and a high-level summary.

We may add or change subprocessors as the Service evolves and will update this list when we do.

When you generate a share link for an inspection, anyone who receives that URL can view the inspection contents until you revoke the link. Share links are not indexed by search engines, and we do not transmit them to any third party. You are responsible for who you share a link with.

We retain your account and content while your account is active. When you delete an inspection or an account, the underlying rows are soft-deleted and removed from your view immediately; we purge them from storage on a routine cleanup cadence (typically within 30 days). Backups containing soft-deleted data may persist longer for disaster-recovery purposes but are not accessible from the application.

We use industry-standard practices to protect your data, including encryption in transit, encryption at rest for stored files, scoped database access via row-level security, and secret-rotation policies for our internal credentials. No system is perfectly secure; if you discover a vulnerability, please report it to hello@elevations.app.

You can access and edit most of your information directly inside the Service. To request a copy of your data in machine-readable form, to correct information you cannot edit yourself, or to delete your account and associated content, email hello@elevations.app. Residents of certain states (including California) may have additional rights under local law — we'll honor those requests in accordance with the applicable statute.

The Service is intended for use by exterior restoration professionals and insurance adjusters. It is not directed at children under 16, and we do not knowingly collect personal information from anyone in that age range. If you believe a child has provided us with information, contact us and we will delete it.

We use a small number of essential cookies to keep you signed in and to remember your preferences. We do not currently load third-party advertising or behavioral-analytics trackers. If that changes, this policy will be updated and (where required by law) consent will be requested.

The Service is operated from the United States. If you access it from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States.

We may update this policy from time to time. Material changes will be announced via the email associated with your account or a prominent notice on the Service. The “Last updated” date at the top reflects the latest revision.

Questions, requests, or complaints? Email hello@elevations.app.

See also our Terms of Service.